last executing test programs: 1m22.09014843s ago: executing program 32 (id=2658): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={r2, 0x8}, &(0x7f0000000980)=0x8) 1m0.666394628s ago: executing program 0 (id=3654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1m0.661164868s ago: executing program 0 (id=3657): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m0.627936201s ago: executing program 0 (id=3658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1539, &(0x7f00000003c0)={0x0, 0xed32, 0x2, 0x0, 0x394}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 1m0.456946144s ago: executing program 33 (id=3661): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x9, 0x5d, 0x11, 0x8}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1m0.415874828s ago: executing program 0 (id=3663): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0) 1m0.39263975s ago: executing program 0 (id=3665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socket(0x10, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 1m0.274165149s ago: executing program 0 (id=3670): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") chdir(0x0) lseek(0xffffffffffffffff, 0xe, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) mq_unlink(0x0) 1m0.230221993s ago: executing program 34 (id=3670): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") chdir(0x0) lseek(0xffffffffffffffff, 0xe, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) mq_unlink(0x0) 52.624392192s ago: executing program 7 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 52.567817427s ago: executing program 7 (id=4055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x28, r2, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x72}}}}}, 0x28}}, 0x0) 52.469122315s ago: executing program 7 (id=4058): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vw^\xbe\x19\xb9\x82\xe0\x92\x95\x14\x98\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000080)="4355c187", 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) close(r0) 52.406107819s ago: executing program 7 (id=4061): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 52.387823231s ago: executing program 7 (id=4064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 52.161295499s ago: executing program 7 (id=4069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 52.117288103s ago: executing program 35 (id=4069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 35.920169461s ago: executing program 8 (id=4688): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 35.891154013s ago: executing program 8 (id=4691): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) 35.876165005s ago: executing program 8 (id=4693): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(0x3) 35.844136917s ago: executing program 8 (id=4695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 35.843612407s ago: executing program 8 (id=4696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 35.670246621s ago: executing program 8 (id=4699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 35.646456823s ago: executing program 36 (id=4699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 35.464349228s ago: executing program 6 (id=4709): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 35.400706623s ago: executing program 6 (id=4711): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) 35.334334818s ago: executing program 6 (id=4715): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @empty, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 35.330081039s ago: executing program 6 (id=4716): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 35.31229072s ago: executing program 6 (id=4717): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3a, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 33.846944957s ago: executing program 6 (id=4744): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x800, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 33.834335598s ago: executing program 37 (id=4744): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x800, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 20.994063287s ago: executing program 4 (id=5162): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 20.110042958s ago: executing program 4 (id=5180): gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) umount2(0x0, 0xa) 20.066401062s ago: executing program 4 (id=5185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19.857978128s ago: executing program 4 (id=5197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 19.811325373s ago: executing program 4 (id=5199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f00000010c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@acl}, {@noauto_da_alloc}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}], [{@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '*&@^))'}}, {@obj_user={'obj_user', 0x3d, '/]:\xb7+#*'}}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") mlockall(0x7) 19.634383107s ago: executing program 4 (id=5210): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 19.624002658s ago: executing program 38 (id=5210): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1.38099284s ago: executing program 2 (id=5839): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 1.150110978s ago: executing program 2 (id=5847): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 809.031586ms ago: executing program 9 (id=5856): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 591.694893ms ago: executing program 1 (id=5861): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) 591.111873ms ago: executing program 9 (id=5872): socket(0x11, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 433.644226ms ago: executing program 5 (id=5864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 380.81348ms ago: executing program 9 (id=5867): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 379.62346ms ago: executing program 5 (id=5868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000240)={0xa, 0x4c20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) 353.432352ms ago: executing program 1 (id=5870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 352.724912ms ago: executing program 5 (id=5873): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x82, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 352.365202ms ago: executing program 9 (id=5874): dup(0xffffffffffffffff) r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r0) 303.401657ms ago: executing program 9 (id=5885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 280.261908ms ago: executing program 2 (id=5876): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 269.961309ms ago: executing program 9 (id=5877): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 242.231811ms ago: executing program 1 (id=5878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(0x0, 0x0, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2) 241.158211ms ago: executing program 5 (id=5880): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) 227.443483ms ago: executing program 2 (id=5881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r3) 170.341167ms ago: executing program 1 (id=5882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_set_self_attr(0x64, 0x0, 0x20, 0x0) 170.044807ms ago: executing program 2 (id=5883): inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) 169.459647ms ago: executing program 1 (id=5884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x1578, 0x64, 0xf31, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x4, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe83, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x5}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e20}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x14d0, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x10001}, @TCA_FW_ACT={0x149c, 0x4, [@m_simple={0x1038, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x11c, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xe7, 0x6, "79cfb903be60bd32931e9e7318677d0e1af05212242908c44fdd9043e984b3c79e0da1ff14c560126b2a3c209faaf1645c3a555bdfdb81441f0cb0f04e95583d39eefa54bcc678a1ee58c832be068addfaac50e8cd69b9401587cea9b413c5d928ec6cace62fe466edae520f8358394bf5d6f67056d946b3141e59cf5bab84806ccdd4873e95067d66aba45e6a540bda40fb09a6ab3fe9f503d08948561c9d5002f83f568ece2aeffe754a3e0ce95aa64ea1299643e3e903c9e7e4b7cc44ac642c4f78caa09cf21a2146d4b78f692166011589abd73fd28914c876e0411bbb069acba1"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xa0, 0x19, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}]}, {0x3d, 0x6, "c8a305ac50ea5ee686b58bc52529b5dff14581bd99ca2e52e5ae0e40eaa243a4d39235bcf694f7e64376856c1514cbc8f2fa33fd18f6139bfa"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x38, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x114, 0x15, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1000}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0xd955, 0x20000000, 0xfffffff8, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x6, 0xb8c565e23d0b4d8d, 0x7a, 0x5}}]}, {0xae, 0x6, "a01c7116c1e17066b0ee85005a0382dfe6108ece4422fb52ed06f63e2600356cfa9727f0542618d22c86258e519b8c0e7a19097abc056f0c8e3b4098037d84493d8b25a1e7606bc22cc78b806794c51fd26ebdd51fa58855587b55a7c5c799e173f7786a6d2e6b67ad535cccc0097daadaa514f341316ccad7580878180fb501c3f9d8c996dbba259dd29f4579685476e6482258879d1a42ae51d3d57a47714c73df3eccfbd6c6b66377"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x158, 0x18, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc7f}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x85d, 0x3ff, 0x7, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffd, 0x0, 0xffffffffffffffff, 0x5, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6f1e, 0x0, 0x3, 0x7fffffff, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa0, 0x3d7e, 0x5, 0x800, 0x7000000}}]}, {0xa2, 0x6, "46207ef5b878c88e5fc6d296354441219eb20ef7eaf991d1cf5f2c7285fe1b1453360aea7d0d250f88a45e73e3a5bda27041de8ebdafeecb7faf690bbd387855a5d068d2560e5cbe9affb92cf5c177afe128ff1eb6582649255459d68414008db6f6f67f0934f8870a469a515274828c559f40559c6e70cfc8e185c09079c7cde24445d239c7b62c4fcfcdf3a2bac3789c8559d2823ea9b327c0841b382e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'bond0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x40, 0xd0}}]}, 0x1578}, 0x1, 0x0, 0x0, 0x10}, 0x0) 164.489777ms ago: executing program 3 (id=5887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x5}, &(0x7f0000000240)=0x70d, 0x0, 0x3, 0x100, 0x7, 0x9, 0x2, 0x7fffffff}}], 0x58}, 0x0) 119.963721ms ago: executing program 3 (id=5888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 110.278532ms ago: executing program 5 (id=5889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 70.773255ms ago: executing program 1 (id=5890): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init1(0x0) read(r2, 0x0, 0x0) 70.302075ms ago: executing program 2 (id=5891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 69.857095ms ago: executing program 3 (id=5892): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) mount_setattr(r3, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000000080)={0x5, 0x0, 0x0, {r3}}, 0x20) 58.978346ms ago: executing program 5 (id=5893): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 2.60914ms ago: executing program 3 (id=5894): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 2.24114ms ago: executing program 3 (id=5895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 0s ago: executing program 3 (id=5896): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) kernel console output (not intermixed with test programs): pid=11053 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 105.056616][ T29] audit: type=1326 audit(105.041:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 105.168471][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3057'. [ 105.178369][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3057'. [ 105.357735][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 105.835674][T11172] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.865710][T11177] ip6tnl1: entered promiscuous mode [ 106.564490][T11264] rdma_op ffff8881267bbd80 conn xmit_rdma 0000000000000000 [ 108.248917][T11497] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 108.331232][T11509] syzkaller1: entered promiscuous mode [ 108.336773][T11509] syzkaller1: entered allmulticast mode [ 108.540313][T11542] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 108.603887][T11548] SELinux: failed to load policy [ 108.873989][T11582] netlink: 'syz.3.3287': attribute type 4 has an invalid length. [ 108.914147][T11586] 9pnet_fd: Insufficient options for proto=fd [ 109.041827][T11610] __nla_validate_parse: 13 callbacks suppressed [ 109.041841][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'. [ 109.164096][T11621] lo speed is unknown, defaulting to 1000 [ 109.188015][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 109.205354][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 109.215359][T11621] netlink: 'syz.2.3306': attribute type 6 has an invalid length. [ 109.226883][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3309'. [ 109.348988][T11650] lo speed is unknown, defaulting to 1000 [ 109.440538][T11662] Process accounting resumed [ 109.578412][T11666] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 109.653174][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 109.653187][ T29] audit: type=1400 audit(109.691:5223): avc: denied { getopt } for pid=11679 comm="syz.3.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.781352][ T29] audit: type=1326 audit(109.811:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.804342][ T29] audit: type=1326 audit(109.811:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.827199][ T29] audit: type=1326 audit(109.811:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.850134][ T29] audit: type=1326 audit(109.811:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.873080][ T29] audit: type=1326 audit(109.811:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.896028][ T29] audit: type=1326 audit(109.811:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.918916][ T29] audit: type=1326 audit(109.811:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.941758][ T29] audit: type=1326 audit(109.811:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 109.969151][T11697] cgroup: Unknown subsys name 'obj_user' [ 109.978645][ T29] audit: type=1326 audit(110.001:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11694 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effacaeebe9 code=0x7ffc0000 [ 110.087690][T11713] syzkaller1: entered promiscuous mode [ 110.093337][T11713] syzkaller1: entered allmulticast mode [ 110.126079][T11719] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3349'. [ 110.135619][T11719] 0{X: renamed from gretap0 [ 110.144594][T11719] 0{X: entered allmulticast mode [ 110.151361][T11719] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 110.163042][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3353'. [ 110.206424][T11730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11730 comm=syz.0.3355 [ 110.295227][T11748] loop5: detected capacity change from 0 to 512 [ 110.328516][T11748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.381590][T11765] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 110.390269][T10612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.497539][T11782] netlink: 'syz.5.3378': attribute type 11 has an invalid length. [ 110.505426][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3378'. [ 110.513189][T11784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3379'. [ 110.541401][T11788] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3381'. [ 110.563914][T11788] 0{X: renamed from gretap0 [ 110.577585][T11788] 0{X: entered allmulticast mode [ 110.584141][T11788] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 110.647663][T11800] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 110.806995][T11819] lo speed is unknown, defaulting to 1000 [ 110.847384][T11819] netlink: 'syz.0.3395': attribute type 6 has an invalid length. [ 110.990976][T11859] syzkaller1: entered promiscuous mode [ 110.996459][T11859] syzkaller1: entered allmulticast mode [ 111.232193][T11887] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3425'. [ 111.317275][T11908] netlink: 'syz.0.3434': attribute type 3 has an invalid length. [ 111.433374][T11927] lo speed is unknown, defaulting to 1000 [ 111.685937][T11946] loop5: detected capacity change from 0 to 8192 [ 111.733644][T11954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11954 comm=syz.3.3454 [ 111.810710][T11956] loop5: detected capacity change from 0 to 4096 [ 111.830958][T11956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.128047][T10612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.558510][T12065] loop5: detected capacity change from 0 to 512 [ 112.590252][T12065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.626505][T10612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.858702][T12107] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 113.074987][T12134] lo speed is unknown, defaulting to 1000 [ 113.098808][T12141] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12141 comm=syz.3.3536 [ 113.271185][T12155] macvlan1: entered promiscuous mode [ 113.284589][T12155] ipvlan0: entered promiscuous mode [ 113.293474][T12155] ipvlan0: left promiscuous mode [ 113.300143][T12155] macvlan1: left promiscuous mode [ 113.756476][T12202] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 113.972271][T12232] hub 9-0:1.0: USB hub found [ 113.997200][T12232] hub 9-0:1.0: 8 ports detected [ 114.109546][T12247] loop5: detected capacity change from 0 to 512 [ 114.138498][T12247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.155175][T12247] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3583: casefold flag without casefold feature [ 114.179391][T12247] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3583: couldn't read orphan inode 15 (err -117) [ 114.205233][T12247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.247700][T10612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.289546][T12260] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 114.329879][T12268] netlink: 'syz.3.3591': attribute type 3 has an invalid length. [ 114.343049][T12274] loop5: detected capacity change from 0 to 164 [ 114.418047][T12285] macvtap0: refused to change device tx_queue_len [ 114.637858][T12324] lo speed is unknown, defaulting to 1000 [ 114.703289][T12337] loop5: detected capacity change from 0 to 512 [ 114.722002][T12337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.750022][T10612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.802151][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 114.802164][ T29] audit: type=1326 audit(114.841:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed598cebe9 code=0x7ffc0000 [ 114.831588][ T29] audit: type=1326 audit(114.841:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed598cebe9 code=0x7ffc0000 [ 114.854682][ T29] audit: type=1326 audit(114.841:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fed598cebe9 code=0x7ffc0000 [ 114.877714][ T29] audit: type=1326 audit(114.841:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed598cebe9 code=0x7ffc0000 [ 114.900574][ T29] audit: type=1326 audit(114.841:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed598cebe9 code=0x7ffc0000 [ 114.987399][T12363] __nla_validate_parse: 6 callbacks suppressed [ 114.987411][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3632'. [ 115.012237][T12365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12365 comm=syz.3.3634 [ 115.027983][ T29] audit: type=1107 audit(115.071:5557): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 115.058912][T12370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12370 comm=syz.2.3632 [ 115.088557][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3632'. [ 115.181752][ T29] audit: type=1326 audit(115.221:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.3.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 115.184456][T12383] loop5: detected capacity change from 0 to 512 [ 115.204802][ T29] audit: type=1326 audit(115.221:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.3.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 115.249833][ T29] audit: type=1326 audit(115.251:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.3.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 115.272757][ T29] audit: type=1326 audit(115.251:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.3.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 115.332139][T12383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.418024][T10612] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 115.444066][T10612] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 115.506486][T11992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.600867][T12418] lo speed is unknown, defaulting to 1000 [ 115.670845][ T7332] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.720961][ T7332] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.776363][ T7332] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.831395][ T7332] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.930942][T12437] lo speed is unknown, defaulting to 1000 [ 115.947549][ T7332] bridge_slave_1: left allmulticast mode [ 115.953244][ T7332] bridge_slave_1: left promiscuous mode [ 115.958977][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.009253][ T7332] bridge_slave_0: left allmulticast mode [ 116.014914][ T7332] bridge_slave_0: left promiscuous mode [ 116.020628][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.110467][ T7332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.120724][ T7332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.130126][ T7332] bond0 (unregistering): Released all slaves [ 116.144045][T12467] vlan2: entered allmulticast mode [ 116.151703][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 116.223195][ T7332] hsr_slave_0: left promiscuous mode [ 116.230946][ T7332] hsr_slave_1: left promiscuous mode [ 116.236636][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.244169][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.252271][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.259701][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.271994][ T7332] veth1_macvtap: left promiscuous mode [ 116.277613][ T7332] veth0_macvtap: left promiscuous mode [ 116.283155][ T7332] veth1_vlan: left promiscuous mode [ 116.288494][ T7332] veth0_vlan: left promiscuous mode [ 116.364272][ T7332] team0 (unregistering): Port device team_slave_1 removed [ 116.375727][ T7332] team0 (unregistering): Port device team_slave_0 removed [ 116.414832][T12492] IPVS: Error connecting to the multicast addr [ 116.425792][T12437] chnl_net:caif_netlink_parms(): no params data found [ 116.481351][T12468] lo speed is unknown, defaulting to 1000 [ 116.534640][T12437] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.541804][T12437] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.565892][T12437] bridge_slave_0: entered allmulticast mode [ 116.572424][T12437] bridge_slave_0: entered promiscuous mode [ 116.593575][T12437] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.600730][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.612100][T12437] bridge_slave_1: entered allmulticast mode [ 116.626718][T12437] bridge_slave_1: entered promiscuous mode [ 116.654415][T12437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.676466][T12437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.703210][T12437] team0: Port device team_slave_0 added [ 116.709814][T12437] team0: Port device team_slave_1 added [ 116.715517][T12468] chnl_net:caif_netlink_parms(): no params data found [ 116.744425][T12437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.751438][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.777354][T12437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.812196][T12437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.819196][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.845154][T12437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.860072][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3700'. [ 116.871037][T12547] netem: change failed [ 116.879535][T12554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12554 comm=syz.3.3703 [ 116.926100][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.933230][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.941182][T12468] bridge_slave_0: entered allmulticast mode [ 116.947754][T12468] bridge_slave_0: entered promiscuous mode [ 116.961866][T12437] hsr_slave_0: entered promiscuous mode [ 116.967898][T12437] hsr_slave_1: entered promiscuous mode [ 116.974181][T12437] debugfs: 'hsr0' already exists in 'hsr' [ 116.979936][T12437] Cannot create hsr debugfs directory [ 116.985387][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3708'. [ 117.002162][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.009253][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.016785][T12468] bridge_slave_1: entered allmulticast mode [ 117.024945][T12468] bridge_slave_1: entered promiscuous mode [ 117.044141][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.053983][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3711'. [ 117.073662][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.110323][T12468] team0: Port device team_slave_0 added [ 117.124204][T12468] team0: Port device team_slave_1 added [ 117.169730][T12583] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3715'. [ 117.199411][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.206384][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.232481][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.265739][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.272767][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.298689][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.368090][T12468] hsr_slave_0: entered promiscuous mode [ 117.378998][T12468] hsr_slave_1: entered promiscuous mode [ 117.384906][T12468] debugfs: 'hsr0' already exists in 'hsr' [ 117.390655][T12468] Cannot create hsr debugfs directory [ 117.416313][T12437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.442523][T12437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.472459][T12437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.496935][T12437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.552468][ T7332] bond0 (unregistering): Released all slaves [ 117.610122][ T7332] hsr_slave_0: left promiscuous mode [ 117.615742][ T7332] hsr_slave_1: left promiscuous mode [ 117.621346][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.628918][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.680018][ T7332] batadv0 (unregistering): left allmulticast mode [ 117.714164][T12437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.740045][T12468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.750937][T12437] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.759010][T12468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.777335][T12468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.790180][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.797381][ T7289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.808219][T12468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.820122][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.827191][ T7289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.895374][T12468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.909999][T12468] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.919518][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.926568][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.940096][T12437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.950215][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.957293][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.053655][T12468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.156116][T12689] netlink: 'syz.1.3744': attribute type 6 has an invalid length. [ 118.171962][T12437] veth0_vlan: entered promiscuous mode [ 118.181656][T12437] veth1_vlan: entered promiscuous mode [ 118.210207][T12437] veth0_macvtap: entered promiscuous mode [ 118.220907][T12437] veth1_macvtap: entered promiscuous mode [ 118.245186][T12437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.263751][T12437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.271168][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3748'. [ 118.284153][ T7289] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.294595][T12468] veth0_vlan: entered promiscuous mode [ 118.312520][ T7332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.330720][T12468] veth1_vlan: entered promiscuous mode [ 118.339198][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3750'. [ 118.348849][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.383961][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.401492][T12468] veth0_macvtap: entered promiscuous mode [ 118.435784][T12468] veth1_macvtap: entered promiscuous mode [ 118.459513][T12468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.480780][T12468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.494685][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.504458][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.525706][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.565085][ T7289] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.862773][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3775'. [ 118.909080][T12771] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 119.199311][T12809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12809 comm=syz.3.3794 [ 119.252851][T12818] netlink: 'syz.7.3799': attribute type 2 has an invalid length. [ 119.453464][T12860] netlink: 'syz.2.3820': attribute type 1 has an invalid length. [ 119.461348][T12860] netlink: 'syz.2.3820': attribute type 4 has an invalid length. [ 119.508322][T12866] netlink: 'syz.2.3823': attribute type 1 has an invalid length. [ 119.518206][T12868] loop9: detected capacity change from 0 to 7 [ 119.821151][T12920] netlink: 'syz.6.3848': attribute type 7 has an invalid length. [ 119.824393][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 119.824405][ T29] audit: type=1326 audit(119.861:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 119.860975][ T29] audit: type=1326 audit(119.871:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 119.883947][ T29] audit: type=1326 audit(119.871:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 119.906912][ T29] audit: type=1326 audit(119.871:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 119.929834][ T29] audit: type=1326 audit(119.871:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 119.952754][ T29] audit: type=1326 audit(119.891:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 120.004179][ T29] audit: type=1326 audit(119.951:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 120.027188][ T29] audit: type=1326 audit(120.011:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 120.050501][ T29] audit: type=1326 audit(120.011:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.2.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 120.119794][ T29] audit: type=1400 audit(120.161:5783): avc: denied { listen } for pid=12936 comm="syz.6.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 120.144496][T12939] __nla_validate_parse: 5 callbacks suppressed [ 120.144512][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'. [ 120.160222][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'. [ 120.192345][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'. [ 120.217766][ T41] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.226252][ T41] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.228630][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'. [ 120.234768][ T41] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.251788][ T41] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.293414][ T9962] kernel write not supported for file /sg0 (pid: 9962 comm: kworker/0:5) [ 120.392467][T12972] netlink: 14528 bytes leftover after parsing attributes in process `syz.7.3872'. [ 120.403273][T12975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3874'. [ 120.458183][T12985] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 120.474865][T12983] IPVS: Error connecting to the multicast addr [ 120.536433][T13002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13002 comm=syz.1.3887 [ 120.567424][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3887'. [ 120.601335][T13002] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 120.629838][T13002] bond0: (slave vcan1): Error -95 calling set_mac_address [ 120.660169][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 120.669158][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 121.133346][T13067] loop7: detected capacity change from 0 to 512 [ 121.147822][T13067] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 121.249516][T13109] netlink: 'syz.6.3934': attribute type 4 has an invalid length. [ 121.282355][T13115] pimreg: entered allmulticast mode [ 121.291154][T13115] pimreg: left allmulticast mode [ 121.307574][T13121] loop6: detected capacity change from 0 to 512 [ 121.321357][T13121] EXT4-fs (loop6): 1 orphan inode deleted [ 121.327482][T13121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.340803][ T7293] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 121.363619][T12437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.556017][T13158] netlink: 'syz.1.3951': attribute type 21 has an invalid length. [ 121.565777][T13158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3951'. [ 121.574865][T13158] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 121.774456][T13179] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 122.075286][T13210] bond1: entered promiscuous mode [ 122.080489][T13210] bond1: entered allmulticast mode [ 122.086179][T13210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.097094][T13210] bond1 (unregistering): Released all slaves [ 122.315951][T13241] hub 2-0:1.0: USB hub found [ 122.328592][T13241] hub 2-0:1.0: 8 ports detected [ 122.918459][T13285] loop6: detected capacity change from 0 to 1024 [ 122.934298][T13285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.942217][T13285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.962199][T13285] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 122.977716][T13285] System zones: 0-1, 3-36 [ 122.984650][T13285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.999419][T13288] netlink: 'syz.1.4009': attribute type 1 has an invalid length. [ 123.017508][T13288] netlink: 'syz.1.4009': attribute type 1 has an invalid length. [ 123.063572][T12437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.156053][T13312] tipc: Started in network mode [ 123.161060][T13312] tipc: Node identity ac14140f, cluster identity 4711 [ 123.182526][T13312] tipc: New replicast peer: 255.255.255.255 [ 123.188697][T13312] tipc: Enabled bearer , priority 10 [ 123.246139][T13329] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.258860][T13333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13333 comm=syz.7.4027 [ 123.341152][T13347] loop9: detected capacity change from 0 to 8 [ 123.350243][T13329] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.362639][T13351] openvswitch: netlink: Message has 6 unknown bytes. [ 123.412303][T13329] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.494633][ T7293] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.513657][T13329] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.550453][ T7293] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.572941][ T7293] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.603931][ T7293] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.628488][ T7293] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.647573][ T7293] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.664269][ T7293] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.677263][ T7293] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.000526][ T7318] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.010993][ T7318] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.099018][ T7318] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.109335][ T7318] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.192462][ T7318] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.202846][ T7318] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.298906][ T3400] tipc: Node number set to 2886997007 [ 124.333108][ T7318] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.343436][ T7318] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.386326][T13458] 9pnet_fd: Insufficient options for proto=fd [ 124.413509][T13430] chnl_net:caif_netlink_parms(): no params data found [ 124.425088][ T7318] bridge_slave_1: left allmulticast mode [ 124.430779][ T7318] bridge_slave_1: left promiscuous mode [ 124.436453][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.445520][ T7318] bridge_slave_0: left allmulticast mode [ 124.451195][ T7318] bridge_slave_0: left promiscuous mode [ 124.456851][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.563624][ T7318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.582231][ T7318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.593744][ T7318] bond0 (unregistering): Released all slaves [ 124.636933][T13430] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.644182][T13430] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.652750][T13430] bridge_slave_0: entered allmulticast mode [ 124.659275][T13430] bridge_slave_0: entered promiscuous mode [ 124.684766][ T7318] hsr_slave_0: left promiscuous mode [ 124.692492][ T7318] hsr_slave_1: left promiscuous mode [ 124.698219][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.705631][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.715879][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.723281][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.735109][ T7318] veth1_macvtap: left promiscuous mode [ 124.740688][ T7318] veth0_macvtap: left promiscuous mode [ 124.746205][ T7318] veth1_vlan: left promiscuous mode [ 124.752815][ T7318] veth0_vlan: left promiscuous mode [ 124.824567][ T7318] team0 (unregistering): Port device team_slave_1 removed [ 124.836282][ T7318] team0 (unregistering): Port device team_slave_0 removed [ 124.870456][T13430] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.877531][T13430] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.884864][T13430] bridge_slave_1: entered allmulticast mode [ 124.892272][T13430] bridge_slave_1: entered promiscuous mode [ 124.916998][T13430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.927432][T13430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.950405][T13430] team0: Port device team_slave_0 added [ 124.957061][T13430] team0: Port device team_slave_1 added [ 124.972847][T13430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.979826][T13430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.005782][T13430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.019390][T13430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.026421][T13430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.052407][T13430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.080322][T13430] hsr_slave_0: entered promiscuous mode [ 125.086403][T13430] hsr_slave_1: entered promiscuous mode [ 125.092868][T13430] debugfs: 'hsr0' already exists in 'hsr' [ 125.098599][T13430] Cannot create hsr debugfs directory [ 125.187861][T13430] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 125.197178][T13430] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 125.206024][T13430] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 125.217766][T13430] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 125.280323][T13430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.304155][T13430] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.325277][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.332432][ T7335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.349200][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.356396][ T7335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.414131][T13497] __nla_validate_parse: 7 callbacks suppressed [ 125.414149][T13497] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4093'. [ 125.503655][T13430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.531418][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 125.531511][ T29] audit: type=1326 audit(125.518:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.564092][ T29] audit: type=1326 audit(125.518:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.616550][T13519] netlink: 'syz.2.4099': attribute type 10 has an invalid length. [ 125.626084][T13519] team0: Device hsr_slave_0 failed to register rx_handler [ 125.658941][ T29] audit: type=1326 audit(125.548:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.681974][ T29] audit: type=1326 audit(125.548:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.704908][ T29] audit: type=1326 audit(125.548:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.727813][ T29] audit: type=1326 audit(125.568:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.750682][ T29] audit: type=1326 audit(125.568:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.773618][ T29] audit: type=1326 audit(125.568:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.796629][ T29] audit: type=1326 audit(125.578:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.819514][ T29] audit: type=1326 audit(125.578:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.6.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54147ebe9 code=0x7ffc0000 [ 125.837575][T13522] netlink: 'syz.2.4101': attribute type 298 has an invalid length. [ 125.917399][T13430] veth0_vlan: entered promiscuous mode [ 125.960079][T13430] veth1_vlan: entered promiscuous mode [ 126.016488][T13430] veth0_macvtap: entered promiscuous mode [ 126.037840][T13430] veth1_macvtap: entered promiscuous mode [ 126.050583][T13430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.062381][T13430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.088365][ T7285] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.118357][ T7285] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.156343][ T7285] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.186656][ T7285] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.237059][T13565] sd 0:0:1:0: device reset [ 126.512177][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4122'. [ 126.657416][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 126.676550][T13602] macsec1: entered allmulticast mode [ 126.681916][T13602] bridge0: entered allmulticast mode [ 126.689834][T13602] bridge0: port 1(macsec1) entered blocking state [ 126.696282][T13602] bridge0: port 1(macsec1) entered disabled state [ 126.704561][T13602] bridge0: left allmulticast mode [ 126.970003][T13649] 9pnet_fd: Insufficient options for proto=fd [ 126.977274][T13648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4151'. [ 127.136022][T13675] rdma_op ffff888118c89580 conn xmit_rdma 0000000000000000 [ 127.206682][T13697] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 127.214693][T13695] loop8: detected capacity change from 0 to 512 [ 127.252009][T13695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.314787][T13430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.345065][T13718] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.751753][T13718] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.798101][T13802] 9pnet_fd: Insufficient options for proto=fd [ 128.878018][T13806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4224'. [ 129.374057][T13718] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.422766][T13718] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.477941][ T7296] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.498211][ T7296] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.523179][ T7296] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.536368][ T7296] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.775214][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4257'. [ 129.900751][T13897] loop6: detected capacity change from 0 to 512 [ 129.908985][T13897] journal_path: Lookup failure for './file0/../file0' [ 129.915786][T13897] EXT4-fs: error: could not find journal device path [ 129.921690][T13899] team0: Device gtp1 is of different type [ 130.043771][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 130.412860][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4289'. [ 130.485569][T13958] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4290'. [ 130.555780][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 130.555795][ T29] audit: type=1326 audit(130.538:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.585329][ T29] audit: type=1326 audit(130.538:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.608246][ T29] audit: type=1326 audit(130.538:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.608690][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4293'. [ 130.631103][ T29] audit: type=1326 audit(130.538:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.631126][ T29] audit: type=1326 audit(130.538:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.631147][ T29] audit: type=1326 audit(130.538:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.708579][ T29] audit: type=1326 audit(130.538:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.731475][ T29] audit: type=1326 audit(130.538:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.754319][ T29] audit: type=1326 audit(130.538:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 130.777334][ T29] audit: type=1326 audit(130.538:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.3.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 131.325211][T14011] loop8: detected capacity change from 0 to 512 [ 131.335237][T14011] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 131.345278][T14011] EXT4-fs (loop8): 1 truncate cleaned up [ 131.351496][T14011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.371375][T14011] Invalid ELF header magic: != ELF [ 131.405201][T13430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.502458][T14039] vlan2: entered allmulticast mode [ 131.551279][T14042] bond3: entered promiscuous mode [ 131.556335][T14042] bond3: entered allmulticast mode [ 131.562305][T14042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.579678][T14042] bond3 (unregistering): Released all slaves [ 131.616711][T14049] loop8: detected capacity change from 0 to 764 [ 131.626704][T14049] Symlink component flag not implemented [ 131.633012][T14049] Symlink component flag not implemented (101) [ 131.701551][T14060] loop8: detected capacity change from 0 to 512 [ 131.709206][T14060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.718501][T14060] EXT4-fs (loop8): orphan cleanup on readonly fs [ 131.725596][T14060] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4334: bg 0: block 248: padding at end of block bitmap is not set [ 131.740371][T14060] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4334: Failed to acquire dquot type 1 [ 131.752470][T14060] EXT4-fs (loop8): 1 truncate cleaned up [ 131.758705][T14060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.774346][T14060] syz.8.4334 (14060) used greatest stack depth: 9280 bytes left [ 131.793535][T13430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.796029][T14063] bond3: entered promiscuous mode [ 131.807627][T14063] bond3: entered allmulticast mode [ 131.813149][T14063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.822378][T14063] bond3 (unregistering): Released all slaves [ 131.852120][T14070] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4338'. [ 131.921928][T14079] bond1: entered promiscuous mode [ 131.927036][T14079] bond1: entered allmulticast mode [ 131.932628][T14079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.942122][T14079] bond1 (unregistering): Released all slaves [ 132.330983][T14137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4368'. [ 132.378340][T14145] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.439979][T14145] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.500316][T14145] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.550114][T14145] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.021276][T14185] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4384'. [ 133.252416][T14197] 9pnet_fd: Insufficient options for proto=fd [ 133.363277][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.377526][ T7319] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.390776][ T7319] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.411008][ T7319] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.502171][T14234] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 133.554626][T14230] loop8: detected capacity change from 0 to 4096 [ 133.561754][T14230] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 133.574341][T14230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.680652][T14244] IPVS: Error connecting to the multicast addr [ 133.702291][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4409'. [ 133.714935][T14246] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 133.801555][T13430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.079614][T14278] netlink: 'syz.6.4422': attribute type 27 has an invalid length. [ 134.141566][T14278] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.148811][T14278] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.283314][T14278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.302032][T14278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.581412][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.629978][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.642538][T14281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.658147][ T31] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.695035][ T31] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.716032][ T31] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.736151][ T31] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.888873][T14340] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4454'. [ 134.957442][T14344] loop6: detected capacity change from 0 to 512 [ 134.998722][T14344] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.4446: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 135.016904][T14344] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.4446: Bad quota inode: 3, type: 0 [ 135.034666][T14344] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 135.061871][T14344] EXT4-fs (loop6): mount failed [ 135.218725][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4452'. [ 135.264290][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4453'. [ 135.273319][T14358] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4453'. [ 135.343778][T14361] loop6: detected capacity change from 0 to 512 [ 135.350642][T14361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.357582][T14361] EXT4-fs: journaled quota format not specified [ 135.560263][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 135.560278][ T29] audit: type=1326 audit(135.548:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.597155][ T29] audit: type=1326 audit(135.578:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.722226][T14402] __nla_validate_parse: 3 callbacks suppressed [ 135.722250][T14402] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4473'. [ 135.746504][ T29] audit: type=1400 audit(135.608:6617): avc: denied { bind } for pid=14389 comm="syz.1.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 135.766452][ T29] audit: type=1326 audit(135.618:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.789396][ T29] audit: type=1326 audit(135.628:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.812416][ T29] audit: type=1326 audit(135.648:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.835317][ T29] audit: type=1326 audit(135.658:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.858353][ T29] audit: type=1326 audit(135.668:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.881350][ T29] audit: type=1326 audit(135.678:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.904237][ T29] audit: type=1326 audit(135.688:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.2.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 135.950372][T14409] netlink: 'syz.3.4477': attribute type 27 has an invalid length. [ 135.972527][T14409] veth0_to_team: left promiscuous mode [ 135.978077][T14409] veth0_to_team: left allmulticast mode [ 135.984228][T14409] ip6tnl1: left promiscuous mode [ 135.991993][T14411] rdma_op ffff888118e1f180 conn xmit_rdma 0000000000000000 [ 136.019906][T14409] 8021q: adding VLAN 0 to HW filter on device  [ 136.027480][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.047730][T14409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.128958][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4484'. [ 136.154108][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4484'. [ 136.177259][T14431] netlink: 'syz.8.4496': attribute type 1 has an invalid length. [ 136.216837][T14431] bond1: (slave geneve2): making interface the new active one [ 136.238003][T14431] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.239963][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4492'. [ 136.256854][ T7320] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.285076][ T7320] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.302468][T14451] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4495'. [ 136.314812][T14445] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 136.330502][ T7320] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.348908][ T7320] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.364442][T14453] syzkaller1: entered promiscuous mode [ 136.370004][T14453] syzkaller1: entered allmulticast mode [ 136.603970][T14503] IPVS: Error connecting to the multicast addr [ 136.912953][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4527'. [ 136.922687][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4527'. [ 137.042526][T14554] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4542'. [ 137.087337][T14558] nfs4: Bad value for 'source' [ 137.152192][T14572] bridge0: port 3(macsec1) entered blocking state [ 137.158731][T14572] bridge0: port 3(macsec1) entered disabled state [ 137.165256][T14572] macsec1: entered allmulticast mode [ 137.170573][T14572] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 137.178743][T14572] macsec1: entered promiscuous mode [ 137.183997][T14572] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 137.191488][T14572] bridge0: port 3(macsec1) entered blocking state [ 137.197893][T14572] bridge0: port 3(macsec1) entered forwarding state [ 137.205432][ T2130] bridge0: port 3(macsec1) entered disabled state [ 137.251351][T14580] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4555'. [ 137.254079][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.269975][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.332637][T14592] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 137.352199][T14594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4562'. [ 137.583911][T14614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14614 comm=syz.2.4571 [ 137.596563][T14614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14614 comm=syz.2.4571 [ 137.664557][T14626] netlink: 'syz.8.4575': attribute type 1 has an invalid length. [ 137.688101][T14626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.733113][T14626] bond2: (slave gretap1): making interface the new active one [ 137.753769][T14626] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 138.911414][T14733] netlink: 'syz.3.4622': attribute type 1 has an invalid length. [ 138.955247][T14733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.978405][T14733] bond0: (slave gretap2): making interface the new active one [ 138.986815][T14733] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 139.585110][T14808] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.650055][T14808] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.701962][T14808] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.751490][T14808] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.839600][ T7319] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.860849][ T7319] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.880198][ T7319] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.894807][ T7319] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.910387][T14838] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 139.918975][T14838] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 139.932859][T14838] bridge0: port 3(macsec1) entered disabled state [ 139.941245][T14838] macsec1 (unregistering): left allmulticast mode [ 139.947791][T14838] macsec1 (unregistering): left promiscuous mode [ 139.954175][T14838] bridge0: port 3(macsec1) entered disabled state [ 139.999436][T14855] geneve2: entered promiscuous mode [ 140.004663][T14855] geneve2: entered allmulticast mode [ 140.015587][T14857] bridge: RTM_NEWNEIGH with invalid ether address [ 140.077208][T14863] loop6: detected capacity change from 0 to 764 [ 140.451003][T14901] loop6: detected capacity change from 0 to 2048 [ 140.459795][T14901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.481053][ T7296] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.490895][ T7296] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.508644][T12437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.570226][ T7296] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.580219][ T7296] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.620203][ T7296] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.630141][ T7296] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.690875][ T7296] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.700764][ T7296] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.809862][ T7296] bridge_slave_1: left allmulticast mode [ 140.815539][ T7296] bridge_slave_1: left promiscuous mode [ 140.821523][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.833511][ T7296] bridge_slave_0: left promiscuous mode [ 140.839438][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.887159][ T7296] bond2 (unregistering): (slave gretap1): Releasing active interface [ 140.899976][ T7296] bond1 (unregistering): (slave geneve2): Releasing active interface [ 140.957336][T14955] __nla_validate_parse: 8 callbacks suppressed [ 140.957347][T14955] netlink: 181064 bytes leftover after parsing attributes in process `syz.1.4718'. [ 141.010201][ T7296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.019893][ T7296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.029271][ T7296] bond0 (unregistering): Released all slaves [ 141.037541][ T7296] bond1 (unregistering): Released all slaves [ 141.046170][ T7296] bond2 (unregistering): Released all slaves [ 141.056056][T14907] chnl_net:caif_netlink_parms(): no params data found [ 141.108781][ T7296] hsr_slave_0: left promiscuous mode [ 141.114478][ T7296] hsr_slave_1: left promiscuous mode [ 141.120239][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.127782][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.135501][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.142901][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.153011][ T7296] veth1_macvtap: left promiscuous mode [ 141.158496][ T7296] veth0_macvtap: left promiscuous mode [ 141.164087][ T7296] veth1_vlan: left promiscuous mode [ 141.169457][ T7296] veth0_vlan: left promiscuous mode [ 141.225174][ T7296] team0 (unregistering): Port device team_slave_1 removed [ 141.234930][ T7296] team0 (unregistering): Port device team_slave_0 removed [ 141.287376][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.294535][T14907] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.301857][T14907] bridge_slave_0: entered allmulticast mode [ 141.308426][T14907] bridge_slave_0: entered promiscuous mode [ 141.318325][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.325398][T14907] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.332632][T14907] bridge_slave_1: entered allmulticast mode [ 141.338940][T14907] bridge_slave_1: entered promiscuous mode [ 141.364080][T14907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.374678][T14907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.395193][T14907] team0: Port device team_slave_0 added [ 141.401922][T14907] team0: Port device team_slave_1 added [ 141.418106][T14907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.425061][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.451037][T14907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.463547][T14907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.470537][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.496592][T14907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.523439][T14907] hsr_slave_0: entered promiscuous mode [ 141.529435][T14907] hsr_slave_1: entered promiscuous mode [ 141.535247][T14907] debugfs: 'hsr0' already exists in 'hsr' [ 141.540978][T14907] Cannot create hsr debugfs directory [ 141.612382][T14907] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 141.621853][T14907] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 141.630533][T14907] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 141.639865][T14907] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 141.669549][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.676619][T14907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.683973][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.691061][T14907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.719635][T14907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.729952][T14907] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.744003][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.752173][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.773428][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.780525][ T7320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.794039][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.801098][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.854132][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 141.854147][ T29] audit: type=1326 audit(141.838:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 141.886012][ T29] audit: type=1326 audit(141.848:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 141.908992][ T29] audit: type=1326 audit(141.848:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 141.931940][ T29] audit: type=1326 audit(141.848:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 141.954896][ T29] audit: type=1326 audit(141.848:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 141.977893][ T29] audit: type=1326 audit(141.848:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 142.000764][ T29] audit: type=1326 audit(141.848:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 142.007477][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4735'. [ 142.023669][ T29] audit: type=1326 audit(141.848:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 142.032666][T15010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4735'. [ 142.032681][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4735'. [ 142.033003][T15010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4735'. [ 142.055521][ T29] audit: type=1326 audit(141.848:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 142.064509][T15010] netlink: 'syz.3.4735': attribute type 6 has an invalid length. [ 142.073472][ T29] audit: type=1326 audit(141.848:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427871ebe9 code=0x7ffc0000 [ 142.105402][T14907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.220949][T15031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15031 comm=syz.3.4742 [ 142.233940][T15031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15031 comm=syz.3.4742 [ 142.277402][T14907] veth0_vlan: entered promiscuous mode [ 142.287851][T14907] veth1_vlan: entered promiscuous mode [ 142.307148][T14907] veth0_macvtap: entered promiscuous mode [ 142.314640][T14907] veth1_macvtap: entered promiscuous mode [ 142.327351][T14907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.340690][T14907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.351474][ T7319] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.361047][ T7319] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.375499][ T7319] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.388334][ T7319] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.435770][T15048] cgroup: Invalid name [ 142.499692][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4753'. [ 142.508655][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4753'. [ 142.606332][T15082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4759'. [ 142.611929][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4760'. [ 142.615514][T15082] netem: change failed [ 142.673098][T15044] chnl_net:caif_netlink_parms(): no params data found [ 142.723590][T15044] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.730822][T15044] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.738406][T15044] bridge_slave_0: entered allmulticast mode [ 142.751316][T15044] bridge_slave_0: entered promiscuous mode [ 142.757934][T15044] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.765150][T15044] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.772425][T15044] bridge_slave_1: entered allmulticast mode [ 142.779237][T15044] bridge_slave_1: entered promiscuous mode [ 142.797657][T15044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.807861][T15044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.826692][T15044] team0: Port device team_slave_0 added [ 142.833119][T15044] team0: Port device team_slave_1 added [ 142.850216][T15044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.857193][T15044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.883185][T15044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.894471][T15044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.901454][T15044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.927427][T15044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.956302][T15044] hsr_slave_0: entered promiscuous mode [ 142.962436][T15044] hsr_slave_1: entered promiscuous mode [ 142.968116][T15044] debugfs: 'hsr0' already exists in 'hsr' [ 142.973828][T15044] Cannot create hsr debugfs directory [ 143.242824][T15044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.251445][T15044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.259737][T15044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.268300][T15044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.282971][T15044] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.290083][T15044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.297306][T15044] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.304327][T15044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.319430][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.327858][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.348511][T15044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.360990][T15044] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.370192][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.377367][ T7320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.387652][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.394768][ T7319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.455411][T15044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.599564][T15044] veth0_vlan: entered promiscuous mode [ 143.607720][T15044] veth1_vlan: entered promiscuous mode [ 143.622853][T15044] veth0_macvtap: entered promiscuous mode [ 143.630507][T15044] veth1_macvtap: entered promiscuous mode [ 143.641419][T15044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.650521][T15044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.663949][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.673217][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.683317][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.692313][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.053010][ T31] bridge_slave_1: left allmulticast mode [ 144.058744][ T31] bridge_slave_1: left promiscuous mode [ 144.064493][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.072120][ T31] bridge_slave_0: left allmulticast mode [ 144.077736][ T31] bridge_slave_0: left promiscuous mode [ 144.083408][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.141952][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.151336][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.160363][ T31] bond0 (unregistering): Released all slaves [ 144.204651][ T31] hsr_slave_0: left promiscuous mode [ 144.210378][ T31] hsr_slave_1: left promiscuous mode [ 144.215816][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.223521][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.253451][ T31] team0 (unregistering): Port device team_slave_1 removed [ 144.262980][ T31] team0 (unregistering): Port device team_slave_0 removed [ 144.482517][T15191] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.597659][T15210] macvtap0: refused to change device tx_queue_len [ 144.610762][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4802'. [ 144.673995][T15216] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 144.818296][T15236] loop4: detected capacity change from 0 to 512 [ 144.837271][T15236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.875503][T15236] EXT4-fs (loop4): 1 truncate cleaned up [ 144.886777][T15242] C: renamed from team_slave_0 [ 144.892044][T15236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.906478][T15242] netlink: 'syz.2.4818': attribute type 1 has an invalid length. [ 144.914252][T15242] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 145.013550][T15249] netlink: 'syz.1.4820': attribute type 3 has an invalid length. [ 145.089058][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.183104][T15267] netlink: 'syz.2.4829': attribute type 10 has an invalid length. [ 145.207859][T15267] team0: Port device dummy0 added [ 145.214300][T15271] cgroup: Unknown subsys name 'cpuset' [ 145.216836][T15267] netlink: 'syz.2.4829': attribute type 10 has an invalid length. [ 145.243837][T15267] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.297250][T15267] team0: Failed to send options change via netlink (err -105) [ 145.313286][T15267] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.335505][T15267] team0: Port device dummy0 removed [ 145.373081][T15267] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.663146][T15316] netlink: 'syz.3.4848': attribute type 10 has an invalid length. [ 145.672978][T15316] team0: Port device dummy0 added [ 145.714137][T15318] netlink: 'syz.3.4848': attribute type 10 has an invalid length. [ 145.736285][T15318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.772752][T15318] team0: Failed to send options change via netlink (err -105) [ 145.781178][T15318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.791817][T15318] team0: Port device dummy0 removed [ 145.800700][T15318] : (slave dummy0): Enslaving as an active interface with an up link [ 145.945571][T15333] tipc: Started in network mode [ 145.950595][T15333] tipc: Node identity ac14140f, cluster identity 4711 [ 145.957452][T15333] tipc: New replicast peer: 255.255.255.83 [ 145.963351][T15333] tipc: Enabled bearer , priority 10 [ 146.005579][T15339] netlink: '+}[@': attribute type 1 has an invalid length. [ 146.012842][T15339] __nla_validate_parse: 1 callbacks suppressed [ 146.012864][T15339] netlink: 198116 bytes leftover after parsing attributes in process `+}[@'. [ 146.080378][T15343] cgroup: Unknown subsys name 'cpuset' [ 146.121991][T15342] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4859'. [ 146.166674][T15349] tipc: Started in network mode [ 146.171685][T15349] tipc: Node identity 16522361d0ac, cluster identity 4711 [ 146.178855][T15349] tipc: Enabled bearer , priority 0 [ 146.189194][T15349] tipc: Disabling bearer [ 146.321423][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4869'. [ 146.330410][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4869'. [ 146.443019][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4874'. [ 146.498917][T15383] tipc: New replicast peer: 255.255.255.255 [ 146.505073][T15383] tipc: Enabled bearer , priority 10 [ 146.531702][T15383] netlink: 340 bytes leftover after parsing attributes in process `syz.9.4879'. [ 146.610972][T15401] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4887'. [ 146.805674][T15421] tipc: New replicast peer: 255.255.255.255 [ 146.811897][T15421] tipc: Enabled bearer , priority 10 [ 146.840673][T15421] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4895'. [ 146.979828][T15442] loop4: detected capacity change from 0 to 1024 [ 147.020642][T15442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.042237][T15442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.116765][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.163042][T15449] loop9: detected capacity change from 0 to 8192 [ 147.251296][T15466] loop4: detected capacity change from 0 to 8192 [ 147.257935][T15466] msdos: Unknown parameter '' [ 147.307061][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 147.307088][ T29] audit: type=1326 audit(147.288:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.360359][ T29] audit: type=1326 audit(147.288:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.383579][ T29] audit: type=1326 audit(147.288:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.406461][ T29] audit: type=1326 audit(147.288:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdf324ec23 code=0x7ffc0000 [ 147.429352][ T29] audit: type=1326 audit(147.288:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdf324ec23 code=0x7ffc0000 [ 147.452126][ T29] audit: type=1326 audit(147.288:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.475049][ T29] audit: type=1326 audit(147.288:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.497979][ T29] audit: type=1326 audit(147.288:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.520934][ T29] audit: type=1326 audit(147.288:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.529426][ T3414] tipc: Node number set to 3338543969 [ 147.543830][ T29] audit: type=1326 audit(147.288:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.4.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf324ebe9 code=0x7ffc0000 [ 147.712587][T15509] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 147.808617][ T3414] tipc: Node number set to 2886997007 [ 147.990249][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4939'. [ 147.999448][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4939'. [ 148.250387][T15544] tipc: New replicast peer: 255.255.255.255 [ 148.256483][T15544] tipc: Enabled bearer , priority 10 [ 148.362671][T15552] netlink: 'syz.9.4952': attribute type 7 has an invalid length. [ 148.589916][T15582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.603715][T15582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.559411][T15671] bond0: entered promiscuous mode [ 149.564516][T15671] bond_slave_0: entered promiscuous mode [ 149.570393][T15671] bond_slave_1: entered promiscuous mode [ 149.576109][T15671] bond0: entered allmulticast mode [ 149.581268][T15671] bond_slave_0: entered allmulticast mode [ 149.587079][T15671] bond_slave_1: entered allmulticast mode [ 149.977422][T15692] rdma_rxe: rxe_newlink: failed to add syz_tun [ 150.061785][T15701] netlink: 'syz.1.5012': attribute type 2 has an invalid length. [ 150.069716][T15701] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 150.224654][T15712] tipc: Enabling of bearer rejected, failed to enable media [ 150.381491][T15723] loop9: detected capacity change from 0 to 7 [ 150.387994][T15723] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.396859][T15723] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.404784][T15723] loop9: unable to read partition table [ 150.411176][T15723] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 150.411176][T15723] ) failed (rc=-5) [ 150.477421][T15734] netem: change failed [ 150.587015][T15744] loop4: detected capacity change from 0 to 8192 [ 150.832677][T15770] syzkaller1: entered promiscuous mode [ 150.838177][T15770] syzkaller1: entered allmulticast mode [ 150.919055][T15775] loop9: detected capacity change from 0 to 8192 [ 151.072849][T15785] loop9: detected capacity change from 0 to 1024 [ 151.081006][T15785] EXT4-fs: inline encryption not supported [ 151.092302][T15785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.144329][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.241312][T15791] loop9: detected capacity change from 0 to 8192 [ 151.571710][T15794] __nla_validate_parse: 6 callbacks suppressed [ 151.571724][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5050'. [ 151.871225][T15814] loop4: detected capacity change from 0 to 512 [ 151.921745][T15814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.041168][T15814] netlink: '+}[@': attribute type 1 has an invalid length. [ 152.070209][T15814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.131773][T15825] netlink: 'syz.1.5065': attribute type 298 has an invalid length. [ 152.193946][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.255640][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5070'. [ 152.618190][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5089'. [ 152.769735][T15890] loop4: detected capacity change from 0 to 1024 [ 152.791278][T15890] EXT4-fs: Ignoring removed oldalloc option [ 152.802214][T15895] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5094'. [ 152.811575][T15890] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.814024][T15895] bridge0: entered promiscuous mode [ 152.896102][T15895] bridge0: port 3(macvlan2) entered blocking state [ 152.902761][T15895] bridge0: port 3(macvlan2) entered disabled state [ 152.911262][T15895] macvlan2: entered allmulticast mode [ 152.911413][T15890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.916722][T15895] bridge0: entered allmulticast mode [ 153.040574][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.063639][T15895] macvlan2: left allmulticast mode [ 153.068824][T15895] bridge0: left allmulticast mode [ 153.080611][T15895] bridge0: left promiscuous mode [ 153.184548][T15911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15911 comm=syz.9.5101 [ 153.197192][T15911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15911 comm=syz.9.5101 [ 153.257403][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 153.415789][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 153.415801][ T29] audit: type=1326 audit(153.398:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.9.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.444934][ T29] audit: type=1326 audit(153.398:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.9.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.467822][ T29] audit: type=1326 audit(153.398:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.9.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.673987][T15947] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5118'. [ 153.771633][ T29] audit: type=1326 audit(153.758:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.801661][ T29] audit: type=1326 audit(153.758:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.825999][ T29] audit: type=1326 audit(153.788:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.848904][ T29] audit: type=1326 audit(153.788:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.871789][ T29] audit: type=1326 audit(153.788:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.896555][ T29] audit: type=1326 audit(153.808:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 153.919538][ T29] audit: type=1326 audit(153.808:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.9.5120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 154.248435][T15989] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5136'. [ 154.269584][T15989] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5136'. [ 154.393941][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5142'. [ 154.436344][T16006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16006 comm=syz.4.5144 [ 154.449119][T16006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16006 comm=syz.4.5144 [ 154.680808][T16034] loop9: detected capacity change from 0 to 1024 [ 154.687392][T16034] EXT4-fs: Ignoring removed orlov option [ 154.697004][T16034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.948870][T16026] tipc: Enabling of bearer rejected, already enabled [ 155.014830][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.463202][T16079] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5173'. [ 156.249491][T16127] syzkaller1: entered promiscuous mode [ 156.255073][T16127] syzkaller1: entered allmulticast mode [ 156.474421][ T7296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.537584][ T7296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.623465][ T7296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.683950][ T7296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.777803][ T7296] bridge_slave_1: left allmulticast mode [ 156.783520][ T7296] bridge_slave_1: left promiscuous mode [ 156.789189][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.825468][ T7296] bridge_slave_0: left allmulticast mode [ 156.831198][ T7296] bridge_slave_0: left promiscuous mode [ 156.836909][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.971693][ T7296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.982230][ T7296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.992175][ T7296] bond0 (unregistering): Released all slaves [ 157.005725][ T7296] bond1 (unregistering): Released all slaves [ 157.075969][ T7296] tipc: Disabling bearer [ 157.081626][ T7296] tipc: Disabling bearer [ 157.087061][ T7296] tipc: Left network mode [ 157.101125][ T7296] hsr_slave_0: left promiscuous mode [ 157.125665][ T7296] hsr_slave_1: left promiscuous mode [ 157.132854][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.140276][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.149094][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.156486][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.175244][ T7296] veth1_macvtap: left promiscuous mode [ 157.180977][ T7296] veth0_macvtap: left promiscuous mode [ 157.186550][ T7296] veth1_vlan: left promiscuous mode [ 157.191862][ T7296] veth0_vlan: left promiscuous mode [ 157.292149][ T7296] team0 (unregistering): Port device team_slave_1 removed [ 157.302168][ T7296] team0 (unregistering): Port device team_slave_0 removed [ 157.342966][T16163] chnl_net:caif_netlink_parms(): no params data found [ 157.421401][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.428695][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.455364][T16163] bridge_slave_0: entered allmulticast mode [ 157.461942][T16163] bridge_slave_0: entered promiscuous mode [ 157.468970][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.476026][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.483354][T16163] bridge_slave_1: entered allmulticast mode [ 157.490292][T16163] bridge_slave_1: entered promiscuous mode [ 157.515464][T16240] __nla_validate_parse: 2 callbacks suppressed [ 157.515480][T16240] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5241'. [ 157.537611][T16163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.559875][T16163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.606835][T16163] team0: Port device team_slave_0 added [ 157.639670][T16163] team0: Port device team_slave_1 added [ 157.691071][T16163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.698038][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.723990][T16163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.747974][T16163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.754953][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.780950][T16163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.853260][T16163] hsr_slave_0: entered promiscuous mode [ 157.865152][T16163] hsr_slave_1: entered promiscuous mode [ 157.878471][T16163] debugfs: 'hsr0' already exists in 'hsr' [ 157.884280][T16163] Cannot create hsr debugfs directory [ 157.982566][T16298] netlink: 'syz.2.5265': attribute type 1 has an invalid length. [ 157.996692][T16298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.025367][T16298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.032976][T16298] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.044811][T16298] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 158.306590][T16163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.316527][T16163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.325552][T16163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.342442][T16163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.433892][T16163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.447770][T16163] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.462109][ T2130] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.469253][ T2130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.480708][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.487891][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.497116][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 158.497127][ T29] audit: type=1326 audit(158.478:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.527262][ T29] audit: type=1326 audit(158.478:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.550419][ T29] audit: type=1326 audit(158.478:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.573507][ T29] audit: type=1326 audit(158.478:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.596633][ T29] audit: type=1326 audit(158.478:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.619549][ T29] audit: type=1326 audit(158.478:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.642404][ T29] audit: type=1326 audit(158.478:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.665416][ T29] audit: type=1326 audit(158.478:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.688441][ T29] audit: type=1326 audit(158.478:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.711341][ T29] audit: type=1326 audit(158.478:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea270eebe9 code=0x7ffc0000 [ 158.852566][T16163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.969655][T16163] veth0_vlan: entered promiscuous mode [ 158.977973][T16163] veth1_vlan: entered promiscuous mode [ 158.994457][T16163] veth0_macvtap: entered promiscuous mode [ 159.002352][T16163] veth1_macvtap: entered promiscuous mode [ 159.012624][T16163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.023579][T16163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.034385][ T2130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.043367][ T2130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.052383][ T2130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.061692][ T7320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.354011][T16405] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5296'. [ 159.826774][T16436] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 160.010314][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5316'. [ 160.083916][T16449] loop5: detected capacity change from 0 to 512 [ 160.112986][T16449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.149076][T16449] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5319: bg 0: block 4: invalid block bitmap [ 160.189760][T16449] EXT4-fs (loop5): Remounting filesystem read-only [ 160.196437][T16449] EXT4-fs (loop5): 1 truncate cleaned up [ 160.212840][T16449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.264824][T16163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.912144][T16493] netlink: 'syz.3.5339': attribute type 21 has an invalid length. [ 161.503636][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5366'. [ 161.606736][T16570] pimreg: entered allmulticast mode [ 161.616700][T16570] pimreg: left allmulticast mode [ 162.067907][T16610] netlink: 'syz.2.5391': attribute type 21 has an invalid length. [ 162.438245][T16658] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5413'. [ 162.716455][T16662] netlink: 'syz.9.5415': attribute type 21 has an invalid length. [ 162.724385][T16662] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5415'. [ 163.164013][T16684] netlink: 'syz.1.5424': attribute type 10 has an invalid length. [ 163.184286][T16684] netlink: 'syz.1.5424': attribute type 10 has an invalid length. [ 163.194583][T16684] : (slave dummy0): Enslaving as an active interface with an up link [ 163.243148][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5432'. [ 163.615633][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 163.615647][ T29] audit: type=1326 audit(163.598:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.647856][ T29] audit: type=1326 audit(163.628:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.670838][ T29] audit: type=1326 audit(163.628:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.693839][ T29] audit: type=1326 audit(163.628:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.716798][ T29] audit: type=1326 audit(163.628:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.740043][ T29] audit: type=1326 audit(163.628:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.763019][ T29] audit: type=1326 audit(163.628:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.785954][ T29] audit: type=1326 audit(163.628:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.808882][ T29] audit: type=1326 audit(163.628:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.831948][ T29] audit: type=1326 audit(163.628:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.5.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 163.875529][T16751] vlan2: entered allmulticast mode [ 163.880798][T16751] dummy0: entered allmulticast mode [ 164.134406][T16764] wg2: entered promiscuous mode [ 164.139486][T16764] wg2: entered allmulticast mode [ 164.170818][T16778] loop5: detected capacity change from 0 to 1024 [ 164.201399][T16778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.260236][T16778] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.5456: Allocating blocks 449-513 which overlap fs metadata [ 164.303643][T16777] EXT4-fs (loop5): pa ffff888107287150: logic 48, phys. 177, len 21 [ 164.311839][T16777] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 164.344639][T16163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.365187][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5466'. [ 164.382527][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5466'. [ 165.322604][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5508'. [ 165.332053][T16930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.339593][T16930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.347472][T16930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.354985][T16930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.473456][T16951] loop9: detected capacity change from 0 to 1024 [ 165.502281][T16951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.534831][T16951] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5516: Allocating blocks 449-513 which overlap fs metadata [ 165.555364][T16950] EXT4-fs (loop9): pa ffff8881072871c0: logic 48, phys. 177, len 21 [ 165.563499][T16950] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 165.584381][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.672418][T16984] loop9: detected capacity change from 0 to 1024 [ 165.680260][T16984] EXT4-fs: Ignoring removed orlov option [ 165.690166][T16984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.719013][T16982] SELinux: failed to load policy [ 165.955931][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.979607][T17023] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5547'. [ 166.056878][T17041] loop9: detected capacity change from 0 to 128 [ 166.066757][T17041] EXT4-fs: Ignoring removed nobh option [ 166.074278][T17041] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.129659][T14907] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.155530][T17052] geneve0: entered allmulticast mode [ 166.164368][T17052] geneve0: entered promiscuous mode [ 166.250196][T17051] geneve0: left promiscuous mode [ 166.255250][T17051] geneve0: left allmulticast mode [ 166.283758][T17064] loop5: detected capacity change from 0 to 2048 [ 166.300790][T17064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.568987][T16163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.593091][T17091] netlink: 'syz.9.5570': attribute type 39 has an invalid length. [ 166.618241][T17098] netlink: 'syz.2.5572': attribute type 15 has an invalid length. [ 166.624524][T17100] netlink: 'syz.5.5573': attribute type 3 has an invalid length. [ 166.626151][T17098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5572'. [ 166.726977][T17117] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5580'. [ 166.762470][T17125] netlink: 'syz.3.5584': attribute type 13 has an invalid length. [ 166.777839][T17125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.794029][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5585'. [ 166.848004][T17139] ipvlan2: entered promiscuous mode [ 166.854244][T17139] bridge0: port 1(ipvlan2) entered blocking state [ 166.860917][T17139] bridge0: port 1(ipvlan2) entered disabled state [ 166.878846][T17139] ipvlan2: entered allmulticast mode [ 166.884156][T17139] bridge0: entered allmulticast mode [ 166.905723][T17139] ipvlan2: left allmulticast mode [ 166.910896][T17139] bridge0: left allmulticast mode [ 166.950734][T17153] loop9: detected capacity change from 0 to 2048 [ 166.969931][T17153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 166.997204][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 167.025179][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5599'. [ 167.037928][T17176] loop9: detected capacity change from 0 to 512 [ 167.046742][T17176] EXT4-fs: Ignoring removed oldalloc option [ 167.054156][T17176] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.5596: Parent and EA inode have the same ino 15 [ 167.067931][T17176] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.5596: Parent and EA inode have the same ino 15 [ 167.083543][T17176] EXT4-fs (loop9): 1 orphan inode deleted [ 167.090995][T17176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.117600][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.196748][T17197] loop9: detected capacity change from 0 to 2048 [ 167.274755][T17197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.303413][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.681168][T17239] netlink: zone id is out of range [ 167.688827][T17241] loop5: detected capacity change from 0 to 2048 [ 167.710179][T17241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 167.744833][T16163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 167.754966][T17248] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 167.798183][T17256] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 168.207138][T17315] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 168.681861][T17368] __nla_validate_parse: 2 callbacks suppressed [ 168.681875][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5657'. [ 168.698039][T17368] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5657'. [ 168.789034][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 168.789108][ T29] audit: type=1326 audit(168.778:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.9.5662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b4725ebe9 code=0x0 [ 168.821994][T17383] netlink: 'syz.5.5665': attribute type 27 has an invalid length. [ 168.860844][T17383] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.868095][T17383] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.895881][T17390] netlink: 'syz.1.5667': attribute type 39 has an invalid length. [ 168.959817][ T7319] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.978616][ T7319] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.988153][ T7319] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.998046][ T7319] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.194880][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5670'. [ 169.205353][T17402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5670'. [ 169.537614][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5684'. [ 169.563413][T17433] netlink: 'syz.2.5685': attribute type 1 has an invalid length. [ 169.565467][T17431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5684'. [ 169.604527][T17433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.655997][T17433] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.685009][T17433] bond5: (slave batadv1): making interface the new active one [ 169.713978][T17433] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 170.036068][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5694'. [ 170.357792][T17536] netlink: 'syz.2.5713': attribute type 39 has an invalid length. [ 170.418977][T17550] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5716'. [ 170.445001][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5718'. [ 170.453949][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5718'. [ 171.164093][T17633] netlink: 'syz.5.5739': attribute type 39 has an invalid length. [ 171.541451][ T29] audit: type=1326 audit(171.508:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.9.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.564387][ T29] audit: type=1326 audit(171.508:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.9.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.587430][ T29] audit: type=1326 audit(171.508:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.9.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.610326][ T29] audit: type=1326 audit(171.508:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.9.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.633464][ T29] audit: type=1326 audit(171.508:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.9.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.843653][T17636] Set syz1 is full, maxelem 65536 reached [ 171.879092][ T29] audit: type=1326 audit(171.868:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17658 comm="syz.9.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.902115][ T29] audit: type=1326 audit(171.868:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17658 comm="syz.9.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.925010][ T29] audit: type=1326 audit(171.868:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17658 comm="syz.9.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 171.948315][ T29] audit: type=1326 audit(171.868:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17658 comm="syz.9.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4725ebe9 code=0x7ffc0000 [ 172.024392][T17671] loop9: detected capacity change from 0 to 512 [ 172.035043][T17670] loop5: detected capacity change from 0 to 2048 [ 172.061887][T17670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.075092][T17671] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.100508][T17671] EXT4-fs (loop9): mount failed [ 172.120320][T16163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.351892][T17852] bridge0: port 1(macvtap1) entered blocking state [ 173.358642][T17852] bridge0: port 1(macvtap1) entered disabled state [ 173.384699][T17852] macvtap1: entered allmulticast mode [ 173.390115][T17852] bridge0: entered allmulticast mode [ 173.396070][T17852] macvtap1: left allmulticast mode [ 173.401253][T17852] bridge0: left allmulticast mode [ 173.769840][T17890] netlink: 'syz.1.5816': attribute type 12 has an invalid length. [ 173.777811][T17891] veth1_to_bond: entered allmulticast mode [ 173.787256][T17891] __nla_validate_parse: 13 callbacks suppressed [ 173.787269][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5817'. [ 173.829175][T17891] bond0: (slave bond_slave_1): Releasing backup interface [ 173.841388][T17891] veth1_to_bond (unregistering): left allmulticast mode [ 174.171298][T17907] Falling back ldisc for ttyS3. [ 174.201687][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 174.201701][ T29] audit: type=1326 audit(174.188:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.249362][ T29] audit: type=1326 audit(174.218:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.272162][ T29] audit: type=1326 audit(174.218:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.295083][ T29] audit: type=1326 audit(174.218:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.317979][ T29] audit: type=1326 audit(174.228:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.340873][ T29] audit: type=1326 audit(174.228:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.341522][T17917] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5833'. [ 174.363728][ T29] audit: type=1326 audit(174.228:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.395557][ T29] audit: type=1326 audit(174.228:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.418413][ T29] audit: type=1326 audit(174.228:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.441282][ T29] audit: type=1326 audit(174.228:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc49cebe9 code=0x7ffc0000 [ 174.811332][T17959] netlink: 'syz.3.5840': attribute type 1 has an invalid length. [ 174.819298][T17959] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.5840'. [ 175.270076][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5850'. [ 175.278999][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5850'. [ 175.296757][T17993] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.5853'. [ 175.385508][T18006] loop5: detected capacity change from 0 to 1024 [ 175.394213][T18006] EXT4-fs: Ignoring removed orlov option [ 175.402818][T18006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.566581][T18022] veth1_to_bond: entered allmulticast mode [ 175.573122][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5872'. [ 175.611304][T18022] bond0: (slave bond_slave_1): Releasing backup interface [ 175.642116][T18022] bond_slave_1 (unregistering): left promiscuous mode [ 175.649161][T18022] bond_slave_1 (unregistering): left allmulticast mode [ 175.665946][T18022] veth1_to_bond (unregistering): left allmulticast mode [ 175.714572][T16163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.857757][T18059] netlink: 'syz.3.5886': attribute type 3 has an invalid length. [ 175.887687][T18063] loop9: detected capacity change from 0 to 1024 [ 175.898291][T18063] EXT4-fs: Ignoring removed orlov option [ 175.917782][T18063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.970905][T18078] netlink: 664 bytes leftover after parsing attributes in process `syz.2.5883'. [ 175.984310][T18082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5884'. [ 176.003306][T18095] atomic_op ffff888110779d28 conn xmit_atomic 0000000000000000 [ 176.009396][T18082] netlink: 5448 bytes leftover after parsing attributes in process `syz.1.5884'. [ 176.152565][T18099] ================================================================== [ 176.160665][T18099] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 176.168642][T18099] [ 176.170944][T18099] write to 0xffff888119da01a0 of 4 bytes by task 18063 on cpu 1: [ 176.178639][T18099] writeback_single_inode+0x14a/0x3e0 [ 176.184000][T18099] sync_inode_metadata+0x5b/0x90 [ 176.188927][T18099] generic_buffers_fsync_noflush+0xd9/0x120 [ 176.194802][T18099] ext4_sync_file+0x1ab/0x690 [ 176.199478][T18099] vfs_fsync_range+0x10a/0x130 [ 176.204225][T18099] ext4_buffered_write_iter+0x34f/0x3c0 [ 176.209761][T18099] ext4_file_write_iter+0x383/0xf00 [ 176.214953][T18099] iter_file_splice_write+0x669/0x9e0 [ 176.220307][T18099] direct_splice_actor+0x156/0x2a0 [ 176.225398][T18099] splice_direct_to_actor+0x312/0x680 [ 176.230755][T18099] do_splice_direct+0xda/0x150 [ 176.235497][T18099] do_sendfile+0x380/0x650 [ 176.239900][T18099] __x64_sys_sendfile64+0x105/0x150 [ 176.245084][T18099] x64_sys_call+0x2bb0/0x2ff0 [ 176.249744][T18099] do_syscall_64+0xd2/0x200 [ 176.254234][T18099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.260111][T18099] [ 176.262412][T18099] read to 0xffff888119da01a0 of 4 bytes by task 18099 on cpu 0: [ 176.270020][T18099] vfs_fsync_range+0x9b/0x130 [ 176.274681][T18099] ext4_buffered_write_iter+0x34f/0x3c0 [ 176.280219][T18099] ext4_file_write_iter+0x383/0xf00 [ 176.285405][T18099] iter_file_splice_write+0x669/0x9e0 [ 176.290756][T18099] direct_splice_actor+0x156/0x2a0 [ 176.295849][T18099] splice_direct_to_actor+0x312/0x680 [ 176.301205][T18099] do_splice_direct+0xda/0x150 [ 176.305950][T18099] do_sendfile+0x380/0x650 [ 176.310354][T18099] __x64_sys_sendfile64+0x105/0x150 [ 176.315539][T18099] x64_sys_call+0x2bb0/0x2ff0 [ 176.320209][T18099] do_syscall_64+0xd2/0x200 [ 176.324700][T18099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.330573][T18099] [ 176.332875][T18099] value changed: 0x00000038 -> 0x00000002 [ 176.338568][T18099] [ 176.340870][T18099] Reported by Kernel Concurrency Sanitizer on: [ 176.347008][T18099] CPU: 0 UID: 0 PID: 18099 Comm: syz.9.5877 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 176.359485][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.369522][T18099] ================================================================== [ 176.451761][T14907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.