last executing test programs: 4m12.074966043s ago: executing program 2 (id=1083): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m11.836967147s ago: executing program 2 (id=1091): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m11.056958432s ago: executing program 0 (id=1121): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 4m10.999052154s ago: executing program 2 (id=1125): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) vmsplice(r2, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000000)="150d1c41", 0x4}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 4m10.998897764s ago: executing program 0 (id=1126): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x2, 0x69e, &(0x7f0000000840)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) 4m10.963150074s ago: executing program 4 (id=1130): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r2, 0xffff, 0x5, 0x4) 4m10.962824134s ago: executing program 4 (id=1131): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xb1e, 0x1, 0xffffffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 4m10.898787085s ago: executing program 0 (id=1133): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 4m10.898492285s ago: executing program 4 (id=1135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 4m10.888091996s ago: executing program 0 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m10.866345076s ago: executing program 2 (id=1137): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) 4m10.778431928s ago: executing program 4 (id=1140): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 4m10.709515109s ago: executing program 4 (id=1143): socket(0x10, 0x3, 0x0) io_uring_setup(0x31fa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 4m10.642851721s ago: executing program 0 (id=1144): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$rxrpc(0x21, 0x2, 0x2) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 4m10.611894751s ago: executing program 2 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 4m10.454300264s ago: executing program 4 (id=1146): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 4m10.443377425s ago: executing program 32 (id=1146): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 4m10.395859465s ago: executing program 2 (id=1148): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x90, 0x30, 0xb, 0x5, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 4m10.395739315s ago: executing program 33 (id=1148): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x90, 0x30, 0xb, 0x5, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 4m10.239500868s ago: executing program 0 (id=1150): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 4m10.238787148s ago: executing program 34 (id=1150): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 3m15.854790364s ago: executing program 1 (id=2857): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 3m15.04187974s ago: executing program 1 (id=2881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0xc080) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) 3m14.985028252s ago: executing program 1 (id=2882): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m14.878881493s ago: executing program 1 (id=2883): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3m14.871130504s ago: executing program 1 (id=2884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r0}, &(0x7f0000001cc0), &(0x7f0000001d00)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3m14.770812185s ago: executing program 1 (id=2887): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 3m14.770600296s ago: executing program 35 (id=2887): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 3m7.688343072s ago: executing program 5 (id=3029): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x3c}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = dup3(r1, r0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000290000000b0000000008000000000000005de979c55ed6fe58204595ea7b6c72d4fd2cf2433af92c4f3670c5414aed7c5199491387c2aef776dd8314a8c5a9926ccdd2fa80148443fb1faf8e597ebb43e4e063c4d9f720c10c511d36bd6c6f5b6c8089a949ed50fd94619902b1e11a8ab5a3798ebcea00b91a537dd67ae4b6bb5cf14e36fdd8477b492d229acc60bf5f1715df21a5372ecde7f4dec5dffa4facf781ea837c45532f30356c4052984d37545c5141179d2c1704de72bbee2a3e0783ce804e258be06344327361dfd04cb4f69d46dbfabf6a9b6a91f9555c8b43be"], 0x18}}], 0x1, 0x810) 3m7.647997663s ago: executing program 5 (id=3030): unshare(0x2c060000) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x100, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) unshare(0x2c020400) 3m7.514101445s ago: executing program 5 (id=3031): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x25c7, &(0x7f0000000640)={0x0, 0xffffffee, 0x40, 0x103fc, 0x14e}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) memfd_secret(0x80000) 3m7.406553687s ago: executing program 5 (id=3033): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3m7.390640887s ago: executing program 5 (id=3034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100fe00000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 3m7.28988896s ago: executing program 5 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 3m7.28974217s ago: executing program 36 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 1.366706694s ago: executing program 9 (id=7919): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.364764854s ago: executing program 6 (id=7920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.313066114s ago: executing program 9 (id=7922): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.288066495s ago: executing program 9 (id=7924): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf4, &(0x7f00000004c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x5, 0x0) socket(0x1e, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x100000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) 1.262458105s ago: executing program 6 (id=7925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.261943246s ago: executing program 6 (id=7927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f00000006c0)="$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") 1.183803057s ago: executing program 6 (id=7929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) 1.140292878s ago: executing program 8 (id=7932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xbffffffffffffffb}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x24, 0x0, 0xd8, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.108903319s ago: executing program 8 (id=7933): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) close(r0) 978.611981ms ago: executing program 8 (id=7935): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 894.647353ms ago: executing program 3 (id=7937): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) 876.073583ms ago: executing program 3 (id=7938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 796.611395ms ago: executing program 8 (id=7939): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendfile(r1, r1, 0x0, 0x80000003f) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x0) 747.329765ms ago: executing program 9 (id=7941): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0xfb, 0x6cf}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0xa2001, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x8) personality(0x0) write$UHID_INPUT(r1, 0x0, 0x0) 746.754985ms ago: executing program 3 (id=7942): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 670.857387ms ago: executing program 9 (id=7944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) 593.672538ms ago: executing program 9 (id=7945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r1, 0x1001, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0) 521.1334ms ago: executing program 8 (id=7946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x15, 0x10, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 470.411351ms ago: executing program 3 (id=7947): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) 422.862631ms ago: executing program 8 (id=7948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 289.041184ms ago: executing program 3 (id=7953): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000010) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 206.798216ms ago: executing program 3 (id=7957): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 206.006676ms ago: executing program 6 (id=7958): eventfd2(0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 184.344186ms ago: executing program 7 (id=7959): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 150.056237ms ago: executing program 6 (id=7960): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(0x0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7fffeffd) 137.271097ms ago: executing program 7 (id=7961): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 74.077718ms ago: executing program 7 (id=7962): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000039c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) 58.199649ms ago: executing program 7 (id=7963): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 42.195309ms ago: executing program 7 (id=7964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf775728", 0x7}], 0x2) 0s ago: executing program 7 (id=7965): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0xa04, 0xfffffffc, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x5, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): HW filter on device bond2 [ 231.363236][T19178] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 231.377557][T19178] bond2: (slave batadv2): making interface the new active one [ 231.386026][T19178] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 231.399578][T19185] netlink: 'syz.6.5922': attribute type 4 has an invalid length. [ 231.434291][T19185] netlink: 'syz.6.5922': attribute type 4 has an invalid length. [ 231.442181][T19188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19188 comm=syz.3.5923 [ 231.479780][T19196] netlink: zone id is out of range [ 231.488672][T19196] netlink: zone id is out of range [ 231.718017][T19224] netlink: 'syz.6.5939': attribute type 1 has an invalid length. [ 231.725812][T19224] netlink: 'syz.6.5939': attribute type 4 has an invalid length. [ 231.733578][T19224] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5939'. [ 231.748596][T19224] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5939'. [ 231.796731][T19230] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 231.804355][T19230] batman_adv: batadv0: Removing interface: veth1_vlan [ 231.839543][T19230] batadv1: left allmulticast mode [ 231.844638][T19230] batadv1: left promiscuous mode [ 231.849936][T19230] bridge0: port 1(batadv1) entered disabled state [ 231.881380][T19230] bond4: (slave bridge4): Removing an active aggregator [ 231.897048][T19230] bond4: (slave bridge4): Releasing backup interface [ 231.916245][T19230] bridge4: left promiscuous mode [ 231.921305][T19230] bridge4: left allmulticast mode [ 232.206591][T19261] loop6: detected capacity change from 0 to 512 [ 232.254587][T19261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.322324][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.404980][T19277] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 232.412776][T19277] batman_adv: batadv0: Removing interface: veth1_vlan [ 232.438843][T19277] batadv1: left allmulticast mode [ 232.443879][T19277] batadv1: left promiscuous mode [ 232.449786][T19277] bridge0: port 1(batadv1) entered disabled state [ 232.476802][T19277] bond2: (slave batadv2): Releasing active interface [ 232.528031][T19282] tipc: Enabling of bearer rejected, failed to enable media [ 232.662439][T19299] lo: entered promiscuous mode [ 232.667356][T19299] lo: entered allmulticast mode [ 232.683742][T19299] tunl0: entered promiscuous mode [ 232.689449][T19299] tunl0: entered allmulticast mode [ 232.712202][T19299] gre0: entered promiscuous mode [ 232.717972][T19299] gre0: entered allmulticast mode [ 232.740243][T19299] gretap0: entered promiscuous mode [ 232.746326][T19299] gretap0: entered allmulticast mode [ 232.768724][T19299] erspan0: entered promiscuous mode [ 232.774720][T19299] erspan0: entered allmulticast mode [ 232.795550][T19299] ip_vti0: entered promiscuous mode [ 232.801504][T19299] ip_vti0: entered allmulticast mode [ 232.828961][T19228] syz.9.5941 (19228) used greatest stack depth: 6136 bytes left [ 232.839712][T19299] ip6_vti0: entered promiscuous mode [ 232.845112][T19299] ip6_vti0: entered allmulticast mode [ 232.857823][T19299] sit0: entered promiscuous mode [ 232.862789][T19299] sit0: entered allmulticast mode [ 232.876285][T19299] ip6tnl0: entered promiscuous mode [ 232.881573][T19299] ip6tnl0: entered allmulticast mode [ 232.908007][T19299] ip6gre0: entered promiscuous mode [ 232.913859][T19299] ip6gre0: entered allmulticast mode [ 232.930270][T19299] syz_tun: entered promiscuous mode [ 232.935546][T19299] syz_tun: entered allmulticast mode [ 232.948389][T19299] : entered promiscuous mode [ 232.953811][T19299] : entered allmulticast mode [ 232.976303][T19299] nlmon0: entered promiscuous mode [ 232.982123][T19299] nlmon0: entered allmulticast mode [ 232.993171][T19299] caif0: entered promiscuous mode [ 232.998247][T19299] caif0: entered allmulticast mode [ 233.003371][T19299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.018808][ T36] lo speed is unknown, defaulting to 1000 [ 233.024525][ T36] syz0: Port: 1 Link ACTIVE [ 233.120533][T19325] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.141639][T19325] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 233.150298][T19325] bond5: (slave batadv2): making interface the new active one [ 233.167862][T19325] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 233.223162][T19342] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 233.234548][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5984'. [ 233.466483][T19349] lo: entered promiscuous mode [ 233.471296][T19349] lo: entered allmulticast mode [ 233.476956][T19349] tunl0: entered promiscuous mode [ 233.482070][T19349] tunl0: entered allmulticast mode [ 233.490155][T19349] gre0: entered promiscuous mode [ 233.495117][T19349] gre0: entered allmulticast mode [ 233.501318][T19349] 0ªî{X¹¦: entered promiscuous mode [ 233.506655][T19349] 0ªî{X¹¦: entered allmulticast mode [ 233.517039][T19349] erspan0: entered promiscuous mode [ 233.522247][T19349] erspan0: entered allmulticast mode [ 233.541906][T19349] ip_vti0: entered promiscuous mode [ 233.547125][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 233.547138][T19349] ip_vti0: entered allmulticast mode [ 233.547138][ T29] audit: type=1326 audit(242.055:14229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.9.5992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x0 [ 233.553720][T19349] ip6_vti0: entered promiscuous mode [ 233.586344][T19349] ip6_vti0: entered allmulticast mode [ 233.592602][T19349] sit0: entered promiscuous mode [ 233.597541][T19349] sit0: entered allmulticast mode [ 233.603290][T19349] ip6tnl0: entered promiscuous mode [ 233.608595][T19349] ip6tnl0: entered allmulticast mode [ 233.614435][T19349] ip6gre0: entered promiscuous mode [ 233.619721][T19349] ip6gre0: entered allmulticast mode [ 233.625390][T19349] syz_tun: entered promiscuous mode [ 233.630643][T19349] syz_tun: entered allmulticast mode [ 233.636578][T19349] ip6gretap0: entered promiscuous mode [ 233.642107][T19349] ip6gretap0: entered allmulticast mode [ 233.651029][T19349] bridge0: entered promiscuous mode [ 233.656268][T19349] bridge0: entered allmulticast mode [ 233.662220][T19349] $Hÿ: entered promiscuous mode [ 233.667384][T19349] $Hÿ: entered allmulticast mode [ 233.669815][ T29] audit: type=1326 audit(242.191:14230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19361 comm="syz.3.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 233.675106][T19349] dummy0: entered promiscuous mode [ 233.700527][T19349] dummy0: entered allmulticast mode [ 233.701089][ T29] audit: type=1326 audit(242.212:14231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19361 comm="syz.3.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 233.706167][T19349] nlmon0: entered promiscuous mode [ 233.729255][ T29] audit: type=1326 audit(242.212:14232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19361 comm="syz.3.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 233.734338][T19349] nlmon0: entered allmulticast mode [ 233.763879][ T29] audit: type=1326 audit(242.254:14233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19361 comm="syz.3.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 233.787383][ T29] audit: type=1326 audit(242.254:14234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19361 comm="syz.3.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 233.810837][ T29] audit: type=1326 audit(242.254:14235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19361 comm="syz.3.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 233.833968][T19349] caif0: entered promiscuous mode [ 233.839634][T19349] caif0: entered allmulticast mode [ 233.844807][T19349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.889478][T19367] validate_nla: 4 callbacks suppressed [ 233.889492][T19367] netlink: 'syz.7.5995': attribute type 21 has an invalid length. [ 233.905274][T19367] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5995'. [ 233.914313][T19367] netlink: 'syz.7.5995': attribute type 1 has an invalid length. [ 234.072468][T19384] netlink: 'syz.8.6003': attribute type 49 has an invalid length. [ 234.101556][T19391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19391 comm=syz.7.6005 [ 234.129306][T19395] netlink: 'syz.7.6006': attribute type 1 has an invalid length. [ 234.146598][T19395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.165250][T19395] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 234.174325][T19395] bond0: (slave batadv3): making interface the new active one [ 234.183304][T19395] bond0: (slave batadv3): Enslaving as an active interface with an up link [ 234.318522][T19402] bridge: RTM_NEWNEIGH with invalid ether address [ 234.377490][T19413] netlink: 'syz.7.6015': attribute type 49 has an invalid length. [ 234.551653][T19427] wg2: entered promiscuous mode [ 234.556586][T19427] wg2: entered allmulticast mode [ 235.059491][T19471] loop6: detected capacity change from 0 to 1024 [ 235.090879][T19471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.179674][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.333263][T19494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19494 comm=syz.6.6046 [ 235.365798][ T29] audit: type=1400 audit(243.965:14236): avc: denied { name_connect } for pid=19495 comm="syz.8.6047" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 235.399639][T19498] loop6: detected capacity change from 0 to 1024 [ 235.406488][T19498] EXT4-fs: Ignoring removed nobh option [ 235.412790][T19498] EXT4-fs: inline encryption not supported [ 235.439359][T19498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.460004][T19498] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.6048: Allocating blocks 385-513 which overlap fs metadata [ 235.478540][T19504] tls_set_device_offload: netdev not found [ 235.490793][T19497] EXT4-fs (loop6): pa ffff8881072a8380: logic 16, phys. 129, len 24 [ 235.498961][T19497] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 235.540210][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.553226][T19506] ref_ctr increment failed for inode: 0xd2c offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810a049700 [ 235.567378][T19505] uprobe: syz.8.6051:19505 failed to unregister, leaking uprobe [ 235.931829][T19525] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 236.019509][ T29] audit: type=1326 audit(244.658:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19530 comm="syz.8.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 236.068648][ T29] audit: type=1326 audit(244.679:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19530 comm="syz.8.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 236.325147][T19558] netlink: 'syz.7.6074': attribute type 4 has an invalid length. [ 236.352299][T19562] lo speed is unknown, defaulting to 1000 [ 236.434933][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6078'. [ 236.452800][T19567] lo speed is unknown, defaulting to 1000 [ 236.502157][T19574] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6081'. [ 236.539409][T19574] bond3: entered promiscuous mode [ 236.544492][T19574] bond3: entered allmulticast mode [ 236.550184][T19574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.563933][T19574] bond3 (unregistering): Released all slaves [ 236.903354][T19595] loop6: detected capacity change from 0 to 512 [ 236.921727][T19595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.945778][T19595] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.965662][T19595] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6087: bg 0: block 248: padding at end of block bitmap is not set [ 236.991041][T19598] netlink: 'syz.3.6089': attribute type 30 has an invalid length. [ 236.993770][T19595] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6087: Failed to acquire dquot type 1 [ 237.014121][T19595] EXT4-fs (loop6): 1 truncate cleaned up [ 237.021789][T19595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.262957][T19604] lo speed is unknown, defaulting to 1000 [ 238.150186][T19657] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6114'. [ 238.209430][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6114'. [ 238.388691][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6118'. [ 238.582895][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6124'. [ 238.621272][T19685] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6126'. [ 238.638423][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 238.638474][ T29] audit: type=1326 audit(247.398:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.653197][T19685] bond6: entered promiscuous mode [ 238.668097][ T29] audit: type=1326 audit(247.398:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.668127][ T29] audit: type=1326 audit(247.398:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.668168][ T29] audit: type=1326 audit(247.398:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.673181][T19685] bond6: entered allmulticast mode [ 238.675913][T19685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.696134][ T29] audit: type=1326 audit(247.398:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.696161][ T29] audit: type=1326 audit(247.398:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.696186][ T29] audit: type=1326 audit(247.398:14281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.696253][ T29] audit: type=1326 audit(247.398:14282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.849930][ T29] audit: type=1326 audit(247.461:14283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.872982][ T29] audit: type=1326 audit(247.461:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.7.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 238.906485][T19685] bond6 (unregistering): Released all slaves [ 239.011984][T19698] netlink: 'syz.7.6132': attribute type 1 has an invalid length. [ 239.230147][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6145'. [ 239.261811][T19731] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6146'. [ 239.274005][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6145'. [ 239.416831][T19745] FAT-fs (loop7): bogus number of reserved sectors [ 239.423406][T19745] FAT-fs (loop7): Can't find a valid FAT filesystem [ 239.592773][T19758] syzkaller0: entered allmulticast mode [ 239.603672][T19758] syzkaller0 (unregistering): left allmulticast mode [ 239.613596][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.629642][T19761] loop6: detected capacity change from 0 to 164 [ 239.638847][T19761] syz.6.6158: attempt to access beyond end of device [ 239.638847][T19761] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 239.652805][T19761] syz.6.6158: attempt to access beyond end of device [ 239.652805][T19761] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 239.705798][T19770] netlink: 'syz.3.6162': attribute type 4 has an invalid length. [ 239.724332][ T3411] lo speed is unknown, defaulting to 1000 [ 239.730144][ T3411] syz0: Port: 1 Link DOWN [ 240.018779][T19803] Invalid logical block size (5) [ 240.037915][T19803] netlink: 'syz.6.6177': attribute type 1 has an invalid length. [ 240.175669][T19817] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.235149][T19824] netlink: zone id is out of range [ 240.243944][T19824] netlink: zone id is out of range [ 240.251705][T19817] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.325694][T19817] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.448650][T19817] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.460651][T19838] netlink: 'syz.9.6192': attribute type 1 has an invalid length. [ 240.560597][ T3599] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.579368][ T3599] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.598432][ T3599] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.613955][ T3599] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.674461][T19845] vlan0: entered allmulticast mode [ 240.679686][T19845] bridge_slave_0: entered allmulticast mode [ 240.821768][ T3391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3391 comm=kworker/0:3 [ 240.835668][T19856] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 240.857920][T19858] netlink: 'syz.9.6201': attribute type 10 has an invalid length. [ 240.870470][T19860] raw_sendmsg: syz.6.6202 forgot to set AF_INET. Fix it! [ 240.887176][T19858] bond0: (slave dummy0): Releasing backup interface [ 240.895269][T19858] dummy0: left promiscuous mode [ 240.900315][T19858] dummy0: left allmulticast mode [ 240.906669][T19858] dummy0: entered promiscuous mode [ 240.907041][T19863] netlink: 'syz.9.6201': attribute type 10 has an invalid length. [ 240.911899][T19858] dummy0: entered allmulticast mode [ 240.928744][T19858] team0: Failed to send options change via netlink (err -105) [ 240.936226][T19858] team0: Port device dummy0 added [ 240.947102][T19863] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.970692][T19863] dummy0: left promiscuous mode [ 240.978518][T19863] dummy0: left allmulticast mode [ 240.985573][T19863] team0: Failed to send options change via netlink (err -105) [ 240.997620][T19863] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.006628][T19863] team0: Port device dummy0 removed [ 241.017798][T19863] dummy0: entered promiscuous mode [ 241.023039][T19863] dummy0: entered allmulticast mode [ 241.031496][T19863] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.056724][T19862] syzkaller0: entered promiscuous mode [ 241.062241][T19862] syzkaller0: entered allmulticast mode [ 241.130202][T19873] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 241.247000][T19883] netlink: 'syz.3.6211': attribute type 3 has an invalid length. [ 241.401531][T19895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19895 comm=syz.8.6216 [ 241.417786][T19895] __nla_validate_parse: 5 callbacks suppressed [ 241.417802][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6216'. [ 241.644665][T19912] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.677729][T19912] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.734748][T19912] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.782701][T19912] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.824376][ T3606] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.835208][ T3606] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.846353][ T3606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.856761][ T3606] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.976109][T19922] netlink: 'syz.3.6227': attribute type 1 has an invalid length. [ 241.996534][T19922] bond6: entered promiscuous mode [ 242.001888][T19922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.022127][T19922] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6227'. [ 242.049592][T19922] batadv3: entered promiscuous mode [ 242.054875][T19922] batadv3: entered allmulticast mode [ 242.065067][T19922] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 242.073208][T19922] bond6: (slave batadv3): making interface the new active one [ 242.081275][T19922] bond6: (slave batadv3): Enslaving as an active interface with an up link [ 242.197186][T19940] netlink: 'syz.8.6235': attribute type 1 has an invalid length. [ 242.237175][T19940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.281894][T19947] bond4: (slave veth7): Enslaving as an active interface with a down link [ 242.326306][T19940] bridge6: entered promiscuous mode [ 242.331518][T19940] bridge6: entered allmulticast mode [ 242.339024][T19940] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 242.355170][T19953] netlink: 'syz.7.6239': attribute type 1 has an invalid length. [ 242.391215][T19953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.404920][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6239'. [ 242.439864][T19965] bond3 (unregistering): Released all slaves [ 242.449558][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6247'. [ 242.552508][T19972] lo speed is unknown, defaulting to 1000 [ 242.568556][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6250'. [ 242.721556][T20004] lo speed is unknown, defaulting to 1000 [ 242.854856][T20010] lo: left promiscuous mode [ 242.859427][T20010] lo: left allmulticast mode [ 242.871248][T20010] tunl0: left promiscuous mode [ 242.876126][T20010] tunl0: left allmulticast mode [ 242.891792][T20010] gre0: left promiscuous mode [ 242.897130][T20010] gre0: left allmulticast mode [ 242.908568][T20010] gretap0: left promiscuous mode [ 242.913550][T20010] gretap0: left allmulticast mode [ 242.930987][T20010] erspan0: left promiscuous mode [ 242.936087][T20010] erspan0: left allmulticast mode [ 242.947318][T20010] ip_vti0: left promiscuous mode [ 242.952294][T20010] ip_vti0: left allmulticast mode [ 242.959266][T20010] ip6_vti0: left promiscuous mode [ 242.965075][T20010] ip6_vti0: left allmulticast mode [ 242.973289][T20010] sit0: left promiscuous mode [ 242.977971][T20010] sit0: left allmulticast mode [ 242.986376][T20010] ip6tnl0: left promiscuous mode [ 242.991395][T20010] ip6tnl0: left allmulticast mode [ 242.997477][T20010] ip6gre0: left promiscuous mode [ 243.003277][T20010] ip6gre0: left allmulticast mode [ 243.014604][T20010] syz_tun: left promiscuous mode [ 243.019646][T20010] syz_tun: left allmulticast mode [ 243.027536][T20010] ip6gretap0: left promiscuous mode [ 243.033460][T20010] ip6gretap0: left allmulticast mode [ 243.045245][T20010] bridge0: left promiscuous mode [ 243.050237][T20010] bridge0: left allmulticast mode [ 243.056155][T20010] bond0: left promiscuous mode [ 243.066965][T20010] dummy0: left promiscuous mode [ 243.072663][T20010] bond0: left allmulticast mode [ 243.078226][T20010] dummy0: left allmulticast mode [ 243.089576][T20010] team0: left promiscuous mode [ 243.094349][T20010] team0: left allmulticast mode [ 243.105862][T20010] nlmon0: left promiscuous mode [ 243.110801][T20010] nlmon0: left allmulticast mode [ 243.118235][T20010] caif0: left promiscuous mode [ 243.123029][T20010] caif0: left allmulticast mode [ 243.131465][T20010] ip6gre1: left allmulticast mode [ 243.136650][T20010] geneve2: left promiscuous mode [ 243.141960][T20010] bond3: left promiscuous mode [ 243.146723][T20010] bond3: left allmulticast mode [ 243.414118][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 243.414132][ T29] audit: type=1326 audit(252.416:14495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19994 comm="syz.7.6258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.446771][ T29] audit: type=1326 audit(252.448:14496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19994 comm="syz.7.6258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.500423][T20017] batman_adv: batadv0: Adding interface: dummy0 [ 243.506696][T20017] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 243.512651][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6265'. [ 243.530352][T20017] batman_adv: batadv0: Interface activated: dummy0 [ 243.560169][ T29] audit: type=1326 audit(252.563:14497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.584203][ T29] audit: type=1326 audit(252.563:14498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.607238][ T29] audit: type=1326 audit(252.563:14499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.630993][ T29] audit: type=1326 audit(252.563:14500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.654146][ T29] audit: type=1326 audit(252.563:14501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.677858][ T29] audit: type=1326 audit(252.563:14502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.701118][ T29] audit: type=1326 audit(252.563:14503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.724635][ T29] audit: type=1326 audit(252.563:14504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.7.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 243.734624][T20027] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 243.777963][T20029] netlink: 4 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 243.934868][T20049] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 243.934934][T20048] IPVS: stopping master sync thread 20049 ... [ 244.356131][T20070] lo speed is unknown, defaulting to 1000 [ 244.465294][T20087] syzkaller1: entered promiscuous mode [ 244.471456][T20087] syzkaller1: entered allmulticast mode [ 244.531387][T20094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6300'. [ 244.570505][T20100] batman_adv: batadv0: Adding interface: ipvlan0 [ 244.577140][T20100] batman_adv: batadv0: Interface activated: ipvlan0 [ 244.617846][T20102] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 244.750328][T20119] lo speed is unknown, defaulting to 1000 [ 245.030321][T20158] netlink: 'syz.9.6325': attribute type 10 has an invalid length. [ 245.046930][T20160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6326'. [ 245.050950][T20158] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 245.143716][T20166] sch_fq: defrate 0 ignored. [ 245.550629][T20172] netlink: 'syz.9.6331': attribute type 1 has an invalid length. [ 245.586327][T20172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.629908][T20178] bond4: (slave veth3): Enslaving as an active interface with a down link [ 245.716426][T20172] bond0: (slave dummy0): Releasing backup interface [ 245.723050][T20172] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 245.757420][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6335'. [ 245.761721][T20172] bond4: (slave dummy0): making interface the new active one [ 245.776416][T20172] dummy0: entered promiscuous mode [ 245.781669][T20172] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 246.022332][T20207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20207 comm=syz.3.6346 [ 246.034976][T20207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20207 comm=syz.3.6346 [ 246.038015][T20214] syz_tun: entered allmulticast mode [ 246.215076][T20236] __nla_validate_parse: 5 callbacks suppressed [ 246.215089][T20236] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6352'. [ 246.407104][T20253] loop6: detected capacity change from 0 to 512 [ 246.425569][T20253] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6364: bg 0: block 393: padding at end of block bitmap is not set [ 246.444201][T20253] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 246.453176][T20253] EXT4-fs (loop6): 2 truncates cleaned up [ 246.462084][T20253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.485025][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.938749][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6377'. [ 246.986656][T20287] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.6378'. [ 246.996000][T20287] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6378'. [ 247.032240][T20295] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 247.090307][T20301] ref_ctr increment failed for inode: 0xe97 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a04a280 [ 247.102010][T20300] uprobe: syz.8.6384:20300 failed to unregister, leaking uprobe [ 247.130750][T20305] lo speed is unknown, defaulting to 1000 [ 247.278710][T20321] netlink: 'syz.3.6393': attribute type 1 has an invalid length. [ 247.444195][T20329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20329 comm=syz.9.6397 [ 247.456912][T20329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20329 comm=syz.9.6397 [ 247.546787][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6403'. [ 247.710917][T20366] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6413'. [ 247.754950][T20371] loop6: detected capacity change from 0 to 512 [ 247.779713][T20371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.800548][T20371] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.6415: corrupted inode contents [ 247.825570][T20371] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.6415: mark_inode_dirty error [ 247.858283][T20371] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.6415: corrupted inode contents [ 247.876165][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6418'. [ 247.890386][T20379] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.6415: corrupted inode contents [ 247.914821][T20379] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.6415: mark_inode_dirty error [ 247.929594][T20383] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6419'. [ 247.942857][T20379] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.6415: corrupted inode contents [ 247.978685][T20379] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.6415: mark_inode_dirty error [ 247.990934][T20379] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.6415: corrupted inode contents [ 248.007563][T20379] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.6415: mark_inode_dirty error [ 248.052167][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.073687][T20385] netlink: 332 bytes leftover after parsing attributes in process `syz.8.6420'. [ 248.185899][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 248.185912][ T29] audit: type=1326 audit(257.424:14847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.215750][ T29] audit: type=1326 audit(257.424:14848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.239087][ T29] audit: type=1326 audit(257.424:14849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.262704][ T29] audit: type=1326 audit(257.424:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.286426][ T29] audit: type=1326 audit(257.424:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.310262][ T29] audit: type=1326 audit(257.424:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.333260][ T29] audit: type=1326 audit(257.529:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20394 comm="syz.8.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 248.490322][T20402] batman_adv: batadv0: Interface deactivated: dummy0 [ 248.497793][T20402] batman_adv: batadv0: Removing interface: dummy0 [ 248.523129][T20402] bond0: (slave batadv3): Releasing active interface [ 248.532786][T20410] netlink: 'syz.7.6428': attribute type 10 has an invalid length. [ 248.540741][T20410] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6428'. [ 248.553146][T20402] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 248.560513][T20402] batman_adv: batadv0: Removing interface: ipvlan0 [ 248.567360][ T29] audit: type=1400 audit(257.823:14854): avc: denied { remove_name } for pid=20411 comm="syz.3.6430" name="bus" dev="tmpfs" ino=6748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 248.594027][ T29] audit: type=1400 audit(257.823:14855): avc: denied { add_name } for pid=20411 comm="syz.3.6430" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 248.625504][ T29] audit: type=1400 audit(257.833:14856): avc: denied { unlink } for pid=3307 comm="syz-executor" name="bus" dev="tmpfs" ino=6749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.711626][T20465] IPVS: Error connecting to the multicast addr [ 249.757706][T20472] 9pnet: p9_errstr2errno: server reported unknown error [ 249.889129][T20484] netlink: 'syz.7.6459': attribute type 10 has an invalid length. [ 249.910640][T20484] dummy0: left allmulticast mode [ 249.930901][T20486] pimreg: entered allmulticast mode [ 249.950645][T20486] pimreg: left allmulticast mode [ 250.059150][T20496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.101847][T20496] vlan0: entered allmulticast mode [ 250.107729][T20496] bond3: entered allmulticast mode [ 250.186590][T20513] netlink: 'syz.6.6473': attribute type 21 has an invalid length. [ 251.047319][T20560] veth0: entered promiscuous mode [ 251.055544][T20558] __nla_validate_parse: 5 callbacks suppressed [ 251.055558][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6490'. [ 251.065083][T20560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6491'. [ 251.119014][T20560] veth0 (unregistering): left promiscuous mode [ 251.236853][T20575] vlan0: entered allmulticast mode [ 251.331408][T20582] loop6: detected capacity change from 0 to 1024 [ 251.437435][T20582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.548471][T20579] Set syz1 is full, maxelem 65536 reached [ 251.586701][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.130617][T20627] loop6: detected capacity change from 0 to 2048 [ 252.197423][T20627] Alternate GPT is invalid, using primary GPT. [ 252.203788][T20627] loop6: p2 p3 p7 [ 252.579964][T20650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.607279][T20650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.954563][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 252.954576][ T29] audit: type=1326 audit(262.421:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20664 comm="syz.9.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.474590][ T29] audit: type=1326 audit(262.977:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.498361][ T29] audit: type=1326 audit(262.977:15071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.521467][ T29] audit: type=1326 audit(262.977:15072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.545025][ T29] audit: type=1326 audit(262.977:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.568544][ T29] audit: type=1326 audit(262.977:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.591597][ T29] audit: type=1326 audit(262.977:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.615279][ T29] audit: type=1326 audit(262.977:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.638337][ T29] audit: type=1326 audit(262.977:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.661942][ T29] audit: type=1326 audit(262.977:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20682 comm="syz.9.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f064ad9ebe9 code=0x7ffc0000 [ 253.738230][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 253.763149][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 253.981012][T20712] vlan0: entered allmulticast mode [ 253.986178][T20712] bridge_slave_0: entered allmulticast mode [ 254.477714][T20744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6566'. [ 254.508422][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6566'. [ 256.395612][ T3606] dummy0: left promiscuous mode [ 256.942650][T20826] netlink: zone id is out of range [ 256.948422][T20826] netlink: zone id is out of range [ 257.973629][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 257.973728][ T29] audit: type=1400 audit(267.691:15584): avc: denied { bind } for pid=20851 comm="syz.7.6607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.095692][T20861] netlink: 'syz.8.6611': attribute type 1 has an invalid length. [ 258.124247][T20861] bond5: entered promiscuous mode [ 258.130174][T20861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.150809][T20861] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6611'. [ 258.168596][T20861] batadv3: entered promiscuous mode [ 258.173839][T20861] batadv3: entered allmulticast mode [ 258.182398][T20861] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 258.192020][T20861] bond5: (slave batadv3): making interface the new active one [ 258.201769][T20861] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 258.274991][T20875] netlink: 'syz.8.6614': attribute type 1 has an invalid length. [ 258.292240][T20875] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.309931][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6614'. [ 258.324630][T20848] Set syz1 is full, maxelem 65536 reached [ 258.351392][T20875] bond6 (unregistering): Released all slaves [ 258.410902][ T29] audit: type=1326 audit(268.153:15585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.486043][ T29] audit: type=1326 audit(268.184:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.509666][ T29] audit: type=1326 audit(268.184:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.532701][ T29] audit: type=1326 audit(268.184:15588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61f0bdec23 code=0x7ffc0000 [ 258.555688][ T29] audit: type=1326 audit(268.184:15589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61f0bdec23 code=0x7ffc0000 [ 258.579188][ T29] audit: type=1326 audit(268.184:15590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.602695][ T29] audit: type=1326 audit(268.184:15591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.626337][ T29] audit: type=1326 audit(268.184:15592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.649351][ T29] audit: type=1326 audit(268.184:15593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20886 comm="syz.6.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 258.739715][T20904] netlink: 4 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 258.749309][T20902] netlink: 'syz.3.6625': attribute type 1 has an invalid length. [ 258.799208][T20902] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.856906][T20915] bond7: (slave veth7): Enslaving as an active interface with a down link [ 258.879526][T20902] bridge7: entered promiscuous mode [ 258.884772][T20902] bridge7: entered allmulticast mode [ 258.907250][T20902] bond7: (slave bridge7): Enslaving as an active interface with a down link [ 259.171118][T20919] Set syz1 is full, maxelem 65536 reached [ 259.404998][T20963] netlink: 'syz.9.6648': attribute type 1 has an invalid length. [ 259.423430][T20963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.448753][T20963] bond5: (slave veth5): Enslaving as an active interface with a down link [ 259.469357][T20963] bridge6: entered promiscuous mode [ 259.475261][T20963] bridge6: entered allmulticast mode [ 259.485665][T20963] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 259.550305][T20971] loop6: detected capacity change from 0 to 256 [ 259.751905][T20991] lo speed is unknown, defaulting to 1000 [ 259.868946][T20997] lo speed is unknown, defaulting to 1000 [ 260.451568][T21022] netlink: 'syz.3.6670': attribute type 1 has an invalid length. [ 260.485637][T21022] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.502388][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6670'. [ 260.548194][T21025] bond8 (unregistering): Released all slaves [ 260.625416][T21029] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 260.686677][T21031] lo speed is unknown, defaulting to 1000 [ 261.055269][T21044] lo speed is unknown, defaulting to 1000 [ 261.257883][T21070] netlink: 'syz.7.6687': attribute type 1 has an invalid length. [ 261.293296][T21070] bond4: entered promiscuous mode [ 261.298698][T21070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.306241][T21081] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6687'. [ 261.320118][T21081] batadv4: entered promiscuous mode [ 261.325326][T21081] batadv4: entered allmulticast mode [ 261.332914][T21081] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 261.341469][T21081] bond4: (slave batadv4): making interface the new active one [ 261.349707][T21081] bond4: (slave batadv4): Enslaving as an active interface with an up link [ 261.429984][T21098] netlink: 'syz.3.6704': attribute type 10 has an invalid length. [ 261.444794][T21100] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 261.459261][T21098] bridge_slave_1: entered promiscuous mode [ 261.465192][T21098] bridge_slave_1: entered allmulticast mode [ 261.495824][T21098] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 261.536821][T21105] lo speed is unknown, defaulting to 1000 [ 261.690246][T21118] lo speed is unknown, defaulting to 1000 [ 261.728285][T21121] IPVS: Error connecting to the multicast addr [ 261.997184][T21151] netlink: 'syz.8.6711': attribute type 10 has an invalid length. [ 262.021819][T21151] bridge_slave_1: entered promiscuous mode [ 262.027808][T21151] bridge_slave_1: entered allmulticast mode [ 262.034695][T21151] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 262.257923][T21173] 0ªî{X¹¦: left allmulticast mode [ 262.473052][ T3598] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.511272][ T3598] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.536838][ T3598] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.573055][ T3598] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.761400][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 262.761413][ T29] audit: type=1400 audit(272.720:15699): avc: denied { read } for pid=21185 comm="syz.6.6729" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 262.791040][ T29] audit: type=1400 audit(272.720:15700): avc: denied { open } for pid=21185 comm="syz.6.6729" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 262.892692][T21184] lo speed is unknown, defaulting to 1000 [ 262.923157][T21192] sch_fq: defrate 0 ignored. [ 262.964797][T21195] netlink: 'syz.6.6732': attribute type 10 has an invalid length. [ 262.995182][T21195] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 263.070337][T21204] bridge0: entered allmulticast mode [ 263.085127][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6734'. [ 263.108007][T21204] bridge0 (unregistering): left allmulticast mode [ 263.163424][ T29] audit: type=1326 audit(273.139:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.187154][ T29] audit: type=1326 audit(273.139:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.210212][ T29] audit: type=1326 audit(273.139:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.233859][ T29] audit: type=1326 audit(273.139:15704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.256847][ T29] audit: type=1326 audit(273.139:15705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.382362][ T29] audit: type=1326 audit(273.276:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.406083][ T29] audit: type=1326 audit(273.276:15707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.429057][ T29] audit: type=1326 audit(273.276:15708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.7.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 263.513153][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6742'. [ 263.746366][T21239] netlink: 'syz.7.6748': attribute type 10 has an invalid length. [ 263.760875][T21239] $Hÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 265.179363][T21260] netlink: 'syz.9.6756': attribute type 1 has an invalid length. [ 265.202194][T21259] bridge: RTM_NEWNEIGH with invalid ether address [ 265.226450][T21260] bond6: entered promiscuous mode [ 265.239292][T21267] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6756'. [ 265.252251][T21260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.281397][T21267] batadv2: entered promiscuous mode [ 265.286694][T21267] batadv2: entered allmulticast mode [ 265.308919][T21267] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 265.324712][T21267] bond6: (slave batadv2): making interface the new active one [ 265.338821][T21267] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 265.348597][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6760'. [ 265.383319][T21274] ip6gre1: entered allmulticast mode [ 265.465310][T21289] netlink: zone id is out of range [ 265.475817][T21289] netlink: zone id is out of range [ 265.484056][T21289] netlink: zone id is out of range [ 265.489182][T21289] netlink: zone id is out of range [ 265.494920][T21289] netlink: zone id is out of range [ 265.507862][T21289] netlink: zone id is out of range [ 265.516222][T21289] netlink: zone id is out of range [ 265.535644][T21289] netlink: zone id is out of range [ 265.556270][T21289] netlink: zone id is out of range [ 265.573594][T21289] netlink: zone id is out of range [ 265.631144][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6774'. [ 265.696859][T21304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21304 comm=syz.8.6776 [ 265.956174][T21320] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6783'. [ 266.069447][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6785'. [ 266.411452][T21343] pimreg: entered allmulticast mode [ 266.449112][T21343] pimreg: left allmulticast mode [ 266.538875][T21356] lo: left promiscuous mode [ 266.543423][T21356] lo: left allmulticast mode [ 266.584500][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6797'. [ 266.594049][T21356] netlink: 'syz.8.6808': attribute type 13 has an invalid length. [ 266.672589][T21356] tunl0: left promiscuous mode [ 266.677405][T21356] tunl0: left allmulticast mode [ 266.715394][T21356] gre0: left promiscuous mode [ 266.720170][T21356] gre0: left allmulticast mode [ 266.754103][T21356] 0ªî{X¹¦: left promiscuous mode [ 266.759200][T21356] 0ªî{X¹¦: left allmulticast mode [ 266.779854][T21356] 0ªî{X¹¦: refused to change device tx_queue_len [ 266.843857][T21363] bond0: (slave bridge_slave_1): Releasing backup interface [ 266.863718][T21363] bridge_slave_1: left promiscuous mode [ 266.869326][T21363] bridge_slave_1: left allmulticast mode [ 266.894572][T21368] netlink: 'syz.8.6799': attribute type 10 has an invalid length. [ 266.903112][T21368] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6799'. [ 266.930626][T21363] bond4: (slave veth7): Releasing active interface [ 266.937219][T21363] bond4: (slave veth7): the permanent HWaddr of slave - 3a:d8:45:00:72:8c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 266.978543][T21363] bond4: (slave bridge6): Releasing active interface [ 267.008032][T21363] bond5: (slave batadv3): Releasing active interface [ 267.051848][T21368] batman_adv: batadv0: Adding interface: veth1_vlan [ 267.058547][T21368] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.138794][T21368] batman_adv: batadv0: Interface activated: veth1_vlan [ 267.206874][T21389] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6813'. [ 267.259645][T21394] 9pnet: p9_errstr2errno: server reported unknown error [ 267.408029][T21408] loop6: detected capacity change from 0 to 164 [ 267.498906][T21412] macsec0: entered promiscuous mode [ 267.631191][T21422] loop6: detected capacity change from 0 to 512 [ 267.646109][T21422] EXT4-fs: Ignoring removed orlov option [ 267.658779][T21422] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 267.691517][T21422] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 267.742841][T21422] EXT4-fs (loop6): 1 orphan inode deleted [ 267.771061][T21422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.819294][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.884501][T21441] __nla_validate_parse: 5 callbacks suppressed [ 267.884515][T21441] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6844'. [ 268.168638][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 268.168652][ T29] audit: type=1326 audit(278.409:15812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 268.197907][ T29] audit: type=1326 audit(278.409:15813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 268.231488][ T29] audit: type=1326 audit(278.451:15814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 268.254684][ T29] audit: type=1326 audit(278.451:15815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 268.277812][ T29] audit: type=1326 audit(278.451:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 268.300752][ T29] audit: type=1326 audit(278.462:15817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 268.323829][ T29] audit: type=1326 audit(278.462:15818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f353361ec23 code=0x7ffc0000 [ 268.346769][ T29] audit: type=1326 audit(278.462:15819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f353361d69f code=0x7ffc0000 [ 268.369610][ T29] audit: type=1326 audit(278.462:15820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f353361ec77 code=0x7ffc0000 [ 268.392461][ T29] audit: type=1326 audit(278.462:15821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353361d550 code=0x7ffc0000 [ 268.560972][T21488] wireguard0: entered promiscuous mode [ 268.566452][T21488] wireguard0: entered allmulticast mode [ 268.980765][T21508] loop6: detected capacity change from 0 to 1024 [ 269.037964][T21508] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6861: Failed to acquire dquot type 0 [ 269.063085][T21508] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 269.108553][T21513] netlink: 'syz.9.6863': attribute type 21 has an invalid length. [ 269.108936][T21508] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6861: corrupted inode contents [ 269.141099][T21508] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.6861: mark_inode_dirty error [ 269.144386][T21513] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6863'. [ 269.167416][T21518] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 269.167664][T21508] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6861: corrupted inode contents [ 269.218922][T21508] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6861: mark_inode_dirty error [ 269.235489][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 269.244507][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 269.265509][T21508] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6861: corrupted inode contents [ 269.291415][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 269.300393][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 269.314837][T21508] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 269.348865][T21508] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6861: corrupted inode contents [ 269.359306][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 269.369760][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 269.386102][T21508] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.6861: mark_inode_dirty error [ 269.398683][T21533] netlink: 'syz.8.6871': attribute type 3 has an invalid length. [ 269.409819][T21508] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 269.430041][T21533] netlink: 'syz.8.6871': attribute type 3 has an invalid length. [ 269.459857][T21508] EXT4-fs (loop6): 1 truncate cleaned up [ 269.478822][T21508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.581764][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.730931][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6883'. [ 269.838328][T21573] rdma_op ffff88811f625d80 conn xmit_rdma 0000000000000000 [ 270.264987][T21612] pimreg: entered allmulticast mode [ 270.289038][T21612] pimreg: left allmulticast mode [ 271.425575][T21683] veth9: entered promiscuous mode [ 271.448419][T21683] lo speed is unknown, defaulting to 1000 [ 271.927060][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6949'. [ 272.144609][T21727] wireguard0: entered promiscuous mode [ 272.150749][T21727] wireguard0: entered allmulticast mode [ 272.200032][T21732] tipc: Started in network mode [ 272.204935][T21732] tipc: Node identity ac14140f, cluster identity 4711 [ 272.212998][T21732] tipc: New replicast peer: 255.255.255.83 [ 272.219013][T21732] tipc: Enabled bearer , priority 10 [ 272.433780][T21744] loop6: detected capacity change from 0 to 512 [ 272.446642][T21744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.474864][T21744] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 272.486338][T21744] System zones: 0-2, 18-18, 34-34 [ 272.503797][T21744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.612785][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.683396][T21764] wireguard0: entered promiscuous mode [ 272.688894][T21764] wireguard0: entered allmulticast mode [ 272.991493][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 272.991507][ T29] audit: type=1326 audit(283.469:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.031671][ T29] audit: type=1326 audit(283.501:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.055283][ T29] audit: type=1326 audit(283.501:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.078340][ T29] audit: type=1326 audit(283.501:16139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.102122][ T29] audit: type=1326 audit(283.501:16140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.125113][ T29] audit: type=1326 audit(283.501:16141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.148816][ T29] audit: type=1326 audit(283.501:16142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f548aa8ec23 code=0x7ffc0000 [ 273.172218][ T29] audit: type=1326 audit(283.501:16143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f548aa8ec23 code=0x7ffc0000 [ 273.195009][ T29] audit: type=1326 audit(283.501:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.218697][ T29] audit: type=1326 audit(283.501:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21780 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 273.282134][T11385] tipc: Node number set to 2886997007 [ 273.352961][T21788] ALSA: seq fatal error: cannot create timer (-19) [ 273.431782][T21800] sctp: [Deprecated]: syz.7.6982 (pid 21800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.431782][T21800] Use struct sctp_sack_info instead [ 273.464034][T21800] lo speed is unknown, defaulting to 1000 [ 273.534050][T21807] 9pnet: p9_errstr2errno: server reported unknown error [ 273.621885][T21812] lo speed is unknown, defaulting to 1000 [ 274.239562][T21864] __nla_validate_parse: 2 callbacks suppressed [ 274.239577][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7009'. [ 274.305842][T21867] loop6: detected capacity change from 0 to 512 [ 274.319729][T21869] wireguard0: entered promiscuous mode [ 274.325301][T21869] wireguard0: entered allmulticast mode [ 274.333698][T21873] netlink: 'syz.9.7013': attribute type 30 has an invalid length. [ 274.370917][T21867] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7011: Failed to acquire dquot type 1 [ 274.385615][T21867] EXT4-fs (loop6): 1 truncate cleaned up [ 274.392522][T21867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.422080][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.460112][T21879] netlink: 'syz.8.7015': attribute type 13 has an invalid length. [ 274.497310][T21879] net_ratelimit: 73 callbacks suppressed [ 274.497319][T21879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.520011][T21877] tipc: Enabled bearer , priority 0 [ 274.528453][T21876] tipc: Resetting bearer [ 274.560597][T21876] tipc: Disabling bearer [ 274.573412][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7018'. [ 274.815487][T21916] wireguard0: entered promiscuous mode [ 274.821641][T21916] wireguard0: entered allmulticast mode [ 275.454652][T21955] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7042'. [ 275.499781][T21959] veth3: entered promiscuous mode [ 275.521584][T21959] lo speed is unknown, defaulting to 1000 [ 275.555765][T21963] lo speed is unknown, defaulting to 1000 [ 275.669256][T21975] loop6: detected capacity change from 0 to 512 [ 275.695577][T21975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.738888][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.842363][T21989] erspan0: left promiscuous mode [ 275.847953][T21989] erspan0: left allmulticast mode [ 275.861401][T21989] ip_vti0: left promiscuous mode [ 275.866385][T21989] ip_vti0: left allmulticast mode [ 275.872075][T21989] ip6_vti0: left promiscuous mode [ 275.877848][T21989] ip6_vti0: left allmulticast mode [ 275.888279][T21989] sit0: left promiscuous mode [ 275.893197][T21989] sit0: left allmulticast mode [ 275.900789][T21989] ip6tnl0: left promiscuous mode [ 275.906423][T21989] ip6tnl0: left allmulticast mode [ 275.912220][T21989] ip6gre0: left promiscuous mode [ 275.917139][T21989] ip6gre0: left allmulticast mode [ 275.922897][T21989] syz_tun: left promiscuous mode [ 275.927839][T21989] syz_tun: left allmulticast mode [ 275.933763][T21989] vcan0: left promiscuous mode [ 275.938581][T21989] vcan0: left allmulticast mode [ 275.944078][T21989] bond0: left promiscuous mode [ 275.948909][T21989] bond0: left allmulticast mode [ 275.954522][T21989] team0: left promiscuous mode [ 275.959423][T21989] team0: left allmulticast mode [ 275.965360][T21989] nlmon0: left promiscuous mode [ 275.970248][T21989] nlmon0: left allmulticast mode [ 275.975554][T21989] caif0: left promiscuous mode [ 275.980496][T21989] caif0: left allmulticast mode [ 275.986932][T21989] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 275.995165][T21989] dummy0: left allmulticast mode [ 276.000291][T21989] macsec1: left promiscuous mode [ 276.005215][T21989] macsec1: left allmulticast mode [ 276.017621][T21989] bridge6: left promiscuous mode [ 276.022599][T21989] bridge6: left allmulticast mode [ 276.029109][T21989] bond5: left promiscuous mode [ 276.034290][T21989] batadv3: left promiscuous mode [ 276.039245][T21989] batadv3: left allmulticast mode [ 276.044508][T21989] ip6gre1: left allmulticast mode [ 276.092627][T21996] veth7: entered promiscuous mode [ 276.109729][T21996] lo speed is unknown, defaulting to 1000 [ 276.158644][T22002] 9pnet: p9_errstr2errno: server reported unknown error [ 276.204235][T22008] wireguard0: entered promiscuous mode [ 276.209843][T22008] wireguard0: entered allmulticast mode [ 276.784612][T22044] netlink: 'syz.6.7089': attribute type 3 has an invalid length. [ 276.811863][T22044] netlink: 'syz.6.7089': attribute type 3 has an invalid length. [ 276.829188][T22051] tipc: Enabling of bearer rejected, failed to enable media [ 276.865261][T22053] lo speed is unknown, defaulting to 1000 [ 276.949122][T22063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22063 comm=syz.6.7086 [ 276.961944][T22063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22063 comm=syz.6.7086 [ 277.185777][T22053] Set syz1 is full, maxelem 65536 reached [ 277.270804][T22085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22085 comm=syz.3.7095 [ 277.303236][T22090] loop6: detected capacity change from 0 to 128 [ 277.309824][T22090] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.322234][T22090] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.362957][ T3590] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.413986][T22098] loop6: detected capacity change from 0 to 512 [ 277.427782][T22098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.472201][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.548920][T22113] loop6: detected capacity change from 0 to 128 [ 277.563911][T22113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7106'. [ 277.581329][T22117] netlink: 'syz.7.7108': attribute type 13 has an invalid length. [ 277.607834][T22117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.666930][T22122] lo speed is unknown, defaulting to 1000 [ 277.776287][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7116'. [ 277.811756][T22133] syz_tun (unregistering): left allmulticast mode [ 278.038714][T22122] Set syz1 is full, maxelem 65536 reached [ 278.076704][T22141] wireguard0: entered promiscuous mode [ 278.082213][T22141] wireguard0: entered allmulticast mode [ 278.147971][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7123'. [ 278.181057][T22148] pimreg: entered allmulticast mode [ 278.189611][T22148] pimreg: left allmulticast mode [ 278.249915][T22150] bond4: (slave dummy0): Releasing active interface [ 278.263200][T22150] bond0: (slave bridge_slave_1): Releasing backup interface [ 278.271701][T22150] batadv1: left allmulticast mode [ 278.276906][T22150] batadv1: left promiscuous mode [ 278.281980][T22150] bridge0: port 1(batadv1) entered disabled state [ 278.293888][T22150] bond3: (slave veth1): Releasing active interface [ 278.304097][T22150] bond4: (slave veth3): Releasing active interface [ 278.315704][T22150] bond5: (slave veth5): Releasing active interface [ 278.322332][T22150] bond5: (slave veth5): the permanent HWaddr of slave - 52:cf:b2:94:d9:41 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 278.340491][T22151] netlink: 'syz.9.7125': attribute type 10 has an invalid length. [ 278.348331][T22151] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7125'. [ 278.368234][T22150] bond5: (slave bridge6): Releasing active interface [ 278.377177][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7126'. [ 278.392146][T22150] bond6: (slave batadv2): Releasing active interface [ 278.504855][T22161] loop6: detected capacity change from 0 to 2048 [ 278.525675][T22161] EXT4-fs: Ignoring removed orlov option [ 278.553375][T22161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.804358][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.943641][T22169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22169 comm=syz.3.7133 [ 278.998925][T22173] wg2: entered promiscuous mode [ 279.003811][T22173] wg2: entered allmulticast mode [ 279.309317][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 279.309407][ T29] audit: type=1326 audit(290.094:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.338774][ T29] audit: type=1326 audit(290.094:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.361740][ T29] audit: type=1326 audit(290.094:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.384843][ T29] audit: type=1326 audit(290.094:16459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.408047][ T29] audit: type=1326 audit(290.094:16460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.431035][ T29] audit: type=1326 audit(290.094:16461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.454050][ T29] audit: type=1326 audit(290.094:16462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.479862][ T29] audit: type=1326 audit(290.094:16463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.502867][ T29] audit: type=1326 audit(290.094:16464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.526099][ T29] audit: type=1326 audit(290.094:16465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x7ffc0000 [ 279.599709][T22189] : (slave bridge_slave_1): Releasing backup interface [ 279.614953][T22189] bridge_slave_1: left allmulticast mode [ 279.620787][T22189] bridge_slave_1: left promiscuous mode [ 279.637768][T22195] netlink: 'syz.3.7138': attribute type 10 has an invalid length. [ 279.645678][T22195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7138'. [ 279.676245][T22189] bond5: (slave batadv2): Releasing active interface [ 279.696445][T22189] bond6: (slave batadv3): Releasing active interface [ 279.713732][T22189] bond7: (slave veth7): Releasing active interface [ 279.720265][T22189] bond7: (slave veth7): the permanent HWaddr of slave - ce:43:ad:9f:27:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 279.743471][T22189] bond7: (slave bridge7): Releasing active interface [ 279.772284][T22195] batman_adv: batadv0: Adding interface: veth1_vlan [ 279.797984][T22195] batman_adv: batadv0: Interface activated: veth1_vlan [ 280.125653][T22230] netlink: 'syz.8.7153': attribute type 1 has an invalid length. [ 280.146187][T22231] syzkaller0: entered promiscuous mode [ 280.151715][T22231] syzkaller0: entered allmulticast mode [ 280.186320][T22230] bond6: entered promiscuous mode [ 280.191434][T22230] bond6: entered allmulticast mode [ 280.198767][T22235] geneve2: entered allmulticast mode [ 280.206130][T22235] bond6: (slave geneve2): making interface the new active one [ 280.213743][T22235] geneve2: entered promiscuous mode [ 280.220343][T22235] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 280.229615][ T3561] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.231189][T22230] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7153'. [ 280.249289][ T3561] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.266061][T22230] bond6: left promiscuous mode [ 280.270867][T22230] geneve2: left promiscuous mode [ 280.275884][T22230] bond6: left allmulticast mode [ 280.284735][T22230] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.299912][T22241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7158'. [ 280.325567][ T3561] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.335805][ T3561] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.347653][T22243] tipc: New replicast peer: 255.255.255.255 [ 280.353818][T22243] tipc: Enabled bearer , priority 10 [ 280.934886][T22253] bond0: (slave bridge_slave_1): Releasing backup interface [ 280.959493][T22253] netlink: 'syz.6.7161': attribute type 10 has an invalid length. [ 280.967472][T22253] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7161'. [ 280.976756][T22253] veth1_vlan: left promiscuous mode [ 280.982640][T22253] batman_adv: batadv0: Adding interface: veth1_vlan [ 280.989267][T22253] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.015698][T22253] batman_adv: batadv0: Interface activated: veth1_vlan [ 281.321668][T22295] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 281.328854][T22295] batman_adv: batadv0: Removing interface: veth1_vlan [ 281.348461][T22300] netlink: 'syz.3.7180': attribute type 10 has an invalid length. [ 281.356461][T22300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7180'. [ 281.427042][T22300] batman_adv: batadv0: Adding interface: veth1_vlan [ 281.447537][T22300] batman_adv: batadv0: Interface activated: veth1_vlan [ 281.561021][T22312] atomic_op ffff88813961f928 conn xmit_atomic 0000000000000000 [ 281.589801][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7188'. [ 281.680228][T22327] veth9: entered promiscuous mode [ 281.698765][T22327] lo speed is unknown, defaulting to 1000 [ 281.767993][T22334] batman_adv: batadv0: Removing interface: veth1_vlan [ 281.780157][T22334] bond6: (slave geneve2): Releasing active interface [ 281.791732][ T3606] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.803876][T22334] netlink: 'syz.8.7197': attribute type 10 has an invalid length. [ 281.811743][T22334] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7197'. [ 281.822461][ T3606] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.832127][T22334] batman_adv: batadv0: Adding interface: veth1_vlan [ 281.838762][T22334] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.864971][T22334] batman_adv: batadv0: Interface activated: veth1_vlan [ 281.886377][ T3606] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.898120][ T3606] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.081213][T22353] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7200'. [ 282.519534][T22371] netlink: 'syz.8.7209': attribute type 13 has an invalid length. [ 282.557529][T22371] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 282.687493][T22385] netlink: 'syz.3.7215': attribute type 1 has an invalid length. [ 282.695407][T22385] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.7215'. [ 283.018847][T22398] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7219'. [ 283.143714][T22393] Set syz1 is full, maxelem 65536 reached [ 283.189323][T22404] netlink: 'syz.6.7221': attribute type 83 has an invalid length. [ 283.307597][T22415] netlink: 'syz.8.7226': attribute type 10 has an invalid length. [ 283.316054][T22415] dummy0: left promiscuous mode [ 283.320925][T22415] dummy0: entered promiscuous mode [ 283.417438][T22433] wireguard0: entered promiscuous mode [ 283.423004][T22433] wireguard0: entered allmulticast mode [ 283.816982][T22469] tipc: Enabling of bearer rejected, failed to enable media [ 284.089142][T22494] delete_channel: no stack [ 284.139745][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 284.139760][ T29] audit: type=1400 audit(295.112:16608): avc: denied { bind } for pid=22494 comm="syz.8.7259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 284.254510][ T29] audit: type=1326 audit(295.280:16609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.322774][ T29] audit: type=1326 audit(295.322:16610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.345727][ T29] audit: type=1326 audit(295.322:16611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.368735][ T29] audit: type=1326 audit(295.322:16612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.391692][ T29] audit: type=1326 audit(295.322:16613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.414562][ T29] audit: type=1326 audit(295.322:16614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.437562][ T29] audit: type=1326 audit(295.322:16615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.460500][ T29] audit: type=1326 audit(295.322:16616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.483482][ T29] audit: type=1326 audit(295.322:16617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.6.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 284.589889][T22517] __nla_validate_parse: 4 callbacks suppressed [ 284.589949][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7267'. [ 284.719112][T22543] Set syz1 is full, maxelem 65536 reached [ 284.795639][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7281'. [ 284.825932][T22559] loop6: detected capacity change from 0 to 256 [ 284.945209][T22575] loop6: detected capacity change from 0 to 512 [ 284.966781][T22575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.992733][T22570] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 284.999875][T22570] batman_adv: batadv0: Removing interface: veth1_vlan [ 285.012235][T22582] netlink: 'syz.3.7289': attribute type 10 has an invalid length. [ 285.020155][T22582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7289'. [ 285.077466][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.131696][T22582] batman_adv: batadv0: Adding interface: veth1_vlan [ 285.158368][T22582] batman_adv: batadv0: Interface activated: veth1_vlan [ 285.236127][T22590] tipc: Enabling of bearer rejected, failed to enable media [ 285.579782][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7305'. [ 285.656534][T22619] Set syz1 is full, maxelem 65536 reached [ 285.772452][T22639] veth1: entered promiscuous mode [ 285.795786][T22639] lo speed is unknown, defaulting to 1000 [ 285.909312][T22655] pimreg: entered allmulticast mode [ 285.917113][T22656] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7323'. [ 285.930163][T22655] pimreg: left allmulticast mode [ 285.961189][T22660] netlink: 'syz.6.7325': attribute type 1 has an invalid length. [ 285.984052][T22660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.993118][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7325'. [ 286.004754][T22660] bond1 (unregistering): Released all slaves [ 286.043330][T22674] veth9: entered promiscuous mode [ 286.062312][T22674] lo speed is unknown, defaulting to 1000 [ 286.368951][T22713] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7349'. [ 286.377999][T22713] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7349'. [ 286.519017][T22731] netlink: 'syz.3.7353': attribute type 10 has an invalid length. [ 286.533836][T22731] netlink: 'syz.3.7353': attribute type 10 has an invalid length. [ 286.549553][T22730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7356'. [ 286.657356][T22741] tipc: Enabling of bearer rejected, failed to enable media [ 286.666614][T22745] loop6: detected capacity change from 0 to 512 [ 286.677141][T22745] msdos: Bad value for 'uid' [ 286.681893][T22745] msdos: Bad value for 'uid' [ 286.811354][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7370'. [ 286.861753][T22762] infiniband syz1: set active [ 286.866563][T22762] infiniband syz1: added syz_tun [ 286.882150][T22762] RDS/IB: syz1: added [ 286.891999][T22762] smc: adding ib device syz1 with port count 1 [ 286.898261][T22762] smc: ib device syz1 port 1 has pnetid [ 287.263381][ T3412] IPVS: starting estimator thread 0... [ 287.320972][T22800] netlink: 'syz.9.7385': attribute type 13 has an invalid length. [ 287.351586][T22796] IPVS: using max 2496 ests per chain, 124800 per kthread [ 287.491601][T22812] netlink: 'syz.9.7390': attribute type 10 has an invalid length. [ 287.688118][T22836] uprobe: syz.6.7400:22836 failed to unregister, leaking uprobe [ 287.860946][T22843] ref_ctr increment failed for inode: 0x6d2 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811a90ed40 [ 287.882752][T22843] ref_ctr increment failed for inode: 0x6d2 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a90ed40 [ 287.895289][T22842] uprobe: syz.6.7403:22842 failed to unregister, leaking uprobe [ 287.963269][T22842] uprobe: syz.6.7403:22842 failed to unregister, leaking uprobe [ 288.249996][T22884] netlink: 'syz.7.7422': attribute type 10 has an invalid length. [ 288.271583][T22884] dummy0: left promiscuous mode [ 288.275293][T22878] loop6: detected capacity change from 0 to 8192 [ 288.289009][T22884] netlink: 'syz.7.7422': attribute type 10 has an invalid length. [ 288.314823][T22884] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 288.332890][T22878] loop6: p1 p2[DM] p4 [ 288.336996][T22878] loop6: p1 size 196608 extends beyond EOD, truncated [ 288.350925][T22878] loop6: p2 start 4292936063 is beyond EOD, truncated [ 288.357727][T22878] loop6: p4 size 50331648 extends beyond EOD, truncated [ 288.986124][T22993] pimreg: entered allmulticast mode [ 289.010761][T22993] pimreg: left allmulticast mode [ 289.071366][T22999] loop6: detected capacity change from 0 to 1024 [ 289.087350][T22999] EXT4-fs: Ignoring removed nobh option [ 289.092921][T22999] EXT4-fs: Ignoring removed bh option [ 289.110556][T22999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.185916][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 289.185945][ T29] audit: type=1326 audit(300.466:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.215154][ T29] audit: type=1326 audit(300.466:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.241409][ T29] audit: type=1326 audit(300.466:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.264381][ T29] audit: type=1326 audit(300.466:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.287507][ T29] audit: type=1326 audit(300.466:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.310480][ T29] audit: type=1326 audit(300.466:16749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.333564][ T29] audit: type=1400 audit(300.466:16750): avc: denied { append } for pid=22997 comm="syz.6.7440" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 289.355506][ T29] audit: type=1326 audit(300.466:16751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.378438][ T29] audit: type=1326 audit(300.466:16752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.401441][ T29] audit: type=1326 audit(300.466:16753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22997 comm="syz.6.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 289.425544][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.446284][T23027] netlink: 'syz.6.7443': attribute type 21 has an invalid length. [ 289.454953][T23027] __nla_validate_parse: 4 callbacks suppressed [ 289.455040][T23027] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7443'. [ 289.483357][T23030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7444'. [ 289.492408][T23030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7444'. [ 289.609932][T23049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7452'. [ 289.680233][T23053] tipc: Enabled bearer , priority 0 [ 289.708121][T23052] tipc: Resetting bearer [ 289.728652][T23052] tipc: Disabling bearer [ 290.405247][T23068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7458'. [ 290.414312][T23068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7458'. [ 290.443459][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7459'. [ 290.457115][T23067] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 290.475242][T23073] netlink: 'syz.9.7463': attribute type 10 has an invalid length. [ 290.485043][T23069] ip6gre2: entered allmulticast mode [ 290.502179][T23073] team0: Port device dummy0 added [ 290.515189][T23073] netlink: 'syz.9.7463': attribute type 10 has an invalid length. [ 290.532631][T23073] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 290.555793][T23073] team0: Failed to send options change via netlink (err -105) [ 290.578741][T23073] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 290.590870][T23073] team0: Port device dummy0 removed [ 290.600287][T23073] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 290.611848][T23086] ipvlan2: entered promiscuous mode [ 290.627211][T23086] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 290.637703][T23086] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.690537][T23096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7471'. [ 290.749545][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7473'. [ 290.763765][T23102] syzkaller0: entered allmulticast mode [ 290.770725][T23102] syzkaller0 (unregistering): left allmulticast mode [ 290.891885][T23099] batman_adv: batadv0: Removing interface: veth1_vlan [ 290.915938][T23108] tipc: Enabling of bearer rejected, failed to enable media [ 291.134309][T23136] rdma_rxe: rxe_newlink: failed to add syz_tun [ 291.780301][T23145] tipc: Enabling of bearer rejected, failed to enable media [ 291.795277][T23146] syzkaller0: entered allmulticast mode [ 291.812453][T23146] syzkaller0 (unregistering): left allmulticast mode [ 291.858790][T23151] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7495'. [ 291.977478][T23164] ref_ctr increment failed for inode: 0x1e21 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881042061c0 [ 291.992544][T23164] ref_ctr increment failed for inode: 0x1e21 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881042061c0 [ 292.021033][T23163] uprobe: syz.3.7501:23163 failed to unregister, leaking uprobe [ 292.097534][T23163] uprobe: syz.3.7501:23163 failed to unregister, leaking uprobe [ 292.290495][T23188] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 292.483955][T23188] batman_adv: batadv0: Removing interface: veth1_vlan [ 292.674439][T23199] syzkaller0: entered allmulticast mode [ 292.693610][T23199] syzkaller0 (unregistering): left allmulticast mode [ 292.823304][T23207] syzkaller0: entered allmulticast mode [ 292.833813][T23207] syzkaller0 (unregistering): left allmulticast mode [ 292.919537][T23212] syzkaller0: entered allmulticast mode [ 292.928900][T23212] syzkaller0: entered promiscuous mode [ 292.939555][T23212] syzkaller0 (unregistering): left allmulticast mode [ 292.946355][T23212] syzkaller0 (unregistering): left promiscuous mode [ 293.039857][T23224] pimreg: entered allmulticast mode [ 293.050125][T23224] pimreg: left allmulticast mode [ 294.039194][T23275] netlink: 'syz.6.7545': attribute type 1 has an invalid length. [ 294.055686][T23275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.072609][T23275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.079502][T23275] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 294.090233][T23275] bond1: (slave vti0): Error -95 calling set_mac_address [ 294.205066][T23282] pimreg: entered allmulticast mode [ 294.222832][T23282] pimreg: left allmulticast mode [ 294.247101][T23290] vlan0: entered allmulticast mode [ 294.344144][T23294] syzkaller0: entered allmulticast mode [ 294.349923][T23294] syzkaller0: entered promiscuous mode [ 294.356896][T23294] syzkaller0 (unregistering): left allmulticast mode [ 294.363619][T23294] syzkaller0 (unregistering): left promiscuous mode [ 294.525412][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 294.525426][ T29] audit: type=1326 audit(306.072:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23303 comm="syz.3.7559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f548aa8ebe9 code=0x0 [ 294.857436][T23311] tipc: Enabling of bearer rejected, failed to enable media [ 294.929376][T23317] __nla_validate_parse: 10 callbacks suppressed [ 294.929387][T23317] netlink: 360 bytes leftover after parsing attributes in process `syz.7.7565'. [ 294.962254][T23319] syzkaller0: entered allmulticast mode [ 294.976772][T23319] syzkaller0 (unregistering): left allmulticast mode [ 295.036728][ T29] audit: type=1400 audit(306.607:16887): avc: denied { getopt } for pid=23320 comm="syz.8.7567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 295.314328][ T29] audit: type=1326 audit(306.891:16888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23323 comm="syz.6.7568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f61f0bd5ba7 code=0x0 [ 295.894969][T23346] loop6: detected capacity change from 0 to 512 [ 295.938874][T23346] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 295.949966][T23346] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 295.968604][T23346] EXT4-fs (loop6): mount failed [ 295.986623][T23346] loop6: detected capacity change from 0 to 1024 [ 295.997497][T23346] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.008420][T23346] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.028171][T23346] JBD2: no valid journal superblock found [ 296.034032][T23346] EXT4-fs (loop6): Could not load journal inode [ 296.155876][T23364] syzkaller0: entered allmulticast mode [ 296.170997][T23364] syzkaller0 (unregistering): left allmulticast mode [ 296.207088][ T29] audit: type=1400 audit(307.835:16889): avc: denied { audit_write } for pid=23367 comm="syz.9.7584" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 296.228025][ T29] audit: type=1107 audit(307.835:16890): pid=23367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 296.240833][ T29] audit: type=1400 audit(307.846:16891): avc: denied { ioctl } for pid=23367 comm="syz.9.7584" path="socket:[76450]" dev="sockfs" ino=76450 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.283752][T23373] tipc: Enabling of bearer rejected, failed to enable media [ 296.308269][T23377] wg2: left promiscuous mode [ 296.312900][T23377] wg2: left allmulticast mode [ 296.328359][T23377] wg2: entered promiscuous mode [ 296.333226][T23377] wg2: entered allmulticast mode [ 296.544566][ T29] audit: type=1326 audit(308.192:16892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23385 comm="syz.7.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 296.572339][ T29] audit: type=1326 audit(308.213:16893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23385 comm="syz.7.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 296.595458][ T29] audit: type=1326 audit(308.213:16894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23385 comm="syz.7.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f353361ebe9 code=0x7ffc0000 [ 297.014165][T23423] lo speed is unknown, defaulting to 1000 [ 297.263156][T23429] veth0: entered promiscuous mode [ 297.300064][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7611'. [ 297.327748][T23429] veth0 (unregistering): left promiscuous mode [ 297.835777][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7623'. [ 297.889711][T23443] syzkaller0: entered allmulticast mode [ 297.905234][T23443] syzkaller0 (unregistering): left allmulticast mode [ 297.995577][T23452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=23452 comm=syz.6.7620 [ 298.187951][T23464] netlink: 'syz.8.7628': attribute type 1 has an invalid length. [ 298.239616][T23464] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.338353][T23464] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.384496][T23464] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 298.421020][T23464] bond7: (slave vti0): Error -95 calling set_mac_address [ 299.017008][T23485] lo speed is unknown, defaulting to 1000 [ 299.343321][T23493] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.366870][T23490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=23490 comm=syz.9.7636 [ 299.384196][T23493] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.415002][T23497] sch_tbf: burst 824 is lower than device lo mtu (11337746) ! [ 299.479640][T23493] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.527921][T23493] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.580647][T23512] ref_ctr increment failed for inode: 0x7db offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811a90a840 [ 299.595615][T23512] ref_ctr increment failed for inode: 0x7db offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a90a840 [ 299.607598][T23511] uprobe: syz.6.7646:23511 failed to unregister, leaking uprobe [ 299.619858][ T54] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.628743][ T54] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.637106][ T54] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.648196][ T3575] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.687820][T23511] uprobe: syz.6.7646:23511 failed to unregister, leaking uprobe [ 299.804391][T23520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=23520 comm=syz.3.7650 [ 300.370029][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.395816][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.422102][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.454778][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.492165][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.526418][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.567639][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.607155][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.671971][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.707427][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7655'. [ 300.919295][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 300.919309][ T29] audit: type=1326 audit(312.780:17234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.009702][ T29] audit: type=1326 audit(312.811:17235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.032845][ T29] audit: type=1326 audit(312.811:17236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.035691][T23560] lo speed is unknown, defaulting to 1000 [ 301.055819][ T29] audit: type=1326 audit(312.822:17237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.084589][ T29] audit: type=1326 audit(312.822:17238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.107753][ T29] audit: type=1326 audit(312.822:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.130872][ T29] audit: type=1326 audit(312.822:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.153903][ T29] audit: type=1326 audit(312.822:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.176893][ T29] audit: type=1326 audit(312.822:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.199843][ T29] audit: type=1326 audit(312.822:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.8.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 301.297452][T23572] lo speed is unknown, defaulting to 1000 [ 301.413967][T23582] netlink: 'syz.7.7669': attribute type 7 has an invalid length. [ 302.213749][T23631] lo speed is unknown, defaulting to 1000 [ 302.376254][T23638] netlink: 'syz.7.7692': attribute type 1 has an invalid length. [ 302.407681][T23638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.442396][T23640] bond5 (unregistering): Released all slaves [ 302.889644][T23656] bridge0: entered promiscuous mode [ 302.908671][T23656] macvtap1: entered allmulticast mode [ 302.914160][T23656] bridge0: entered allmulticast mode [ 302.931923][T23656] bridge0: port 1(macvtap1) entered blocking state [ 302.938629][T23656] bridge0: port 1(macvtap1) entered disabled state [ 302.969979][T23656] bridge0: left allmulticast mode [ 302.975163][T23656] bridge0: left promiscuous mode [ 303.099109][T23675] 9pnet_fd: Insufficient options for proto=fd [ 303.748145][T23694] lo speed is unknown, defaulting to 1000 [ 304.118880][T23702] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 304.243625][T23715] lo speed is unknown, defaulting to 1000 [ 304.290859][T23718] loop6: detected capacity change from 0 to 512 [ 304.311496][T23718] EXT4-fs: Ignoring removed oldalloc option [ 304.333408][T23718] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.7723: Parent and EA inode have the same ino 15 [ 304.350460][T23718] EXT4-fs (loop6): 1 orphan inode deleted [ 304.374858][T23718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.407752][T23718] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.445499][T23740] loop6: detected capacity change from 0 to 128 [ 304.452447][T23740] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.469346][T23740] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 304.497285][ T54] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 304.531370][T23745] lo speed is unknown, defaulting to 1000 [ 304.552876][T23743] lo speed is unknown, defaulting to 1000 [ 304.990261][T23771] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.087310][T23771] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.132148][T23781] netlink: 'syz.6.7749': attribute type 12 has an invalid length. [ 305.140077][T23781] __nla_validate_parse: 33 callbacks suppressed [ 305.140090][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7749'. [ 305.201704][T23781] netlink: 'syz.6.7749': attribute type 12 has an invalid length. [ 305.201719][ T3605] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.209560][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7749'. [ 305.258709][T23771] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.319830][T23799] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7755'. [ 305.336380][ T3605] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.371350][ T3605] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.402287][T23771] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.475581][ T3553] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.513560][T23818] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 305.631383][ T3593] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.643111][T23822] netlink: 'syz.7.7765': attribute type 4 has an invalid length. [ 305.692057][T23830] netlink: 'syz.7.7765': attribute type 4 has an invalid length. [ 305.720416][ T3593] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.817523][ T3553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.843608][ T3553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.020982][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7774'. [ 306.148843][T23852] lo speed is unknown, defaulting to 1000 [ 306.483199][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 306.483214][ T29] audit: type=1326 audit(318.627:17374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.512455][ T29] audit: type=1326 audit(318.627:17375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.660388][ T29] audit: type=1326 audit(318.627:17376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.683344][ T29] audit: type=1326 audit(318.627:17377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.706315][ T29] audit: type=1326 audit(318.627:17378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.729348][ T29] audit: type=1326 audit(318.627:17379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.752384][ T29] audit: type=1326 audit(318.627:17380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.775320][ T29] audit: type=1326 audit(318.627:17381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.798374][ T29] audit: type=1326 audit(318.627:17382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.804285][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7781'. [ 306.821215][ T29] audit: type=1326 audit(318.627:17383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.8.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa485ebe9 code=0x7ffc0000 [ 306.859160][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7781'. [ 307.186781][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7786'. [ 307.306955][T23878] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 307.313490][T23878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.321091][T23878] vhci_hcd vhci_hcd.0: Device attached [ 307.352937][T23879] vhci_hcd: connection closed [ 307.353177][ T3593] vhci_hcd: stop threads [ 307.362183][ T3593] vhci_hcd: release socket [ 307.366614][ T3593] vhci_hcd: disconnect device [ 308.731853][T23915] wg2: left promiscuous mode [ 308.736564][T23915] wg2: left allmulticast mode [ 308.785867][T23915] wg2: entered promiscuous mode [ 308.790872][T23915] wg2: entered allmulticast mode [ 308.869195][T23919] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7801'. [ 310.470196][T23995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7829'. [ 310.518382][T24000] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7834'. [ 310.656238][T24004] lo speed is unknown, defaulting to 1000 [ 311.135573][T24032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24032 comm=syz.7.7846 [ 311.269752][T24049] C: renamed from team_slave_0 [ 311.281315][T24049] netlink: 'syz.7.7854': attribute type 3 has an invalid length. [ 311.289082][T24049] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7854'. [ 311.389072][ T3412] hid_parser_main: 19 callbacks suppressed [ 311.389153][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 311.402649][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 311.444656][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.452434][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.460082][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.467786][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.475447][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.483111][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.490779][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.498450][ T3412] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 311.511526][ T3412] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 311.513625][T24069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7860'. [ 311.616100][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 311.616113][ T29] audit: type=1400 audit(324.013:17604): avc: denied { listen } for pid=24083 comm="syz.7.7867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 311.768037][ T29] audit: type=1400 audit(324.170:17605): avc: denied { create } for pid=24097 comm="syz.3.7871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 311.948395][T24107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7875'. [ 311.958080][ T29] audit: type=1326 audit(324.359:17606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.002793][ T29] audit: type=1326 audit(324.391:17607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.025908][ T29] audit: type=1326 audit(324.391:17608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.048856][ T29] audit: type=1326 audit(324.391:17609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.071900][ T29] audit: type=1326 audit(324.391:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.094869][ T29] audit: type=1326 audit(324.391:17611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.117912][ T29] audit: type=1326 audit(324.391:17612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.140939][ T29] audit: type=1326 audit(324.391:17613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.6.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61f0bdebe9 code=0x7ffc0000 [ 312.178631][T24116] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7878'. [ 312.474866][T24142] loop6: detected capacity change from 0 to 512 [ 312.495103][T24142] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 313.048251][T24166] netlink: 'syz.6.7897': attribute type 1 has an invalid length. [ 313.125269][T24168] bond2: entered promiscuous mode [ 313.130444][T24168] bond2: entered allmulticast mode [ 313.167655][T24168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.196791][T24166] ip6gretap1: entered promiscuous mode [ 313.202371][T24166] ip6gretap1: entered allmulticast mode [ 313.208520][T24166] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 313.232769][ T3593] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.290092][T24174] lo speed is unknown, defaulting to 1000 [ 313.375952][ T54] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.402713][T24178] loop6: detected capacity change from 0 to 8192 [ 313.410177][T24178] msdos: Unknown parameter 'A' [ 313.425310][T24187] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7902'. [ 313.451411][T24187] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 313.506227][T24195] 9pnet_fd: Insufficient options for proto=fd [ 313.546786][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7909'. [ 313.555721][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7909'. [ 313.761623][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7917'. [ 313.788697][T24224] team1: entered promiscuous mode [ 313.793771][T24224] team1: entered allmulticast mode [ 313.897475][T24241] loop6: detected capacity change from 0 to 2048 [ 313.937818][T24241] loop6: p1 < > p4 [ 313.942401][T24241] loop6: p4 size 8388608 extends beyond EOD, truncated [ 314.220267][T24262] netlink: 'syz.7.7936': attribute type 1 has an invalid length. [ 314.278508][T24262] bond6: (slave bridge12): making interface the new active one [ 314.281532][T24268] 9pnet: p9_errstr2errno: server reported unknown error [ 314.296738][T24262] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 314.612472][T24289] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 314.964656][T24322] netlink: 'syz.7.7959': attribute type 4 has an invalid length. [ 314.984924][T24322] netlink: 'syz.7.7959': attribute type 4 has an invalid length. [ 315.007856][T24324] loop6: detected capacity change from 0 to 512 [ 315.014858][T24324] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 315.028777][T24324] EXT4-fs (loop6): 1 truncate cleaned up [ 315.036158][T24324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.109812][T24334] tipc: Enabling of bearer rejected, failed to enable media [ 315.174098][T24324] ================================================================== [ 315.182208][T24324] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 315.189344][T24324] [ 315.191659][T24324] write to 0xffff8881199e9844 of 4 bytes by task 24335 on cpu 0: [ 315.199363][T24324] xas_set_mark+0x12b/0x140 [ 315.203874][T24324] __folio_start_writeback+0x1dd/0x440 [ 315.209343][T24324] ext4_bio_write_folio+0x5ad/0x9f0 [ 315.214548][T24324] mpage_process_page_bufs+0x4a1/0x620 [ 315.220003][T24324] mpage_prepare_extent_to_map+0x786/0xc00 [ 315.225809][T24324] ext4_do_writepages+0xa05/0x2750 [ 315.230932][T24324] ext4_writepages+0x176/0x300 [ 315.235694][T24324] do_writepages+0x1c6/0x310 [ 315.240290][T24324] filemap_write_and_wait_range+0x144/0x340 [ 315.246196][T24324] filemap_invalidate_pages+0xa4/0x1a0 [ 315.251649][T24324] kiocb_invalidate_pages+0x6e/0x80 [ 315.256843][T24324] __iomap_dio_rw+0x5d4/0x1250 [ 315.261609][T24324] iomap_dio_rw+0x40/0x90 [ 315.265940][T24324] ext4_file_write_iter+0xad9/0xf00 [ 315.271141][T24324] iter_file_splice_write+0x663/0xa60 [ 315.276503][T24324] direct_splice_actor+0x153/0x2a0 [ 315.281613][T24324] splice_direct_to_actor+0x30f/0x680 [ 315.286979][T24324] do_splice_direct+0xda/0x150 [ 315.291737][T24324] do_sendfile+0x380/0x650 [ 315.296154][T24324] __x64_sys_sendfile64+0x105/0x150 [ 315.301357][T24324] x64_sys_call+0x2bb0/0x2ff0 [ 315.306036][T24324] do_syscall_64+0xd2/0x200 [ 315.310545][T24324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.316442][T24324] [ 315.318759][T24324] read to 0xffff8881199e9844 of 4 bytes by task 24324 on cpu 1: [ 315.326379][T24324] xas_find_marked+0x5dc/0x620 [ 315.331154][T24324] find_get_entry+0x5d/0x380 [ 315.335736][T24324] filemap_get_folios_tag+0x92/0x210 [ 315.341019][T24324] mpage_prepare_extent_to_map+0x320/0xc00 [ 315.346819][T24324] ext4_do_writepages+0xa05/0x2750 [ 315.351935][T24324] ext4_writepages+0x176/0x300 [ 315.356701][T24324] do_writepages+0x1c6/0x310 [ 315.361294][T24324] file_write_and_wait_range+0x156/0x2c0 [ 315.366942][T24324] generic_buffers_fsync_noflush+0x45/0x120 [ 315.372834][T24324] ext4_sync_file+0x1ab/0x690 [ 315.377498][T24324] vfs_fsync_range+0x10d/0x130 [ 315.382270][T24324] ext4_buffered_write_iter+0x34f/0x3c0 [ 315.387828][T24324] ext4_file_write_iter+0xdbf/0xf00 [ 315.393038][T24324] iter_file_splice_write+0x663/0xa60 [ 315.398410][T24324] direct_splice_actor+0x153/0x2a0 [ 315.403517][T24324] splice_direct_to_actor+0x30f/0x680 [ 315.408886][T24324] do_splice_direct+0xda/0x150 [ 315.413642][T24324] do_sendfile+0x380/0x650 [ 315.418067][T24324] __x64_sys_sendfile64+0x105/0x150 [ 315.423277][T24324] x64_sys_call+0x2bb0/0x2ff0 [ 315.427957][T24324] do_syscall_64+0xd2/0x200 [ 315.432466][T24324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.438351][T24324] [ 315.440664][T24324] value changed: 0x0a000021 -> 0x00000021 [ 315.446372][T24324] [ 315.448687][T24324] Reported by Kernel Concurrency Sanitizer on: [ 315.454838][T24324] CPU: 1 UID: 0 PID: 24324 Comm: syz.6.7960 Not tainted syzkaller #0 PREEMPT(voluntary) [ 315.464643][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.474692][T24324] ================================================================== [ 315.900407][T17999] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.