last executing test programs: 5m23.674515037s ago: executing program 32 (id=354): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 3m8.725355623s ago: executing program 33 (id=6988): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) 3m7.687077776s ago: executing program 34 (id=7045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000009000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 2m37.887067992s ago: executing program 35 (id=8468): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') openat(r1, &(0x7f0000000280)='./cgroup\x00', 0x40, 0x0) 2m32.504848237s ago: executing program 36 (id=8715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) alarm(0x7fff) 2m26.755285101s ago: executing program 37 (id=9002): r0 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1e}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2m18.178694794s ago: executing program 38 (id=9459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x3, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0xd840) 2m11.101696435s ago: executing program 39 (id=9826): unshare(0x40280) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r0, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x8000, &(0x7f0000000340)={0xf, 0x8, 0x80000}, 0x20) 1m29.149362282s ago: executing program 40 (id=12073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) statfs(&(0x7f0000000580)='./file0\x00', 0x0) 23.088510476s ago: executing program 4 (id=15611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 23.087885186s ago: executing program 4 (id=15613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 23.03538304s ago: executing program 4 (id=15616): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000180)={0x2750, 0x3, 0x1fff, 0xf, 0x1, "0982aa2594a49e680d061bb20756a5e7af8bc6", 0x80003, 0x10000}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x88002) write$evdev(r1, &(0x7f0000000000), 0xaa6f50) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) 23.03440591s ago: executing program 4 (id=15619): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xc8, 0x3a, 'freezer.state\x00', 0x3a, 'ext4\x00', 0x3a, './file0/file0'}, 0x40) 22.800691289s ago: executing program 4 (id=15631): r0 = io_uring_setup(0x177e, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 22.693351688s ago: executing program 4 (id=15636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) 22.693122668s ago: executing program 41 (id=15636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) 19.429341221s ago: executing program 2 (id=15783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.304425311s ago: executing program 2 (id=15791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf2ff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x81, 0x0, 0x0, {{0x8f, 0x0, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) 19.171290742s ago: executing program 2 (id=15799): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) 18.359005028s ago: executing program 2 (id=15844): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x8000000000000001, 0x0, 0x2}) 18.262592056s ago: executing program 2 (id=15848): getgroups(0x2, &(0x7f0000002040)=[0x0, 0x0]) setresgid(r0, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x84) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x1}], {0x10, 0x6}, {0x20, 0x4}}, 0x2c, 0x3) chdir(&(0x7f0000000040)='./file0\x00') 17.59444092s ago: executing program 2 (id=15868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 17.574249901s ago: executing program 42 (id=15868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 16.800612454s ago: executing program 3 (id=15903): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 16.782940325s ago: executing program 3 (id=15905): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) recvfrom(r0, 0x0, 0x0, 0x40000100, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0x100, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 16.700419031s ago: executing program 3 (id=15910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 16.620690738s ago: executing program 3 (id=15914): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x221) 16.560005083s ago: executing program 3 (id=15924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x26020480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000180), 0x0}, 0x20) 16.391264237s ago: executing program 3 (id=15923): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 16.377846608s ago: executing program 43 (id=15923): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 13.87888856s ago: executing program 6 (id=16018): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$revoke(0x3, r2) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r3) 13.87859166s ago: executing program 6 (id=16019): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13.804551706s ago: executing program 6 (id=16026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 13.792642046s ago: executing program 6 (id=16028): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 13.62383408s ago: executing program 6 (id=16037): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xf801, 0x206, 0xffff2ef5, 0x2}, &(0x7f00000000c0)=0x10) 13.201455294s ago: executing program 6 (id=16067): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) 13.180870426s ago: executing program 44 (id=16067): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) 7.963212137s ago: executing program 5 (id=16278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 7.9333348s ago: executing program 5 (id=16279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) 7.913991161s ago: executing program 5 (id=16280): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x800, 0x6}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 7.873565764s ago: executing program 5 (id=16282): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xc8, 0x3a, 'freezer.state\x00', 0x3a, 'ext4\x00', 0x3a, './file0/file0'}, 0x40) 7.609154516s ago: executing program 5 (id=16293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 7.381808964s ago: executing program 5 (id=16299): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x800, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 7.376292274s ago: executing program 45 (id=16299): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x800, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 1.576102553s ago: executing program 0 (id=16580): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.36576468s ago: executing program 1 (id=16585): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.326677823s ago: executing program 0 (id=16589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) shutdown(r0, 0x1) 1.261867488s ago: executing program 0 (id=16591): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 1.168086236s ago: executing program 7 (id=16596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x3e, 0x400000000000005, 0x0) 1.146298228s ago: executing program 7 (id=16597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 934.064314ms ago: executing program 7 (id=16609): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) 761.808248ms ago: executing program 0 (id=16600): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 642.138578ms ago: executing program 0 (id=16602): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x40088d1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r0) 598.615672ms ago: executing program 0 (id=16603): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) clock_gettime(0x6, &(0x7f00000002c0)) io_pgetevents(r1, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 561.020935ms ago: executing program 8 (id=16605): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000280)) 485.855501ms ago: executing program 1 (id=16606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setuid(0x0) 444.394284ms ago: executing program 7 (id=16619): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) 385.859249ms ago: executing program 1 (id=16610): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 327.638563ms ago: executing program 9 (id=16612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) 251.46679ms ago: executing program 9 (id=16613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x2) 251.11661ms ago: executing program 8 (id=16614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4bfb, &(0x7f0000000000)) 221.176312ms ago: executing program 1 (id=16615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 220.687052ms ago: executing program 8 (id=16616): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x4}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 165.719477ms ago: executing program 8 (id=16617): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wg1\x00'}}, 0x1e) close(r0) 165.602777ms ago: executing program 9 (id=16618): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 165.475227ms ago: executing program 7 (id=16620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 165.129857ms ago: executing program 9 (id=16621): r0 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 132.975009ms ago: executing program 1 (id=16622): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) 118.041831ms ago: executing program 9 (id=16623): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r0) 114.167521ms ago: executing program 8 (id=16624): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r2], 0x7c}}, 0x80) 102.065401ms ago: executing program 1 (id=16625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 101.727682ms ago: executing program 9 (id=16626): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.668799ms ago: executing program 8 (id=16627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=16637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x9, r3, 0x0, 0x0, 0x400a00}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f00000000c0)="e321fb92d586", 0x6, 0x7ff, 0x0, 0x2}]) kernel console output (not intermixed with test programs): 13'. [ 306.896333][ T2493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.984127][ T2515] loop3: detected capacity change from 0 to 1024 [ 307.003390][ T2515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.019137][ T2515] EXT4-fs (loop3): shut down requested (0) [ 307.048904][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.288787][ T2559] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 307.652377][ T2620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13991'. [ 307.758886][ T2648] pim6reg: entered allmulticast mode [ 307.768202][ T2648] pim6reg: left allmulticast mode [ 307.829667][ T2658] loop2: detected capacity change from 0 to 128 [ 307.852232][ T2658] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 308.498612][ T2721] loop3: detected capacity change from 0 to 512 [ 308.517703][ T2721] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 308.535918][ T2721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.549347][ T2721] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.14034: Failed to acquire dquot type 1 [ 308.568612][ T2721] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14034: bg 0: block 40: padding at end of block bitmap is not set [ 308.584945][ T2726] netlink: 'syz.1.14045': attribute type 1 has an invalid length. [ 308.637441][ T2721] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 308.650239][ T2721] EXT4-fs (loop3): 1 truncate cleaned up [ 308.657972][T25016] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.667850][ T2721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.721127][ T2733] loop2: detected capacity change from 0 to 512 [ 308.739702][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.750052][ T2733] journal_path: Non-blockdev passed as './bus' [ 308.756376][ T2733] EXT4-fs: error: could not find journal device path [ 309.030041][ T2785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14063'. [ 309.081844][ T2762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.091563][ T2762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.166553][ T2802] netlink: 116 bytes leftover after parsing attributes in process `syz.4.14070'. [ 309.365640][ T2832] hub 8-0:1.0: USB hub found [ 309.370511][ T2832] hub 8-0:1.0: 8 ports detected [ 309.475947][ T2852] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.14095'. [ 309.500518][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 309.504671][ T2858] sctp: [Deprecated]: syz.1.14098 (pid 2858) Use of int in max_burst socket option. [ 309.504671][ T2858] Use struct sctp_assoc_value instead [ 309.508229][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 309.530879][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.538630][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.546458][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.554242][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.562017][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.569730][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.577499][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.585258][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 309.598337][ T9] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 309.635515][ T2866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14102'. [ 309.832544][ T2900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14117'. [ 309.905243][ T2902] loop2: detected capacity change from 0 to 256 [ 309.914795][ T2902] FAT-fs (loop2): Directory bread(block 1285) failed [ 309.937449][ T2902] FAT-fs (loop2): Directory bread(block 1285) failed [ 309.992961][ T2916] syzkaller1: entered promiscuous mode [ 309.999099][ T2916] syzkaller1: entered allmulticast mode [ 310.076301][ T2933] loop4: detected capacity change from 0 to 256 [ 310.083338][ T2933] FAT-fs (loop4): Directory bread(block 1285) failed [ 310.092522][ T2933] FAT-fs (loop4): Directory bread(block 1285) failed [ 310.126692][ T2939] loop4: detected capacity change from 0 to 512 [ 310.154384][ T2939] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 310.164529][ T2939] System zones: 0-2, 18-18, 34-35 [ 310.170747][ T2939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.259404][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.445578][ T2989] loop2: detected capacity change from 0 to 256 [ 310.457518][ T2989] FAT-fs (loop2): Directory bread(block 64) failed [ 310.464574][ T2989] FAT-fs (loop2): Directory bread(block 65) failed [ 310.472296][ T2989] FAT-fs (loop2): Directory bread(block 66) failed [ 310.479007][ T2989] FAT-fs (loop2): Directory bread(block 67) failed [ 310.485590][ T2989] FAT-fs (loop2): Directory bread(block 68) failed [ 310.492332][ T2989] FAT-fs (loop2): Directory bread(block 69) failed [ 310.498968][ T2989] FAT-fs (loop2): Directory bread(block 70) failed [ 310.505697][ T2989] FAT-fs (loop2): Directory bread(block 71) failed [ 310.512400][ T2989] FAT-fs (loop2): Directory bread(block 72) failed [ 310.530984][ T2989] FAT-fs (loop2): Directory bread(block 73) failed [ 310.556572][ T2989] syz.2.14156: attempt to access beyond end of device [ 310.556572][ T2989] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 310.786406][ T3029] usb usb8: usbfs: process 3029 (syz.1.14174) did not claim interface 0 before use [ 310.823846][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 310.823860][ T29] audit: type=1400 audit(323.385:14569): avc: denied { setopt } for pid=3036 comm="syz.1.14179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.849517][ T29] audit: type=1400 audit(323.385:14570): avc: denied { name_bind } for pid=3038 comm="syz.2.14180" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 310.870930][ T29] audit: type=1400 audit(323.385:14571): avc: denied { node_bind } for pid=3038 comm="syz.2.14180" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 310.905166][ T29] audit: type=1400 audit(323.460:14572): avc: denied { execute } for pid=3041 comm="syz.1.14181" path="/3024/cpu.stat" dev="tmpfs" ino=15505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.983992][ T29] audit: type=1326 audit(323.557:14573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.1.14185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 311.008243][ T29] audit: type=1326 audit(323.557:14574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.1.14185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 311.031252][ T29] audit: type=1326 audit(323.567:14575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.1.14185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 311.054297][ T29] audit: type=1326 audit(323.567:14576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.1.14185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 311.077398][ T29] audit: type=1326 audit(323.567:14577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.1.14185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 311.100269][ T29] audit: type=1326 audit(323.567:14578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.1.14185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 311.174850][ T3060] loop4: detected capacity change from 0 to 512 [ 311.195795][ T3060] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.14190: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 311.214231][ T3060] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.14190: Bad quota inode: 3, type: 0 [ 311.226260][ T3060] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 311.230024][ T3071] loop3: detected capacity change from 0 to 512 [ 311.248390][ T3060] EXT4-fs (loop4): mount failed [ 311.264816][ T3071] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 311.276112][ T3071] System zones: 0-2, 18-18, 34-35 [ 311.283691][ T3071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.313301][ T3081] sctp: [Deprecated]: syz.1.14198 (pid 3081) Use of int in max_burst socket option deprecated. [ 311.313301][ T3081] Use struct sctp_assoc_value instead [ 311.330886][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.366573][ T3085] lo speed is unknown, defaulting to 1000 [ 311.598344][ T3111] netlink: 'syz.4.14211': attribute type 10 has an invalid length. [ 311.631665][ T3111] team0: Device hsr_slave_0 failed to register rx_handler [ 311.689998][ T3121] netlink: 'syz.4.14216': attribute type 153 has an invalid length. [ 311.765369][ T3137] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 311.819941][ T3142] loop2: detected capacity change from 0 to 512 [ 311.849823][ T3142] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 311.867444][ T3142] System zones: 0-2, 18-18, 34-35 [ 311.878592][ T3142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.021694][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.207416][ T3178] loop2: detected capacity change from 0 to 512 [ 312.241522][ T3178] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 312.265869][ T3178] EXT4-fs (loop2): orphan cleanup on readonly fs [ 312.317213][ T3178] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.14242: corrupted inode contents [ 312.378294][ T3178] EXT4-fs (loop2): Remounting filesystem read-only [ 312.391865][ T3178] EXT4-fs (loop2): 1 truncate cleaned up [ 312.397692][T17758] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 312.408278][T17758] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 312.426464][T17758] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 312.437813][ T3178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.496545][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.516694][ T3216] __nla_validate_parse: 1 callbacks suppressed [ 312.516710][ T3216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14259'. [ 312.539164][ T3220] loop4: detected capacity change from 0 to 512 [ 312.579674][ T3220] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 312.605170][ T3220] EXT4-fs (loop4): mount failed [ 312.722703][ T9346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9346 comm=kworker/1:14 [ 312.742065][ T3253] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 312.821360][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14285'. [ 312.866402][ T3282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14291'. [ 312.913612][ T3295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 313.057036][ T3321] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 313.088093][ T3325] loop2: detected capacity change from 0 to 512 [ 313.099008][ T3325] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.14308: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 313.120049][ T3325] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.14308: Bad quota inode: 3, type: 0 [ 313.131465][ T3325] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 313.148098][ T3325] EXT4-fs (loop2): mount failed [ 313.216698][ T3338] lo speed is unknown, defaulting to 1000 [ 313.310802][ T3345] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.14315'. [ 313.332174][ T3347] loop2: detected capacity change from 0 to 512 [ 313.338707][ T3347] EXT4-fs: Ignoring removed i_version option [ 313.345092][ T3347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.356820][ T3347] EXT4-fs (loop2): 1 truncate cleaned up [ 313.363024][ T3347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.408145][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.441655][ T3356] netlink: '+}[@': attribute type 21 has an invalid length. [ 313.496582][ T3365] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14324'. [ 313.718889][ T3396] netlink: 'syz.3.14336': attribute type 13 has an invalid length. [ 313.726827][ T3396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14336'. [ 313.737777][ T3378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.746697][ T3378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.771273][ T3407] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14337'. [ 313.829136][ T3420] netlink: '+}[@': attribute type 21 has an invalid length. [ 313.858156][ T3425] netlink: 'syz.7.14346': attribute type 3 has an invalid length. [ 313.885215][ T3428] loop3: detected capacity change from 0 to 512 [ 313.910094][ T3428] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 313.925939][ T3428] EXT4-fs (loop3): mount failed [ 314.037984][ T3450] netlink: '+}[@': attribute type 21 has an invalid length. [ 314.196081][ T3485] lo speed is unknown, defaulting to 1000 [ 314.314404][ T3499] loop3: detected capacity change from 0 to 512 [ 314.346130][ T3499] EXT4-fs: Ignoring removed orlov option [ 314.361515][ T3499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.381960][ T3510] loop4: detected capacity change from 0 to 512 [ 314.395787][ T3499] EXT4-fs (loop3): orphan cleanup on readonly fs [ 314.397091][ T3510] EXT4-fs: Ignoring removed i_version option [ 314.411806][ T3499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14379: bg 0: block 248: padding at end of block bitmap is not set [ 314.427458][ T3510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 314.427495][ T3499] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.14379: Failed to acquire dquot type 1 [ 314.460889][ T3499] EXT4-fs (loop3): 1 truncate cleaned up [ 314.469608][ T3515] netlink: 'syz.2.14387': attribute type 1 has an invalid length. [ 314.482554][ T3499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.507996][ T3510] EXT4-fs (loop4): 1 truncate cleaned up [ 314.519706][ T3510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.564097][ T3499] EXT4-fs: Ignoring removed orlov option [ 314.580310][ T3499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.601521][ T3499] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 314.636896][ T3499] EXT4-fs error (device loop3): __ext4_remount:6740: comm syz.3.14379: Abort forced by user [ 314.665156][ T3499] EXT4-fs (loop3): Remounting filesystem read-only [ 314.671828][ T3499] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 314.693455][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.720804][ T3549] random: crng reseeded on system resumption [ 314.731225][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.825179][ T3575] loop3: detected capacity change from 0 to 512 [ 314.832097][ T3575] EXT4-fs: Ignoring removed i_version option [ 314.838368][ T3575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.850330][ T3575] EXT4-fs (loop3): 1 truncate cleaned up [ 314.856357][ T3575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.921996][ T3589] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.14419'. [ 314.939132][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.948927][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14423'. [ 314.958205][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14423'. [ 315.116002][ T3626] netlink: 'syz.2.14434': attribute type 3 has an invalid length. [ 315.341341][ T3661] loop3: detected capacity change from 0 to 512 [ 315.348109][ T3661] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 315.358989][ T3661] EXT4-fs (loop3): 1 truncate cleaned up [ 315.365284][ T3661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.379109][ T3661] EXT4-fs (loop3): shut down requested (2) [ 315.380368][ T3665] lo speed is unknown, defaulting to 1000 [ 315.385567][ T3661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 315.436400][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.518388][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 315.518402][ T29] audit: type=1400 audit(328.417:14893): avc: denied { relabelfrom } for pid=3681 comm="syz.4.14460" name="" dev="pipefs" ino=118500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 315.641770][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.657525][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.682415][ T29] audit: type=1400 audit(328.599:14894): avc: denied { setopt } for pid=3707 comm="syz.1.14473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.706364][ T3708] loop4: detected capacity change from 0 to 512 [ 315.713750][ T3708] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 315.741997][ T3708] EXT4-fs (loop4): 1 truncate cleaned up [ 315.746349][ T29] audit: type=1400 audit(328.664:14895): avc: denied { write } for pid=3716 comm="syz.3.14477" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 315.748053][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.792023][ T29] audit: type=1400 audit(328.707:14896): avc: denied { read append open } for pid=3706 comm="syz.4.14471" path="/1037/file1/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 315.839578][ T29] audit: type=1400 audit(328.760:14897): avc: denied { ioctl } for pid=3721 comm="syz.1.14479" path="socket:[117704]" dev="sockfs" ino=117704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.864249][ T29] audit: type=1400 audit(328.760:14898): avc: denied { sys_module } for pid=3721 comm="syz.1.14479" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 315.889301][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.908033][ T29] audit: type=1400 audit(328.835:14899): avc: denied { kexec_image_load } for pid=3727 comm="syz.4.14480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 315.973902][ T29] audit: type=1400 audit(328.900:14900): avc: denied { read } for pid=3738 comm="syz.4.14486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 316.008363][ T29] audit: type=1326 audit(328.943:14901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.4.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8361ebe9 code=0x7ffc0000 [ 316.032721][ T29] audit: type=1326 audit(328.943:14902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.4.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8361ebe9 code=0x7ffc0000 [ 316.065788][ T3745] loop4: detected capacity change from 0 to 1024 [ 316.074655][ T3745] EXT4-fs: Ignoring removed nobh option [ 316.080357][ T3745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.086978][ T3745] EXT4-fs: Ignoring removed oldalloc option [ 316.093015][ T3745] EXT4-fs: Ignoring removed bh option [ 316.109270][ T3745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 316.136446][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 316.242314][ T3767] loop2: detected capacity change from 0 to 164 [ 316.249286][ T3767] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 316.260674][ T3767] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 316.269248][ T3767] Symlink component flag not implemented [ 316.274901][ T3767] Symlink component flag not implemented [ 316.282325][ T3767] Symlink component flag not implemented (7) [ 316.288389][ T3767] Symlink component flag not implemented (116) [ 316.342531][ T3771] lo speed is unknown, defaulting to 1000 [ 316.453925][ T3786] loop4: detected capacity change from 0 to 512 [ 316.463772][ T3786] EXT4-fs: Ignoring removed orlov option [ 316.470846][ T3786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.481242][ T3786] EXT4-fs (loop4): orphan cleanup on readonly fs [ 316.487975][ T3786] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.14508: bg 0: block 248: padding at end of block bitmap is not set [ 316.505610][ T3786] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.14508: Failed to acquire dquot type 1 [ 316.519299][ T3786] EXT4-fs (loop4): 1 truncate cleaned up [ 316.525663][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.546179][ T3786] EXT4-fs: Ignoring removed orlov option [ 316.555484][ T3786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.573057][ T3786] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 316.602512][ T3786] EXT4-fs error (device loop4): __ext4_remount:6740: comm syz.4.14508: Abort forced by user [ 316.620783][ T3786] EXT4-fs (loop4): Remounting filesystem read-only [ 316.627367][ T3786] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 316.656056][ T3808] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 316.669165][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.781428][ T3839] loop2: detected capacity change from 0 to 512 [ 316.788193][ T3839] EXT4-fs: Ignoring removed orlov option [ 316.796340][ T3839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.812748][ T3839] EXT4-fs (loop2): orphan cleanup on readonly fs [ 316.825588][ T3839] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14533: bg 0: block 248: padding at end of block bitmap is not set [ 316.848551][ T3839] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.14533: Failed to acquire dquot type 1 [ 316.861556][ T3839] EXT4-fs (loop2): 1 truncate cleaned up [ 316.868136][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.888803][ T3839] EXT4-fs: Ignoring removed orlov option [ 316.899864][ T3839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.909244][ T3839] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 316.935866][ T3839] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.14533: Abort forced by user [ 316.949652][ T3839] EXT4-fs (loop2): Remounting filesystem read-only [ 316.956287][ T3839] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 316.997576][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.172741][ T3890] loop2: detected capacity change from 0 to 512 [ 317.208028][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.295469][ T3917] loop4: detected capacity change from 0 to 512 [ 317.313799][ T3917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.324406][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.336220][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.343400][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.353000][ T3917] EXT4-fs (loop4): 1 truncate cleaned up [ 317.373838][ T3924] program syz.2.14570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.377922][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.404766][ T3917] EXT4-fs (loop4): shut down requested (2) [ 317.411422][ T3917] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 317.415052][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.430576][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.439480][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.472190][ T3935] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 317.481569][ T314] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.489993][ T314] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.498571][ T314] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.507015][ T314] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.516482][ T314] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.524866][ T314] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.535742][ T314] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.544335][ T314] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.626131][ T3946] lo speed is unknown, defaulting to 1000 [ 317.709877][ T3963] loop2: detected capacity change from 0 to 512 [ 317.724191][ T3966] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 317.741885][ T3963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 318.312473][ T3963] EXT4-fs (loop2): 1 truncate cleaned up [ 318.332642][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.412629][ T3963] EXT4-fs (loop2): shut down requested (2) [ 318.426787][ T3963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 318.432055][ T3978] loop3: detected capacity change from 0 to 512 [ 318.465266][ T3978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.532826][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.570641][ T3978] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 318.613115][ T3987] openvswitch: netlink: Message has 6 unknown bytes. [ 318.645254][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.657976][ T3993] loop2: detected capacity change from 0 to 512 [ 318.674942][ T3993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 318.694766][ T3993] EXT4-fs (loop2): 1 truncate cleaned up [ 318.711435][ T3993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.829577][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.843574][ T4015] atomic_op ffff8881192c9528 conn xmit_atomic 0000000000000000 [ 319.173320][ T4085] Set syz1 is full, maxelem 1038 reached [ 319.222591][ T4081] lo speed is unknown, defaulting to 1000 [ 319.239163][ T4089] program syz.3.14645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.580329][ T4125] lo speed is unknown, defaulting to 1000 [ 319.597613][ T4131] netlink: 'syz.3.14664': attribute type 1 has an invalid length. [ 319.621041][ T4133] loop3: detected capacity change from 0 to 164 [ 319.628894][ T4133] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 319.643991][ T4133] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 319.653189][ T4133] Symlink component flag not implemented [ 319.659000][ T4133] Symlink component flag not implemented [ 319.668548][ T4133] Symlink component flag not implemented (7) [ 319.674581][ T4133] Symlink component flag not implemented (116) [ 319.775317][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.782565][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.837278][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.849903][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.902471][ T4148] __nla_validate_parse: 2 callbacks suppressed [ 319.902487][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14670'. [ 319.938905][T17780] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.979077][T17780] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.997386][T17780] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.010146][T17780] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.043363][ T4163] loop2: detected capacity change from 0 to 164 [ 320.051426][ T4163] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 320.073730][ T4163] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 320.083288][ T4163] Symlink component flag not implemented [ 320.088950][ T4163] Symlink component flag not implemented [ 320.098304][ T4163] Symlink component flag not implemented (7) [ 320.104351][ T4163] Symlink component flag not implemented (116) [ 320.109755][ T4161] loop4: detected capacity change from 0 to 8192 [ 320.135513][ T4167] lo speed is unknown, defaulting to 1000 [ 320.192942][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 320.192957][ T29] audit: type=1400 audit(333.438:15092): avc: denied { setopt } for pid=4168 comm="syz.2.14679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 320.203961][ T4176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14681'. [ 320.301715][ T29] audit: type=1326 audit(333.545:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.324876][ T29] audit: type=1326 audit(333.545:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.354718][ T29] audit: type=1326 audit(333.599:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.377959][ T29] audit: type=1326 audit(333.599:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.401044][ T29] audit: type=1326 audit(333.599:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.424570][ T29] audit: type=1326 audit(333.599:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.447580][ T29] audit: type=1326 audit(333.599:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.470799][ T29] audit: type=1326 audit(333.599:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.493758][ T29] audit: type=1326 audit(333.599:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 320.591718][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.598946][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.659953][ T4204] atomic_op ffff88811a27c528 conn xmit_atomic 0000000000000000 [ 320.719004][ T4186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.730057][ T4186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.847918][T17857] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.868928][ T4217] netlink: 'syz.3.14700': attribute type 10 has an invalid length. [ 320.877013][ T4217] netlink: 'syz.3.14700': attribute type 19 has an invalid length. [ 320.884973][ T4217] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.14700'. [ 320.896704][T17857] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.913689][T17857] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.931979][T17857] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.106124][ T4255] binfmt_misc: register: failed to install interpreter file ./file0 [ 321.118587][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.125851][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.185298][T17780] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.193816][T17780] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.202951][T17780] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.211399][T17780] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.223033][T17780] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.231439][T17780] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.249811][T17780] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.258411][T17780] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.521487][ T4291] netlink: 'gtp': attribute type 1 has an invalid length. [ 321.946267][ T4330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14753'. [ 321.956067][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14753'. [ 322.178849][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14765'. [ 322.377501][ T4405] loop2: detected capacity change from 0 to 1024 [ 322.395751][ T4405] EXT4-fs: Ignoring removed orlov option [ 322.421381][ T4405] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 322.454515][ T4418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14792'. [ 322.463666][ T4418] netlink: 76 bytes leftover after parsing attributes in process `syz.7.14792'. [ 322.478257][ T4418] smc: adding net device bond0 with user defined pnetid SYZ2 [ 322.486534][ T4418] bond0: entered allmulticast mode [ 322.491967][ T4418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.499927][ T4425] netlink: 'syz.2.14793': attribute type 21 has an invalid length. [ 322.509118][ T4425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14793'. [ 322.688016][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.695470][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.787766][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.798207][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.841722][ T4434] bond0: left promiscuous mode [ 322.846572][ T4434] bond_slave_0: left promiscuous mode [ 322.852030][ T4434] bond_slave_1: left promiscuous mode [ 322.860040][ T9346] lo speed is unknown, defaulting to 1000 [ 322.865989][ T9346] syz0: Port: 1 Link DOWN [ 322.879538][T17829] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.912441][T17829] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.936087][T17829] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.946740][T17829] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.017105][ T4465] bond1: entered promiscuous mode [ 323.022159][ T4465] bond1: entered allmulticast mode [ 323.027687][ T4465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.039704][ T4465] bond1 (unregistering): Released all slaves [ 323.216946][ T4482] lo speed is unknown, defaulting to 1000 [ 323.345720][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14824'. [ 323.454874][ T4516] lo speed is unknown, defaulting to 1000 [ 323.714182][ T4542] ref_ctr_offset mismatch. inode: 0x21cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 323.780460][ T4550] loop4: detected capacity change from 0 to 512 [ 323.817939][ T4550] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 323.827929][ T4550] EXT4-fs (loop4): orphan cleanup on readonly fs [ 323.835953][ T4550] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.14847: corrupted inode contents [ 323.848505][ T4550] EXT4-fs (loop4): Remounting filesystem read-only [ 323.855173][ T4550] EXT4-fs (loop4): 1 truncate cleaned up [ 323.861825][T17829] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.872461][T17829] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.883040][T17829] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 323.894601][ T4550] EXT4-fs mount: 2 callbacks suppressed [ 323.894614][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.937565][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.001496][ T4579] loop4: detected capacity change from 0 to 512 [ 324.018567][ T4579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.035622][ T4581] loop2: detected capacity change from 0 to 512 [ 324.043907][ T4579] EXT4-fs (loop4): 1 truncate cleaned up [ 324.050034][ T4579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.063282][ T4581] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 324.071573][ T4581] EXT4-fs (loop2): orphan cleanup on readonly fs [ 324.078437][ T4581] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.14861: Failed to acquire dquot type 1 [ 324.102819][ T4581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14861: bg 0: block 40: padding at end of block bitmap is not set [ 324.118016][ T4581] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 324.127813][ T4581] EXT4-fs (loop2): 1 truncate cleaned up [ 324.161717][ T4581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.174933][T23977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.251766][T25016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.316867][ T4593] bond2: entered promiscuous mode [ 324.322042][ T4593] bond2: entered allmulticast mode [ 324.352364][ T4593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.376792][ T4593] bond2 (unregistering): Released all slaves [ 324.539799][ T4627] netlink: 'syz.7.14881': attribute type 1 has an invalid length. [ 324.552302][ T4632] atomic_op ffff88810cffed28 conn xmit_atomic 0000000000000000 [ 324.617230][ T4642] bond1: entered promiscuous mode [ 324.622583][ T4642] bond1: entered allmulticast mode [ 324.635309][ T4642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.662844][ T4642] bond1 (unregistering): Released all slaves [ 324.678549][ T4660] __nla_validate_parse: 1 callbacks suppressed [ 324.678562][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14897'. [ 324.750958][ T4669] loop2: detected capacity change from 0 to 2048 [ 324.767932][ T4669] loop2: p1 < > p3 p4 < > [ 324.781321][ T4669] loop2: p3 start 4284289 is beyond EOD, truncated [ 324.797900][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 324.836480][ T4685] loop3: detected capacity change from 0 to 512 [ 324.850204][ T4685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.864724][ T4685] EXT4-fs (loop3): 1 truncate cleaned up [ 324.876772][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 324.876865][ T29] audit: type=1400 audit(338.459:15389): avc: denied { read } for pid=4690 comm="syz.4.14913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.877244][ T4685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.914683][ T29] audit: type=1400 audit(338.492:15390): avc: denied { mount } for pid=4684 comm="syz.3.14909" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 324.958927][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.960429][ T29] audit: type=1400 audit(338.545:15391): avc: denied { unmount } for pid=30788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 324.996084][ T29] audit: type=1400 audit(338.588:15392): avc: denied { execmem } for pid=4699 comm="syz.3.14916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 325.016611][ T29] audit: type=1400 audit(338.610:15393): avc: denied { create } for pid=4697 comm="syz.7.14914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.065215][ T29] audit: type=1400 audit(338.610:15394): avc: denied { getopt } for pid=4697 comm="syz.7.14914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.102749][ T29] audit: type=1400 audit(338.706:15395): avc: denied { create } for pid=4708 comm="syz.3.14920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.122544][ T29] audit: type=1400 audit(338.706:15396): avc: denied { connect } for pid=4708 comm="syz.3.14920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.142150][ T29] audit: type=1400 audit(338.706:15397): avc: denied { bind } for pid=4708 comm="syz.3.14920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.178405][ T29] audit: type=1404 audit(338.781:15398): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 325.229191][ T4719] netlink: 'syz.2.14925': attribute type 21 has an invalid length. [ 325.577709][ T4792] lo speed is unknown, defaulting to 1000 [ 325.849752][ T4834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14980'. [ 325.858867][ T4834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14980'. [ 326.152825][ T4904] lo speed is unknown, defaulting to 1000 [ 326.817167][ T5014] lo speed is unknown, defaulting to 1000 [ 326.992196][ T5056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.118823][ T5083] lo speed is unknown, defaulting to 1000 [ 327.446354][ T5144] netlink: 'syz.2.15129': attribute type 21 has an invalid length. [ 327.454418][ T5144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15129'. [ 327.463634][ T5144] netlink: 'syz.2.15129': attribute type 1 has an invalid length. [ 327.506139][ T5157] netlink: 'syz.3.15135': attribute type 3 has an invalid length. [ 327.514082][ T5157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15135'. [ 327.939027][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15168'. [ 328.035486][ T5247] ip6gretap1: entered promiscuous mode [ 328.041256][ T5247] ip6gretap1: entered allmulticast mode [ 328.256447][ T5291] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 328.298926][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15203'. [ 328.395081][ T5321] hugetlbfs: syz.1.15212 (5321): Using mlock ulimits for SHM_HUGETLB is obsolete [ 328.923537][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15249'. [ 328.932687][ T5397] netlink: 'syz.7.15249': attribute type 18 has an invalid length. [ 328.940736][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15249'. [ 329.116242][ T5425] netlink: 'syz.7.15263': attribute type 1 has an invalid length. [ 329.491904][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15286'. [ 329.597247][ T29] kauditd_printk_skb: 1209 callbacks suppressed [ 329.597261][ T29] audit: type=1400 audit(343.523:16608): avc: denied { ioctl } for pid=5479 comm="syz.1.15289" path="socket:[124428]" dev="sockfs" ino=124428 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 329.686053][ T5482] netlink: 'syz.1.15290': attribute type 6 has an invalid length. [ 329.830399][ T29] audit: type=1400 audit(343.770:16609): avc: denied { read write } for pid=30788 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.857990][ T5488] loop3: detected capacity change from 0 to 512 [ 329.866263][ T5488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 329.885534][ T29] audit: type=1400 audit(343.770:16610): avc: denied { open } for pid=30788 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.909499][ T29] audit: type=1400 audit(343.770:16611): avc: denied { ioctl } for pid=30788 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.935966][ T5488] EXT4-fs (loop3): 1 truncate cleaned up [ 329.942041][ T5488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.955932][ T29] audit: type=1400 audit(343.910:16612): avc: denied { mount } for pid=5487 comm="syz.3.15292" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.998750][ T29] audit: type=1400 audit(343.910:16613): avc: denied { add_name } for pid=5487 comm="syz.3.15292" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.018994][ T29] audit: type=1400 audit(343.910:16614): avc: denied { create } for pid=5487 comm="syz.3.15292" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 330.038715][ T29] audit: type=1400 audit(343.910:16615): avc: denied { read write open } for pid=5487 comm="syz.3.15292" path="/623/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 330.065398][ T29] audit: type=1400 audit(344.028:16616): avc: denied { unmount } for pid=30788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 330.098856][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.146734][ T29] audit: type=1400 audit(344.114:16617): avc: denied { execmem } for pid=5493 comm="syz.3.15293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 330.412199][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15300'. [ 330.442883][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15300'. [ 330.496629][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15300'. [ 330.503834][ T5518] loop3: detected capacity change from 0 to 1024 [ 330.537764][ T5518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 330.579932][ T5518] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.15304: lblock 3 mapped to illegal pblock 3 (length 3) [ 330.660847][ T5518] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 330.673249][ T5518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 330.673249][ T5518] [ 330.735797][T17829] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:36: lblock 8 mapped to illegal pblock 8 (length 8) [ 330.751263][T17829] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 330.763633][T17829] EXT4-fs (loop3): This should not happen!! Data will be lost [ 330.763633][T17829] [ 330.798774][T17829] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 330.813667][T17829] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65 with max blocks 3 with error 28 [ 330.826027][T17829] EXT4-fs (loop3): This should not happen!! Data will be lost [ 330.826027][T17829] [ 330.835750][T17829] EXT4-fs (loop3): Total free blocks count 0 [ 330.841723][ T5564] program syz.1.15323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.841774][T17829] EXT4-fs (loop3): Free/Dirty block details [ 330.857097][T17829] EXT4-fs (loop3): free_blocks=4293918720 [ 330.864968][ T5564] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 331.113893][ T5622] netlink: 'syz.7.15348': attribute type 6 has an invalid length. [ 331.430484][ T5670] netlink: 'syz.4.15370': attribute type 3 has an invalid length. [ 332.496222][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15409'. [ 332.530681][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15410'. [ 332.775450][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15434'. [ 332.787523][ T5813] team0: Device macsec1 is already an upper device of the team interface [ 333.010697][ T5819] loop3: detected capacity change from 0 to 32768 [ 333.052841][ T5819] loop3: p1 p3 < > [ 333.099039][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.107584][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.237126][ T5835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.245630][ T5835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.623478][ T5849] loop3: detected capacity change from 0 to 1024 [ 333.630279][ T5849] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.636842][ T5849] EXT4-fs: Ignoring removed bh option [ 333.643296][ T5849] ext3: Unknown parameter 'subj_type' [ 333.749845][ T5872] random: crng reseeded on system resumption [ 333.807680][ T5877] loop4: detected capacity change from 0 to 1024 [ 333.833475][ T5877] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 333.844610][ T5877] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 333.861088][ T5877] JBD2: no valid journal superblock found [ 333.867068][ T5877] EXT4-fs (loop4): Could not load journal inode [ 333.893305][ T5877] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 334.016408][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15479'. [ 334.052135][ T5911] SELinux: security policydb version 17 (MLS) not backwards compatible [ 334.064002][ T5911] SELinux: failed to load policy [ 334.095194][ T5919] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 334.210977][ T5933] SELinux: failed to load policy [ 334.443820][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 334.443835][ T29] audit: type=1400 audit(348.727:16803): avc: denied { module_load } for pid=5945 comm="syz.3.15496" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 334.522242][ T5957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5957 comm=syz.3.15501 [ 334.554065][ T9358] Process accounting resumed [ 334.563930][ T29] audit: type=1400 audit(348.856:16804): avc: denied { setopt } for pid=5960 comm=77DEA305FF07 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.620866][ T29] audit: type=1326 audit(348.909:16805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 334.643916][ T29] audit: type=1326 audit(348.909:16806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 334.667083][ T29] audit: type=1326 audit(348.909:16807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 334.749462][ T29] audit: type=1326 audit(348.931:16808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 334.772478][ T29] audit: type=1326 audit(348.931:16809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12c66c14a5 code=0x7ffc0000 [ 334.795448][ T29] audit: type=1326 audit(348.931:16810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 334.877065][ T29] audit: type=1326 audit(349.081:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.3.15506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 335.007359][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15519'. [ 335.034314][ T29] audit: type=1326 audit(349.349:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.7.15522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb1eebe9 code=0x7ffc0000 [ 335.564621][ T6020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6020 comm=syz.7.15529 [ 335.577313][ T6020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6020 comm=syz.7.15529 [ 335.706250][ T6033] netlink: 7 bytes leftover after parsing attributes in process `syz.7.15535'. [ 335.901616][ T6068] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.934943][ T6077] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15558'. [ 335.944040][ T6077] netem: unknown loss type 0 [ 335.948625][ T6077] netem: change failed [ 336.013604][ T6093] netlink: 8 bytes leftover after parsing attributes in process `'. [ 336.123757][ T9358] hid_parser_main: 6 callbacks suppressed [ 336.123861][ T9358] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 336.152062][ T9358] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.365844][ T6136] netlink: 27 bytes leftover after parsing attributes in process `syz.7.15584'. [ 336.379177][ T6139] loop2: detected capacity change from 0 to 128 [ 336.388448][ T6139] syz.2.15583: attempt to access beyond end of device [ 336.388448][ T6139] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 336.641361][ T6170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15600'. [ 336.650657][ T6170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15600'. [ 336.671211][ T6170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15600'. [ 336.680559][ T6170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15600'. [ 336.706506][ T6170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15600'. [ 336.850965][ T6212] loop4: detected capacity change from 0 to 512 [ 336.876744][ T6217] dvmrp0: entered allmulticast mode [ 336.893671][ T6212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 336.936404][ T6226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 336.948842][ T6212] loop4: detected capacity change from 512 to 64 [ 336.958000][ T6212] EXT4-fs error (device loop4): ext4_write_dquot:6917: comm syz.4.15619: Failed to commit dquot type 1 [ 336.969677][ T6212] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Out of memory [ 336.980498][ T6212] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #18: comm syz.4.15619: mark_inode_dirty error [ 336.993670][ T6228] netlink: 'syz.3.15625': attribute type 1 has an invalid length. [ 337.004531][ T6212] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Out of memory [ 337.016005][ T6212] EXT4-fs error (device loop4): ext4_truncate:4666: inode #18: comm syz.4.15619: mark_inode_dirty error [ 337.089201][T31805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 337.117180][ T6244] netlink: 'syz.3.15634': attribute type 4 has an invalid length. [ 337.126142][ T6244] .`: renamed from bond0 [ 337.242495][ T6263] SELinux: security policydb version 17 (MLS) not backwards compatible [ 337.251924][ T6263] SELinux: failed to load policy [ 337.282692][ T6255] lo speed is unknown, defaulting to 1000 [ 337.340075][ T6277] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.363865][ T6255] chnl_net:caif_netlink_parms(): no params data found [ 337.395812][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.402996][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.410355][ T6255] bridge_slave_0: entered allmulticast mode [ 337.425485][ T6255] bridge_slave_0: entered promiscuous mode [ 337.432385][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.439483][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.447003][ T6255] bridge_slave_1: entered allmulticast mode [ 337.453524][ T6255] bridge_slave_1: entered promiscuous mode [ 337.471253][ T6255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.481715][ T6255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.505414][ T6255] team0: Port device team_slave_0 added [ 337.512391][ T6255] team0: Port device team_slave_1 added [ 337.528996][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.535999][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.562017][ T6255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.582359][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.589534][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.615433][ T6255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.619834][ T6298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6298 comm=syz.2.15655 [ 337.661533][ T6255] hsr_slave_0: entered promiscuous mode [ 337.676364][ T6255] hsr_slave_1: entered promiscuous mode [ 337.717051][ T6255] debugfs: 'hsr0' already exists in 'hsr' [ 337.722948][ T6255] Cannot create hsr debugfs directory [ 337.730199][ T6319] program syz.2.15663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.741147][ T6319] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.057613][ T6255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.084365][ T6255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.085633][ T6373] netlink: 'syz.3.15688': attribute type 3 has an invalid length. [ 338.111648][ T6255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.135724][ T6255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 338.191887][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.205134][ T6255] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.215218][T18403] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.222337][T18403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.223286][ T6397] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 338.223286][ T6397] program syz.3.15697 not setting count and/or reply_len properly [ 338.255451][T17789] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.262553][T17789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.349684][ T6255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.397198][ T6423] loop2: detected capacity change from 0 to 764 [ 338.404486][ T6423] rock: directory entry would overflow storage [ 338.410707][ T6423] rock: sig=0x5245, size=8, remaining=5 [ 338.497248][ T6255] veth0_vlan: entered promiscuous mode [ 338.508136][ T6255] veth1_vlan: entered promiscuous mode [ 338.531435][ T6255] veth0_macvtap: entered promiscuous mode [ 338.539583][ T6255] veth1_macvtap: entered promiscuous mode [ 338.554191][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.573417][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.593687][ T6457] bond1: entered promiscuous mode [ 338.599123][ T6457] bond1: entered allmulticast mode [ 338.604797][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.614301][ T6457] bond1 (unregistering): Released all slaves [ 338.627518][T17829] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.634905][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.643982][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.651861][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.659800][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.667624][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.675421][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.683182][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.690918][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.698736][ T9336] hid-generic 0008:0006:80000007.000D: unknown main item tag 0x0 [ 338.707895][ T9336] hid-generic 0008:0006:80000007.000D: hidraw0: HID v0.0b Device [syz1] on syz1 [ 338.709166][T17829] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.727423][T17829] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.738917][T17829] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.934933][ T6503] netlink: 'syz.7.15734': attribute type 4 has an invalid length. [ 338.945863][ T6503] netlink: 'syz.7.15734': attribute type 4 has an invalid length. [ 339.123414][ T6522] veth0_to_team: entered promiscuous mode [ 339.168632][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 339.168676][ T29] audit: type=1400 audit(353.791:17098): avc: denied { ioctl } for pid=6524 comm="syz.1.15743" path="socket:[128176]" dev="sockfs" ino=128176 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.245120][ T29] audit: type=1326 audit(353.877:17099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.7.15747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb1eebe9 code=0x7ffc0000 [ 339.292304][ T29] audit: type=1326 audit(353.898:17100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.7.15747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff1eb1eebe9 code=0x7ffc0000 [ 339.315512][ T29] audit: type=1326 audit(353.898:17101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.7.15747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb1eebe9 code=0x7ffc0000 [ 339.338664][ T29] audit: type=1400 audit(353.909:17102): avc: denied { mounton } for pid=6538 comm="syz.3.15748" path="/703/file0" dev="tmpfs" ino=3608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 339.365949][ T29] audit: type=1326 audit(354.006:17103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.15753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 339.404690][ T29] audit: type=1326 audit(354.006:17104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.15753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 339.427744][ T29] audit: type=1326 audit(354.038:17105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.15753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 339.450825][ T29] audit: type=1326 audit(354.038:17106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.15753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 339.473831][ T29] audit: type=1326 audit(354.038:17107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.15753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12c668ebe9 code=0x7ffc0000 [ 339.572864][ T6571] netlink: 'syz.6.15767': attribute type 21 has an invalid length. [ 339.582527][ T6571] netlink: 'syz.6.15767': attribute type 5 has an invalid length. [ 339.590525][ T6571] netlink: 'syz.6.15767': attribute type 6 has an invalid length. [ 339.757149][ T6603] __nla_validate_parse: 12 callbacks suppressed [ 339.757166][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15778'. [ 339.772607][ T6603] netlink: 'syz.3.15778': attribute type 18 has an invalid length. [ 339.810371][ T6603] vxlan1: entered promiscuous mode [ 339.820378][T17847] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.829028][T17847] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.837243][T17847] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.865568][T17847] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.583233][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15791'. [ 340.676301][ T6640] netlink: 'syz.7.15797': attribute type 10 has an invalid length. [ 340.708841][ T6640] team0 (unregistering): Port device team_slave_0 removed [ 340.718255][ T6640] team0 (unregistering): Port device team_slave_1 removed [ 340.935665][ T6665] gretap0: refused to change device tx_queue_len [ 340.942932][ T6665] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 340.992268][ T6671] random: crng reseeded on system resumption [ 341.013878][ T6673] netlink: 8 bytes leftover after parsing attributes in process `'. [ 341.084852][T18403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.088286][ T6681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.167411][ T6699] loop6: detected capacity change from 0 to 512 [ 341.174319][ T6699] EXT4-fs: Ignoring removed i_version option [ 341.204297][ T6699] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 341.222158][ T6699] System zones: 0-2, 18-18, 34-35 [ 341.231623][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15826'. [ 341.240630][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15826'. [ 341.250941][ T6699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.280650][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.298111][ T6717] netlink: 92 bytes leftover after parsing attributes in process `syz.6.15830'. [ 341.307309][ T6717] netem: unknown loss type 0 [ 341.311934][ T6717] netem: change failed [ 341.379897][ T6733] netlink: 7 bytes leftover after parsing attributes in process `syz.1.15838'. [ 341.543262][ T6747] loop2: detected capacity change from 0 to 4096 [ 341.566678][ T6747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.588821][ T6754] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6754 comm=syz.1.15847 [ 341.601502][ T6754] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6754 comm=syz.1.15847 [ 341.618367][T25016] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /1235/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.660939][T25016] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.680852][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.692547][T25016] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /1235/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.715823][T25016] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.736889][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.760011][T25016] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /1235/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.781980][ T6766] validate_nla: 5 callbacks suppressed [ 341.781993][ T6766] netlink: 'syz.1.15852': attribute type 4 has an invalid length. [ 341.789100][T25016] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.795548][ T6766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15852'. [ 341.829363][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.841594][T25016] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /1235/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.863476][T25016] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.883412][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.896015][T25016] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /1235/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.918730][T25016] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 341.940321][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.952220][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.966139][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.978754][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 341.992038][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 342.004576][T25016] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 342.073880][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15857'. [ 342.091123][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15857'. [ 342.116593][ T6780] netlink: 'syz.1.15859': attribute type 21 has an invalid length. [ 342.247844][ T5248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.366730][ T6810] loop3: detected capacity change from 0 to 2048 [ 342.404844][ T6810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.424151][ T6806] lo speed is unknown, defaulting to 1000 [ 342.482667][T17847] bridge_slave_1: left allmulticast mode [ 342.488395][T17847] bridge_slave_1: left promiscuous mode [ 342.494100][T17847] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.503925][T30788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.515164][T17847] bridge_slave_0: left allmulticast mode [ 342.520944][T17847] bridge_slave_0: left promiscuous mode [ 342.527042][T17847] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.631804][ T6837] loop6: detected capacity change from 0 to 128 [ 342.642436][ T6837] syz.6.15882: attempt to access beyond end of device [ 342.642436][ T6837] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 342.658327][T17847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.667778][T17847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.676858][T17847] bond0 (unregistering): Released all slaves [ 342.751062][T17847] hsr_slave_0: left promiscuous mode [ 342.765601][T17847] hsr_slave_1: left promiscuous mode [ 342.825396][T17847] team0 (unregistering): Port device team_slave_1 removed [ 342.840795][T17847] team0 (unregistering): Port device team_slave_0 removed [ 342.877233][ T6863] bridge_slave_0: left allmulticast mode [ 342.882919][ T6863] bridge_slave_0: left promiscuous mode [ 342.888642][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.910716][ T6863] bridge_slave_1: left allmulticast mode [ 342.916526][ T6863] bridge_slave_1: left promiscuous mode [ 342.922259][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.931862][ T6863] .`: (slave bond_slave_0): Releasing backup interface [ 342.944986][ T6863] .`: (slave bond_slave_1): Releasing backup interface [ 342.964809][ T6863] team0: Port device team_slave_0 removed [ 342.974364][ T6863] team0: Port device team_slave_1 removed [ 342.980633][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.988152][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.004180][ T6806] chnl_net:caif_netlink_parms(): no params data found [ 343.077871][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.085021][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.103068][ T6806] bridge_slave_0: entered allmulticast mode [ 343.109578][ T6806] bridge_slave_0: entered promiscuous mode [ 343.124989][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.132191][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.139631][ T6806] bridge_slave_1: entered allmulticast mode [ 343.146190][ T6806] bridge_slave_1: entered promiscuous mode [ 343.176374][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.192355][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.210995][T17847] IPVS: stop unused estimator thread 0... [ 343.242348][ T6806] team0: Port device team_slave_0 added [ 343.250748][ T6806] team0: Port device team_slave_1 added [ 343.273382][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.280395][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.306427][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.318769][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.325768][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.351831][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.368241][ T6921] netlink: 'syz.7.15916': attribute type 1 has an invalid length. [ 343.430154][ T6806] hsr_slave_0: entered promiscuous mode [ 343.445304][ T6806] hsr_slave_1: entered promiscuous mode [ 343.475341][T17847] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.527731][T17847] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.571053][T17847] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.592418][ T6949] netlink: 'syz.7.15930': attribute type 4 has an invalid length. [ 343.613798][T17847] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.670058][ T6963] netlink: 'syz.6.15935': attribute type 6 has an invalid length. [ 343.694271][ T6942] lo speed is unknown, defaulting to 1000 [ 343.700408][ T6965] loop6: detected capacity change from 0 to 1024 [ 343.718094][ T6965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.774691][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.801719][T17847] .` (unregistering): Released all slaves [ 343.821575][ T6983] /dev/loop1: Can't lookup blockdev [ 343.876715][T17847] tipc: Disabling bearer [ 343.881750][T17847] tipc: Left network mode [ 343.932615][ T6942] chnl_net:caif_netlink_parms(): no params data found [ 343.982939][T17847] hsr_slave_0: left promiscuous mode [ 343.988597][ T6996] hub 2-0:1.0: USB hub found [ 343.993684][ T6996] hub 2-0:1.0: 8 ports detected [ 343.999985][T17847] hsr_slave_1: left promiscuous mode [ 344.030970][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 344.030983][ T29] audit: type=1400 audit(359.005:17236): avc: denied { mount } for pid=7001 comm="syz.7.15950" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 344.089193][ T29] audit: type=1400 audit(359.005:17237): avc: denied { search } for pid=7001 comm="syz.7.15950" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.110840][ T29] audit: type=1400 audit(359.005:17238): avc: denied { search } for pid=7001 comm="syz.7.15950" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.132396][ T29] audit: type=1400 audit(359.005:17239): avc: denied { read open } for pid=7001 comm="syz.7.15950" path="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.176713][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.184099][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.193761][ T6942] bridge_slave_0: entered allmulticast mode [ 344.200692][ T6942] bridge_slave_0: entered promiscuous mode [ 344.213813][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.220914][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.228095][ T6942] bridge_slave_1: entered allmulticast mode [ 344.234592][ T6942] bridge_slave_1: entered promiscuous mode [ 344.257666][ T6942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.266855][ T6806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.276187][ T6942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.290779][ T6806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.304818][ T6806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.314519][ T6942] team0: Port device team_slave_0 added [ 344.320216][ T6806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.329871][ T6942] team0: Port device team_slave_1 added [ 344.347883][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.354892][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.380856][ T6942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.392134][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.399135][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.425095][ T6942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.453840][ T6942] hsr_slave_0: entered promiscuous mode [ 344.459891][ T6942] hsr_slave_1: entered promiscuous mode [ 344.465898][ T6942] debugfs: 'hsr0' already exists in 'hsr' [ 344.471639][ T6942] Cannot create hsr debugfs directory [ 344.486996][T17847] IPVS: stop unused estimator thread 0... [ 344.540000][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.553736][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.565355][T18403] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.572428][T18403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.582945][T17784] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.590024][T17784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.651397][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.665311][ T7034] __nla_validate_parse: 11 callbacks suppressed [ 344.665329][ T7034] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15957'. [ 344.684510][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.705169][ T6942] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 344.714003][ T6942] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 344.722681][ T6942] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 344.731565][ T6942] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 344.791426][ T6942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.805793][ T29] audit: type=1400 audit(359.832:17240): avc: denied { read } for pid=7055 comm="syz.6.15959" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 344.817470][ T6806] veth0_vlan: entered promiscuous mode [ 344.829640][ T29] audit: type=1400 audit(359.842:17241): avc: denied { open } for pid=7055 comm="syz.6.15959" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 344.839854][ T6806] veth1_vlan: entered promiscuous mode [ 344.866130][ T6942] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.885826][T17829] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.892918][T17829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.904352][T17829] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.911466][T17829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.944702][ T7065] netlink: 'syz.1.15963': attribute type 27 has an invalid length. [ 344.945172][ T6942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.967760][ T6806] veth0_macvtap: entered promiscuous mode [ 344.978070][ T7065] macvlan2: left promiscuous mode [ 344.995885][ T7067] geneve0: entered allmulticast mode [ 345.021572][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.037360][ T7065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.059074][ T6806] veth1_macvtap: entered promiscuous mode [ 345.065259][ T8335] lo speed is unknown, defaulting to 1000 [ 345.070238][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.071047][ T8335] syz0: Port: 1 Link ACTIVE [ 345.081011][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.124837][ T6942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.151483][T17829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.167254][ T29] audit: type=1326 audit(360.228:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.6.15969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063117ebe9 code=0x7ffc0000 [ 345.178854][T17829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.190283][ T29] audit: type=1326 audit(360.228:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.6.15969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063117ebe9 code=0x7ffc0000 [ 345.221968][ T29] audit: type=1326 audit(360.228:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.6.15969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063117ebe9 code=0x7ffc0000 [ 345.228507][T17829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.245115][ T29] audit: type=1326 audit(360.228:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.6.15969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063117ebe9 code=0x7ffc0000 [ 345.256687][T17829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.447629][ T6942] veth0_vlan: entered promiscuous mode [ 345.465365][ T6942] veth1_vlan: entered promiscuous mode [ 345.499425][ T6942] veth0_macvtap: entered promiscuous mode [ 345.528787][ T6942] veth1_macvtap: entered promiscuous mode [ 345.542336][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.552604][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.622462][T17847] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.644764][T17847] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.671554][T17829] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.690782][T17829] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.817958][ T7170] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 345.817958][ T7170] program syz.1.16003 not setting count and/or reply_len properly [ 345.858468][ T7172] IPVS: Error connecting to the multicast addr [ 346.024723][ T7205] hub 9-0:1.0: USB hub found [ 346.029815][ T7205] hub 9-0:1.0: 8 ports detected [ 346.040643][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16024'. [ 346.096713][ T7224] loop6: detected capacity change from 0 to 1024 [ 346.111233][ T7224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.123430][ T7226] netlink: 256 bytes leftover after parsing attributes in process `syz.1.16029'. [ 346.124899][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16031'. [ 346.159504][ T7224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.235727][ T6255] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 346.295700][ T6255] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 346.385393][ T7264] can: request_module (can-proto-0) failed. [ 346.417386][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16047'. [ 346.479353][ T7281] bond1: entered promiscuous mode [ 346.484717][ T7281] bond1: entered allmulticast mode [ 346.490465][ T7281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.511382][ T7291] loop5: detected capacity change from 0 to 128 [ 346.520546][ T7281] bond1 (unregistering): Released all slaves [ 346.532502][ T7291] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.559081][ T7283] smc: net device bond0 applied user defined pnetid SYZ0 [ 346.567997][ T6806] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.574755][ T7294] smc: net device bond0 erased user defined pnetid SYZ0 [ 346.613500][T18403] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.630812][ T7241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.680130][T18403] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.753128][T18403] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.771573][ T7322] netlink: 'syz.5.16074': attribute type 3 has an invalid length. [ 346.816320][T18403] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.893753][T18403] bridge_slave_1: left allmulticast mode [ 346.899494][T18403] bridge_slave_1: left promiscuous mode [ 346.905301][T18403] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.918228][T18403] bridge_slave_0: left allmulticast mode [ 346.924244][T18403] bridge_slave_0: left promiscuous mode [ 346.929914][T18403] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.045625][T18403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.058205][T18403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.068727][T18403] bond0 (unregistering): Released all slaves [ 347.114389][ T7325] lo speed is unknown, defaulting to 1000 [ 347.148385][ T7368] netlink: 120 bytes leftover after parsing attributes in process `+}[@'. [ 347.192317][T18403] hsr_slave_0: left promiscuous mode [ 347.199926][T18403] hsr_slave_1: left promiscuous mode [ 347.208014][T18403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.215450][T18403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.224850][T18403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.232262][T18403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.243273][T18403] veth1_macvtap: left promiscuous mode [ 347.248782][T18403] veth0_macvtap: left promiscuous mode [ 347.254283][T18403] veth1_vlan: left promiscuous mode [ 347.259594][T18403] veth0_vlan: left promiscuous mode [ 347.371536][T18403] team0 (unregistering): Port device team_slave_1 removed [ 347.384329][T18403] team0 (unregistering): Port device team_slave_0 removed [ 347.473059][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 347.508935][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.516100][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.523851][ T7325] bridge_slave_0: entered allmulticast mode [ 347.530244][ T7325] bridge_slave_0: entered promiscuous mode [ 347.537357][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.544469][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.551844][ T7325] bridge_slave_1: entered allmulticast mode [ 347.558591][ T7325] bridge_slave_1: entered promiscuous mode [ 347.580016][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.591008][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.615939][ T7325] team0: Port device team_slave_0 added [ 347.628302][ T7325] team0: Port device team_slave_1 added [ 347.651473][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.658468][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.684464][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.726289][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.733303][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.759963][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.788242][ T7325] hsr_slave_0: entered promiscuous mode [ 347.794449][ T7325] hsr_slave_1: entered promiscuous mode [ 347.800402][ T7325] debugfs: 'hsr0' already exists in 'hsr' [ 347.806151][ T7325] Cannot create hsr debugfs directory [ 348.072421][ T7435] netlink: 'syz.5.16119': attribute type 21 has an invalid length. [ 348.080460][ T7435] netlink: 128 bytes leftover after parsing attributes in process `syz.5.16119'. [ 348.089810][ T7435] netlink: 'syz.5.16119': attribute type 5 has an invalid length. [ 348.097764][ T7435] netlink: 'syz.5.16119': attribute type 6 has an invalid length. [ 348.105623][ T7435] netlink: 3 bytes leftover after parsing attributes in process `syz.5.16119'. [ 348.130884][ T7325] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 348.140620][ T7325] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 348.149968][ T7325] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 348.159027][ T7325] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 348.194645][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.206875][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.216158][T18403] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.223270][T18403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.234174][T18403] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.241256][T18403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.309110][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.425328][ T7325] veth0_vlan: entered promiscuous mode [ 348.434833][ T7325] veth1_vlan: entered promiscuous mode [ 348.452602][ T7325] veth0_macvtap: entered promiscuous mode [ 348.459567][ T7325] veth1_macvtap: entered promiscuous mode [ 348.473320][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.486537][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.500721][T17829] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.512186][T17829] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.529984][T17829] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.546325][T17829] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.642354][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16133'. [ 348.720060][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 348.720075][ T29] audit: type=1326 audit(364.037:17360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.750161][ T29] audit: type=1326 audit(364.037:17361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.773263][ T29] audit: type=1326 audit(364.037:17362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.796349][ T29] audit: type=1326 audit(364.037:17363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.819506][ T29] audit: type=1326 audit(364.037:17364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.842692][ T29] audit: type=1326 audit(364.037:17365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.865687][ T29] audit: type=1326 audit(364.037:17366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.888746][ T29] audit: type=1326 audit(364.037:17367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.911743][ T29] audit: type=1326 audit(364.037:17368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 348.934875][ T29] audit: type=1326 audit(364.037:17369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.1.16140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf6a9ebe9 code=0x7ffc0000 [ 349.224773][ T7561] loop5: detected capacity change from 0 to 1024 [ 349.232384][ T7561] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 349.243470][ T7561] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 349.256334][ T7561] JBD2: no valid journal superblock found [ 349.262127][ T7561] EXT4-fs (loop5): Could not load journal inode [ 349.273570][ T7561] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 349.363223][ T7581] loop5: detected capacity change from 0 to 512 [ 349.370257][ T7581] EXT4-fs: Ignoring removed i_version option [ 349.387471][ T7581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 349.395629][ T7581] System zones: 0-2, 18-18, 34-35 [ 349.401761][ T7581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.428496][ T6806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.465288][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16176'. [ 349.575122][ T7605] SELinux: failed to load policy [ 349.630369][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16185'. [ 349.639565][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16185'. [ 349.666872][ T7619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7619 comm=syz.5.16189 [ 349.679672][ T7619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7619 comm=syz.5.16189 [ 349.841247][ T7639] netlink: 'syz.7.16197': attribute type 3 has an invalid length. [ 349.849587][ T7639] netlink: 'syz.7.16197': attribute type 3 has an invalid length. [ 349.956614][ T7659] netlink: 256 bytes leftover after parsing attributes in process `syz.5.16208'. [ 349.981827][ T7661] netlink: 'syz.7.16209': attribute type 4 has an invalid length. [ 349.989880][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16209'. [ 351.161448][ T7782] netlink: 'syz.8.16267': attribute type 3 has an invalid length. [ 351.759701][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16273'. [ 351.824212][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16277'. [ 351.833438][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16277'. [ 351.853600][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16277'. [ 351.862780][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16277'. [ 351.922936][ T7814] siw: device registration error -23 [ 351.923008][ T7812] /dev/loop7: Can't lookup blockdev [ 352.012780][ T7822] loop5: detected capacity change from 0 to 512 [ 352.031715][ T7823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.073901][ T7822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 352.090256][ T7830] netlink: 'syz.1.16284': attribute type 6 has an invalid length. [ 352.178253][ T7822] loop5: detected capacity change from 512 to 64 [ 352.185299][ T7839] EXT4-fs error (device loop5): ext4_write_dquot:6917: comm syz.5.16282: Failed to commit dquot type 1 [ 352.200719][ T7839] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Out of memory [ 352.210505][ T7839] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #18: comm syz.5.16282: mark_inode_dirty error [ 352.224012][ T7839] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Out of memory [ 352.236047][ T7839] EXT4-fs error (device loop5): ext4_truncate:4666: inode #18: comm syz.5.16282: mark_inode_dirty error [ 352.258158][ T7842] vlan0: entered promiscuous mode [ 352.303237][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 352.439055][T17784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.503400][T17784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.554008][ T7861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7861 comm=syz.9.16302 [ 352.585248][T17784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.628493][T17784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.696371][ T7879] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 352.696371][ T7879] Q&|xXX HID v0.00 Device [sy] on syz0 [ 353.439180][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.446296][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.453518][ T7863] bridge_slave_0: entered allmulticast mode [ 353.461683][ T7863] bridge_slave_0: entered promiscuous mode [ 353.484676][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.491777][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.524008][ T7863] bridge_slave_1: entered allmulticast mode [ 353.530647][ T7863] bridge_slave_1: entered promiscuous mode [ 353.556917][ T7938] syzkaller0: entered promiscuous mode [ 353.562444][ T7938] syzkaller0: entered allmulticast mode [ 353.620384][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.636456][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.672483][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 353.672495][ T29] audit: type=1400 audit(369.359:17679): avc: denied { setopt } for pid=7944 comm="syz.1.16333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.673120][ T7863] team0: Port device team_slave_0 added [ 353.706360][ T7863] team0: Port device team_slave_1 added [ 353.736628][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.743586][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.769533][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.793078][ T29] audit: type=1326 audit(369.488:17680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.9.16334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 353.794428][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.816113][ T29] audit: type=1326 audit(369.488:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.9.16334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 353.823100][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.852241][ T29] audit: type=1326 audit(369.541:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.9.16334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 353.872307][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.894886][ T29] audit: type=1326 audit(369.541:17683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.9.16334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 353.928365][ T29] audit: type=1326 audit(369.541:17684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.9.16334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 353.991980][ T7863] hsr_slave_0: entered promiscuous mode [ 353.998704][ T29] audit: type=1326 audit(369.691:17685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.9.16339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 354.021715][ T29] audit: type=1326 audit(369.702:17686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.9.16339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 354.044584][ T29] audit: type=1326 audit(369.702:17687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.9.16339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 354.067533][ T29] audit: type=1326 audit(369.702:17688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.9.16339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb9d70bebe9 code=0x7ffc0000 [ 354.084690][ T7964] loop8: detected capacity change from 0 to 2048 [ 354.097332][ T7863] hsr_slave_1: entered promiscuous mode [ 354.119336][ T7964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.212206][ T6942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.372597][ T7995] __nla_validate_parse: 3 callbacks suppressed [ 354.372612][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.387878][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.397089][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.448003][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.457137][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.466340][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.534440][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.543684][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.552805][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16354'. [ 354.567179][ T7863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.587052][ T7863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.604710][ T7863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.631653][ T7863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.660027][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16358'. [ 354.732511][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.772215][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.803404][T17789] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.810586][T17789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.860792][T17789] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.867936][T17789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.929513][ T7863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.992509][ T8038] binfmt_misc: register: failed to install interpreter file ./file2 [ 355.013112][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.175215][ T7863] veth0_vlan: entered promiscuous mode [ 355.191475][ T7863] veth1_vlan: entered promiscuous mode [ 355.217743][ T8079] bond1: entered promiscuous mode [ 355.222913][ T8079] bond1: entered allmulticast mode [ 355.228464][ T8079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.244673][ T8079] bond1 (unregistering): Released all slaves [ 355.313653][ T7863] veth0_macvtap: entered promiscuous mode [ 355.326274][ T7863] veth1_macvtap: entered promiscuous mode [ 355.341006][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.354096][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.369659][ T8089] hub 9-0:1.0: USB hub found [ 355.377763][T17784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.389404][ T8089] hub 9-0:1.0: 8 ports detected [ 355.396429][T17784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.426600][T17784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.440615][T17784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.496558][ T8097] hub 2-0:1.0: USB hub found [ 355.515217][ T8097] hub 2-0:1.0: 8 ports detected [ 355.948270][ T8172] loop8: detected capacity change from 0 to 128 [ 355.959112][ T8172] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 355.962227][ T8171] loop9: detected capacity change from 0 to 1024 [ 355.983831][ T8171] EXT4-fs: Ignoring removed orlov option [ 355.989659][ T8171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.013829][ T8171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.033123][ T8172] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 356.051729][ T7325] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.249440][ T8209] random: crng reseeded on system resumption [ 356.324290][ T8219] SELinux: security policydb version 17 (MLS) not backwards compatible [ 356.333364][ T8219] SELinux: failed to load policy [ 356.632788][ T8259] loop9: detected capacity change from 0 to 1024 [ 356.681392][ T8259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.748665][ T8264] netlink: 'syz.1.16467': attribute type 21 has an invalid length. [ 356.784440][ T7325] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.804608][ T8264] netlink: 'syz.1.16467': attribute type 5 has an invalid length. [ 356.812510][ T8264] netlink: 'syz.1.16467': attribute type 6 has an invalid length. [ 356.846045][ T8267] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 356.861139][ T8270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8270 comm=syz.9.16469 [ 356.909923][ T8276] 9p: Unknown access argument clirent: -22 [ 356.913278][ T8273] serio: Serial port ttyS3 [ 356.955547][ T8284] loop9: detected capacity change from 0 to 512 [ 356.983105][ T3302] block device autoloading is deprecated and will be removed. [ 356.991534][ T8287] block device autoloading is deprecated and will be removed. [ 357.022838][ T8284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.079199][ T7325] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.173474][ T8315] loop9: detected capacity change from 0 to 2048 [ 357.221026][ T8315] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 357.250154][ T8315] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 357.265426][ T8315] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 357.277775][ T8315] EXT4-fs (loop9): This should not happen!! Data will be lost [ 357.277775][ T8315] [ 357.282593][ T8339] loop0: detected capacity change from 0 to 512 [ 357.287598][ T8315] EXT4-fs (loop9): Total free blocks count 0 [ 357.287616][ T8315] EXT4-fs (loop9): Free/Dirty block details [ 357.287628][ T8315] EXT4-fs (loop9): free_blocks=2415919104 [ 357.311674][ T8315] EXT4-fs (loop9): dirty_blocks=16 [ 357.316833][ T8315] EXT4-fs (loop9): Block reservation details [ 357.322809][ T8315] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 357.329009][ T8343] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 357.367868][ T8339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.401501][ T7863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.484223][ T9336] kernel write not supported for file bpf-prog (pid: 9336 comm: kworker/1:6) [ 357.634052][ T8396] smc: net device bond0 applied user defined pnetid SYZ0 [ 357.644841][ T8396] smc: net device bond0 erased user defined pnetid SYZ0 [ 357.664048][ T8402] program syz.8.16527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.767067][ T8423] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 357.777387][ T8423] SELinux: failed to load policy [ 358.131335][ T8487] loop8: detected capacity change from 0 to 128 [ 358.146789][ T8487] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.167471][ T8491] netlink: 'syz.9.16571': attribute type 13 has an invalid length. [ 358.189092][ T8491] gretap0: refused to change device tx_queue_len [ 358.198103][ T8491] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 358.249306][ T6942] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.465944][ T8522] netlink: 'syz.8.16581': attribute type 3 has an invalid length. [ 358.474075][ T8522] netlink: 'syz.8.16581': attribute type 3 has an invalid length. [ 358.838809][ T9336] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 358.893849][ T9336] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.945921][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 358.945936][ T29] audit: type=1326 audit(375.013:17896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 358.982746][ T29] audit: type=1326 audit(375.013:17897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.005924][ T29] audit: type=1326 audit(375.013:17898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.028990][ T29] audit: type=1326 audit(375.013:17899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.051948][ T29] audit: type=1326 audit(375.013:17900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.074910][ T29] audit: type=1326 audit(375.013:17901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.169328][ T29] audit: type=1326 audit(375.174:17902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.192442][ T29] audit: type=1326 audit(375.174:17903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.249273][ T8565] __nla_validate_parse: 18 callbacks suppressed [ 359.249287][ T8565] netlink: 256 bytes leftover after parsing attributes in process `syz.8.16601'. [ 359.327250][ T8531] Set syz1 is full, maxelem 65536 reached [ 359.341484][ T29] audit: type=1326 audit(375.303:17904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.364505][ T29] audit: type=1326 audit(375.303:17905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.8.16599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1265febe9 code=0x7ffc0000 [ 359.460392][ T8585] netlink: 'syz.1.16610': attribute type 1 has an invalid length. [ 359.510661][ T8585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.557515][ T8585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.571744][ T8585] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 359.583444][ T8585] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 359.715427][ T8607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8607 comm=syz.9.16621 [ 359.728067][ T8607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8607 comm=syz.9.16621 [ 359.778669][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16626'. [ 359.787691][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16626'. [ 359.796861][ T8616] netlink: 'syz.9.16626': attribute type 20 has an invalid length. [ 359.804856][ T8613] netlink: 'syz.8.16624': attribute type 6 has an invalid length. [ 359.804888][ T8613] netlink: 32 bytes leftover after parsing attributes in process `syz.8.16624'. [ 359.804972][ T8616] ================================================================== [ 359.805000][ T8616] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 359.805033][ T8616] [ 359.805037][ T8616] write to 0xffffffff86870ee0 of 8 bytes by task 8613 on cpu 1: [ 359.805051][ T8616] data_alloc+0x271/0x2b0 [ 359.805078][ T8616] prb_reserve+0x808/0xaf0 [ 359.805103][ T8616] vprintk_store+0x56d/0x860 [ 359.805132][ T8616] vprintk_emit+0x178/0x650 [ 359.805146][ T8616] vprintk_default+0x26/0x30 [ 359.805162][ T8616] vprintk+0x1d/0x30 [ 359.805182][ T8616] _printk+0x79/0xa0 [ 359.805205][ T8616] __nla_validate_parse+0x1227/0x1d00 [ 359.805225][ T8616] __nla_parse+0x40/0x60 [ 359.805242][ T8616] rtnl_newlink+0x10ab/0x12d0 [ 359.805262][ T8616] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 359.805283][ T8616] netlink_rcv_skb+0x123/0x220 [ 359.805299][ T8616] rtnetlink_rcv+0x1c/0x30 [ 359.805318][ T8616] netlink_unicast+0x5bd/0x690 [ 359.805333][ T8616] netlink_sendmsg+0x58b/0x6b0 [ 359.805349][ T8616] __sock_sendmsg+0x145/0x180 [ 359.805373][ T8616] ____sys_sendmsg+0x31e/0x4e0 [ 359.805392][ T8616] ___sys_sendmsg+0x17b/0x1d0 [ 359.805408][ T8616] __x64_sys_sendmsg+0xd4/0x160 [ 359.805425][ T8616] x64_sys_call+0x191e/0x2ff0 [ 359.805443][ T8616] do_syscall_64+0xd2/0x200 [ 359.805466][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.805482][ T8616] [ 359.805487][ T8616] read to 0xffffffff86870ee0 of 16 bytes by task 8616 on cpu 0: [ 359.805503][ T8616] _prb_read_valid+0x1bc/0x920 [ 359.805530][ T8616] prb_read_valid+0x3c/0x60 [ 359.805553][ T8616] printk_get_next_message+0xc8/0x510 [ 359.805571][ T8616] console_flush_all+0x290/0x730 [ 359.805587][ T8616] console_unlock+0xa1/0x330 [ 359.805600][ T8616] vprintk_emit+0x388/0x650 [ 359.805613][ T8616] vprintk_default+0x26/0x30 [ 359.805627][ T8616] vprintk+0x1d/0x30 [ 359.805644][ T8616] _printk+0x79/0xa0 [ 359.805667][ T8616] __nla_validate_parse+0x1227/0x1d00 [ 359.805689][ T8616] __nla_parse+0x40/0x60 [ 359.805708][ T8616] rtnl_newlink+0x793/0x12d0 [ 359.805733][ T8616] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 359.805758][ T8616] netlink_rcv_skb+0x123/0x220 [ 359.805775][ T8616] rtnetlink_rcv+0x1c/0x30 [ 359.805792][ T8616] netlink_unicast+0x5bd/0x690 [ 359.805803][ T8616] netlink_sendmsg+0x58b/0x6b0 [ 359.805819][ T8616] __sock_sendmsg+0x145/0x180 [ 359.805840][ T8616] ____sys_sendmsg+0x345/0x4e0 [ 359.805858][ T8616] ___sys_sendmsg+0x17b/0x1d0 [ 359.805875][ T8616] __sys_sendmmsg+0x178/0x300 [ 359.805893][ T8616] __x64_sys_sendmmsg+0x57/0x70 [ 359.805911][ T8616] x64_sys_call+0x1c4a/0x2ff0 [ 359.805927][ T8616] do_syscall_64+0xd2/0x200 [ 359.805949][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.805967][ T8616] [ 359.805970][ T8616] Reported by Kernel Concurrency Sanitizer on: [ 359.805980][ T8616] CPU: 0 UID: 0 PID: 8616 Comm: syz.9.16626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 359.806004][ T8616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.806015][ T8616] ================================================================== [ 360.120243][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16626'. [ 360.120324][T17829] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.129234][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16626'. [ 360.129260][ T8616] netlink: 'syz.9.16626': attribute type 20 has an invalid length. [ 360.155466][T17829] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.164368][T18403] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.173716][T18403] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0