last executing test programs: 5m6.167607564s ago: executing program 32 (id=1176): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r1, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0xd, @tick=0x7, 0x0, {0x6}, 0x1, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000006c0)={0x3, 0x2, 0xe}) tkill(r0, 0x7) 4m45.541390873s ago: executing program 33 (id=1849): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4m20.827414221s ago: executing program 34 (id=2680): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 3m54.950124353s ago: executing program 35 (id=3550): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 3m41.271289181s ago: executing program 36 (id=3935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m38.954412828s ago: executing program 1 (id=3999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 3m38.891376904s ago: executing program 1 (id=4002): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m38.756304147s ago: executing program 1 (id=4006): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f0000000280)=@assoc_value={r3, 0x800c9}, &(0x7f0000000180)=0x8) 3m38.736663169s ago: executing program 1 (id=4008): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) 3m38.701848403s ago: executing program 1 (id=4011): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x8) 3m38.246688647s ago: executing program 1 (id=4017): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 3m38.182942363s ago: executing program 37 (id=4017): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 2m44.007181565s ago: executing program 8 (id=5529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 2m44.006879655s ago: executing program 8 (id=5530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x28020480) r2 = syz_io_uring_setup(0x499, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x0, 0x26d}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8524a9af801bb0f, 0x0, r2, 0x0, 0x0, 0x4, 0x240940, 0x23456}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2m43.842750781s ago: executing program 8 (id=5536): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 2m43.777232437s ago: executing program 8 (id=5539): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1d2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 2m43.612862563s ago: executing program 8 (id=5542): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m43.573544967s ago: executing program 8 (id=5545): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0xffffffffffffcf80, 0x4000000000000000, 0x8, 0x4, 0x66e, 0xb62, 0x5, 0x10, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x80000001, 0x8ae, 0x7, 0x4]}, &(0x7f0000000180)=0x100) 2m34.459489679s ago: executing program 7 (id=5725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000200), &(0x7f0000000440)=r1}, 0x20) shutdown(r2, 0x1) 2m34.370259408s ago: executing program 7 (id=5729): madvise(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x1) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r1, 0x80485dc1c126afb3, 0x0, 0xffffffff, {0x33}}, 0x32}}, 0x10800) 2m34.015876872s ago: executing program 7 (id=5732): syslog(0x2, 0xffffffffffffffff, 0x4b) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2m33.960462728s ago: executing program 7 (id=5733): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x7351, 0x8001) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m33.268834485s ago: executing program 7 (id=5741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000300)={0x0, 0xeaff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20080}, 0x10008050) 2m32.585303682s ago: executing program 7 (id=5747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 2m32.563008754s ago: executing program 38 (id=5747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 2m28.544173428s ago: executing program 39 (id=5545): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0xffffffffffffcf80, 0x4000000000000000, 0x8, 0x4, 0x66e, 0xb62, 0x5, 0x10, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x80000001, 0x8ae, 0x7, 0x4]}, &(0x7f0000000180)=0x100) 2m24.811012873s ago: executing program 9 (id=5913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 2m24.715943882s ago: executing program 9 (id=5918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2m24.658820448s ago: executing program 9 (id=5921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 2m24.607127883s ago: executing program 9 (id=5925): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x7351, 0x8001) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m23.991253793s ago: executing program 9 (id=5941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x20) close(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 2m23.899586642s ago: executing program 9 (id=5934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 2m23.899199992s ago: executing program 40 (id=5934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 40.728249016s ago: executing program 0 (id=8730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x6) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r1, &(0x7f0000000100)="9e", 0x1) write(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 40.541902295s ago: executing program 0 (id=8735): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r4, 0x0, 0x3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 39.676540091s ago: executing program 0 (id=8753): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xd4}, 0x18) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 39.557261963s ago: executing program 0 (id=8755): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 39.538567795s ago: executing program 0 (id=8756): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x7, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x6, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 38.823172917s ago: executing program 0 (id=8782): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x7ffff000) 38.799878219s ago: executing program 41 (id=8782): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x7ffff000) 1.224538618s ago: executing program 2 (id=9743): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.049424765s ago: executing program 2 (id=9747): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 1.031540377s ago: executing program 4 (id=9748): syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 979.598133ms ago: executing program 5 (id=9749): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 979.054883ms ago: executing program 5 (id=9750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 978.789493ms ago: executing program 4 (id=9751): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 954.907325ms ago: executing program 2 (id=9752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r1, r1) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x9, @local}, 0x1c) 945.614715ms ago: executing program 5 (id=9753): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0x4, 0x4) 892.471541ms ago: executing program 5 (id=9754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 891.984151ms ago: executing program 2 (id=9755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 886.830081ms ago: executing program 2 (id=9756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=""/194, 0xc2}], 0x1}, 0x6}], 0x1, 0x40000001, 0x0) 858.991754ms ago: executing program 4 (id=9757): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) 823.343858ms ago: executing program 4 (id=9758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 771.567433ms ago: executing program 4 (id=9759): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 537.386806ms ago: executing program 6 (id=9761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x2fb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001040)="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", 0x11c}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 443.466766ms ago: executing program 6 (id=9762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x2, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "562d9ba90683726398023d5cc4caf4390083568d7c99bfb9", "eb835fb65c8b9ae493d4fb662704b8db08835fefb6a4d7ea9378cfc98b077903"}}}}}}}, 0x72) 443.035226ms ago: executing program 3 (id=9763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 331.916347ms ago: executing program 6 (id=9764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a1e6f78608890f912f087214dac06387a94", 0xc3}, {&(0x7f0000001040)="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", 0xf2e}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 331.582497ms ago: executing program 3 (id=9765): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 292.880061ms ago: executing program 6 (id=9766): r0 = syz_io_uring_setup(0x2801, &(0x7f0000001480)={0x0, 0xb35d, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 272.684303ms ago: executing program 4 (id=9767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) 272.113443ms ago: executing program 3 (id=9768): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20030004) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, 0x0, 0x101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") 215.533619ms ago: executing program 5 (id=9769): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 185.822872ms ago: executing program 3 (id=9770): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xc, "7fff7a2004dc17a8"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 172.274193ms ago: executing program 5 (id=9771): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 171.800274ms ago: executing program 3 (id=9772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 139.267536ms ago: executing program 6 (id=9773): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 95.591931ms ago: executing program 3 (id=9783): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x64842, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x21, 0x2, 0x10000000000002) fallocate(r1, 0x0, 0x6, 0x2000402) 30.405038ms ago: executing program 2 (id=9774): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) 0s ago: executing program 6 (id=9775): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xff, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x5}, 0x68, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a00000200000000000000000000002200c6d6c0c67d574fbafb3b22ed3fc7648f1628c6fae350625f5bfa7e163153cccf461e56cd313513a7e4893bfe2241aa92"], 0x10}}, 0x800) kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 277.216697][ T29] audit: type=1326 audit(277.007:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21669 comm="syz.2.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 277.289949][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7012'. [ 277.334814][T21677] lo speed is unknown, defaulting to 1000 [ 277.685516][T21691] ÿÿÿÿÿÿ: renamed from vlan1 [ 277.769317][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7019'. [ 277.778439][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7019'. [ 277.795843][T21708] netlink: 'syz.3.7024': attribute type 1 has an invalid length. [ 277.809554][T21708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.826513][T21708] bond0: (slave ip6erspan0): making interface the new active one [ 277.836035][T21708] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 278.246882][T21759] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 278.770681][T21807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.669595][T21874] netlink: 'syz.6.7094': attribute type 1 has an invalid length. [ 279.684721][T21870] ÿÿÿÿÿÿ: renamed from vlan1 [ 279.709784][T21874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.726780][T21859] lo speed is unknown, defaulting to 1000 [ 279.741458][T21876] bond0: (slave ip6erspan0): making interface the new active one [ 279.757417][T21876] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 280.599839][T21896] __nla_validate_parse: 4 callbacks suppressed [ 280.599855][T21896] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7103'. [ 280.825357][T21901] ref_ctr_offset mismatch. inode: 0x52d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 281.025880][T21930] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7119'. [ 281.164011][T21944] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.189989][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7127'. [ 281.219492][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7127'. [ 281.467804][T21963] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.7133'. [ 281.477048][T21963] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7133'. [ 281.690651][T21972] serio: Serial port ptm0 [ 281.880741][T21990] wg2: entered promiscuous mode [ 281.885761][T21990] wg2: entered allmulticast mode [ 282.011033][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7151'. [ 282.031772][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7151'. [ 282.091771][T22011] lo speed is unknown, defaulting to 1000 [ 282.277175][T22026] wg2: entered promiscuous mode [ 282.282127][T22026] wg2: entered allmulticast mode [ 282.338488][T22037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7158'. [ 282.603126][T22083] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7166'. [ 282.615330][T22083] batadv1: entered promiscuous mode [ 282.620604][T22083] batadv1: entered allmulticast mode [ 282.791384][T22117] ref_ctr_offset mismatch. inode: 0x5aa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 282.817301][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 282.817318][ T29] audit: type=1326 audit(282.807:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 282.864176][ T29] audit: type=1326 audit(282.807:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 282.887315][ T29] audit: type=1326 audit(282.807:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 282.910252][ T29] audit: type=1326 audit(282.807:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 282.933343][ T29] audit: type=1326 audit(282.807:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 282.956298][ T29] audit: type=1326 audit(282.807:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 282.979369][ T29] audit: type=1326 audit(282.807:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 283.002314][ T29] audit: type=1326 audit(282.817:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 283.025224][ T29] audit: type=1326 audit(282.817:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 283.048205][ T29] audit: type=1326 audit(282.817:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.2.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 283.487620][T22217] lo speed is unknown, defaulting to 1000 [ 284.739091][T22296] SELinux: failed to load policy [ 284.743271][T22298] lo speed is unknown, defaulting to 1000 [ 284.815538][T22303] lo speed is unknown, defaulting to 1000 [ 284.999046][T22246] syz.4.7198 (22246) used greatest stack depth: 6072 bytes left [ 285.043332][T22310] loop4: detected capacity change from 0 to 4096 [ 285.050598][T22310] EXT4-fs: test_dummy_encryption option not supported [ 285.091761][T22314] netlink: 'syz.2.7222': attribute type 3 has an invalid length. [ 285.114919][T22319] syzkaller1: entered promiscuous mode [ 285.120449][T22319] syzkaller1: entered allmulticast mode [ 285.194293][T22316] loop3: detected capacity change from 0 to 8192 [ 285.231572][T22326] SELinux: failed to load policy [ 285.339167][T22337] lo speed is unknown, defaulting to 1000 [ 285.375036][T22342] tipc: Enabling of bearer rejected, failed to enable media [ 285.458716][T22347] lo speed is unknown, defaulting to 1000 [ 285.500592][T22355] veth4: entered promiscuous mode [ 285.505884][T22355] veth4: entered allmulticast mode [ 285.719770][T22370] __nla_validate_parse: 4 callbacks suppressed [ 285.719787][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7253'. [ 285.737852][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7253'. [ 285.829708][T22375] netlink: 'syz.6.7245': attribute type 83 has an invalid length. [ 286.479081][T22396] netlink: 'syz.0.7264': attribute type 1 has an invalid length. [ 286.538769][T22396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.555953][T22392] SELinux: failed to load policy [ 286.633954][T22400] bond2: (slave veth9): Enslaving as an active interface with a down link [ 286.689455][T22396] bond2: (slave dummy0): making interface the new active one [ 286.742665][T22396] dummy0: entered promiscuous mode [ 286.747927][T22396] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 286.829534][T22404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22404 comm=syz.3.7255 [ 286.869087][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7257'. [ 287.065858][T22425] netlink: 'syz.3.7266': attribute type 27 has an invalid length. [ 287.546298][T22425] wg2: left promiscuous mode [ 287.550947][T22425] wg2: left allmulticast mode [ 287.571379][T22425] veth4: left promiscuous mode [ 287.576302][T22425] veth4: left allmulticast mode [ 287.643046][ T10] lo speed is unknown, defaulting to 1000 [ 287.668929][T22426] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.684208][T22426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.713504][ T23] lo speed is unknown, defaulting to 1000 [ 287.773756][T22437] lo speed is unknown, defaulting to 1000 [ 288.147701][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 288.147745][ T29] audit: type=1326 audit(288.137:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.192198][T22464] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7283'. [ 288.218384][ T29] audit: type=1326 audit(288.167:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.241278][ T29] audit: type=1326 audit(288.177:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.264517][ T29] audit: type=1326 audit(288.187:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.287620][ T29] audit: type=1326 audit(288.187:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22465 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1972441885 code=0x7ffc0000 [ 288.310565][ T29] audit: type=1326 audit(288.197:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.333532][ T29] audit: type=1326 audit(288.197:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.356581][ T29] audit: type=1326 audit(288.197:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.381404][ T29] audit: type=1326 audit(288.197:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 288.404483][ T29] audit: type=1326 audit(288.197:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.0.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 289.026296][T22516] syzkaller1: entered promiscuous mode [ 289.031919][T22516] syzkaller1: entered allmulticast mode [ 289.099615][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7307'. [ 289.109289][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7307'. [ 289.326930][T22561] loop4: detected capacity change from 0 to 2048 [ 289.358317][T22561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.412226][T19423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 289.428005][T19423] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 289.450242][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.402763][T22716] netlink: 'syz.2.7334': attribute type 27 has an invalid length. [ 290.446528][T22719] loop3: detected capacity change from 0 to 256 [ 290.460480][T22716] 8021q: adding VLAN 0 to HW filter on device .` [ 290.467300][T22719] FAT-fs (loop3): bogus number of FAT sectors [ 290.469033][T22716] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.473477][T22719] FAT-fs (loop3): Can't find a valid FAT filesystem [ 290.486880][T22716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.711678][T22749] netlink: 64 bytes leftover after parsing attributes in process `gtp'. [ 290.711865][T22750] netlink: 'syz.4.7350': attribute type 27 has an invalid length. [ 290.806351][T22750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.839234][T22750] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.879890][T22750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.264761][T22800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7373'. [ 291.310165][T22802] sch_fq: defrate 4294967295 ignored. [ 291.312916][T22804] netlink: 'syz.0.7375': attribute type 27 has an invalid length. [ 291.579987][T22830] SELinux: failed to load policy [ 291.839611][T22807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.856340][T22807] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.872422][T22807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.969691][T22887] block device autoloading is deprecated and will be removed. [ 292.013663][T22897] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 292.021649][T22897] netlink: 'syz.0.7386': attribute type 4 has an invalid length. [ 292.029395][T22897] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7386'. [ 292.039793][T22897] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 292.047668][T22897] netlink: 'syz.0.7386': attribute type 4 has an invalid length. [ 292.055457][T22897] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7386'. [ 292.299426][ T3748] Bluetooth: hci0: Frame reassembly failed (-84) [ 292.309369][T22947] netlink: 'syz.6.7394': attribute type 27 has an invalid length. [ 292.694203][T22947] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.701480][T22947] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.902419][T22947] wg2: left promiscuous mode [ 292.907043][T22947] wg2: left allmulticast mode [ 292.952648][T22947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.965197][T22947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.011961][T22947] team1: left promiscuous mode [ 293.016870][T22947] team1: left allmulticast mode [ 293.023120][T22947] ip6gre1: left allmulticast mode [ 293.033632][T22947] veth4: left promiscuous mode [ 293.038460][T22947] veth4: left allmulticast mode [ 293.074140][T22954] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.084461][T22954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.127216][ T3790] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.156580][ T3790] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.165599][ T3790] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.177656][ T3790] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.283263][T23000] macvtap1: entered promiscuous mode [ 293.288639][T23000] macvtap1: entered allmulticast mode [ 293.294571][T23000] dummy0: entered promiscuous mode [ 293.299860][T23000] dummy0: entered allmulticast mode [ 293.306847][T23000] team0: Device macvtap1 failed to register rx_handler [ 293.313990][T23000] dummy0: left allmulticast mode [ 293.319217][T23000] dummy0: left promiscuous mode [ 293.332807][T23002] netem: change failed [ 293.427030][T23018] loop4: detected capacity change from 0 to 764 [ 293.434874][T23018] iso9660: Unknown parameter '' [ 293.527520][T23028] syzkaller0: entered allmulticast mode [ 293.533510][T23028] syzkaller0: entered promiscuous mode [ 293.541793][T23028] syzkaller0 (unregistering): left allmulticast mode [ 293.548621][T23028] syzkaller0 (unregistering): left promiscuous mode [ 294.097932][T23065] loop4: detected capacity change from 0 to 512 [ 294.157176][T23070] IPVS: Unknown mcast interface: hsr0 [ 294.182165][T23065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.287773][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.301833][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 294.307966][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.342087][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 294.342106][ T29] audit: type=1326 audit(294.338:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.373073][ T29] audit: type=1326 audit(294.338:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.396256][ T29] audit: type=1326 audit(294.338:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.457133][T23084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7448'. [ 294.523801][ T29] audit: type=1326 audit(294.388:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.546939][ T29] audit: type=1326 audit(294.388:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.569953][ T29] audit: type=1326 audit(294.468:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.592882][ T29] audit: type=1326 audit(294.468:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.615873][ T29] audit: type=1326 audit(294.478:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.638889][ T29] audit: type=1326 audit(294.478:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.662038][ T29] audit: type=1326 audit(294.478:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.6.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 294.744283][T23089] loop3: detected capacity change from 0 to 2048 [ 294.801390][T23089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.836418][T23097] pimreg: entered allmulticast mode [ 294.866404][T23097] pimreg: left allmulticast mode [ 294.914927][ T3320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 295.011123][ T3320] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 295.043860][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.121600][T23106] loop3: detected capacity change from 0 to 128 [ 295.138027][T23106] EXT4-fs: Ignoring removed nobh option [ 295.154394][T23106] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.264924][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.335228][T23113] sctp: [Deprecated]: syz.6.7459 (pid 23113) Use of int in maxseg socket option. [ 295.335228][T23113] Use struct sctp_assoc_value instead [ 295.462151][T23125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7464'. [ 295.688749][T23138] netlink: 'syz.4.7469': attribute type 83 has an invalid length. [ 296.037608][T23162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7479'. [ 296.064617][T23164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7480'. [ 296.072320][T23162] IPVS: Error connecting to the multicast addr [ 296.121601][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7482'. [ 296.284601][T23179] vlan1: entered allmulticast mode [ 296.289842][T23179] dummy0: entered allmulticast mode [ 296.750149][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7499'. [ 296.773564][T23211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7499'. [ 296.908642][T23226] netlink: 'syz.2.7506': attribute type 1 has an invalid length. [ 296.916534][T23226] netlink: 'syz.2.7506': attribute type 4 has an invalid length. [ 296.924372][T23226] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7506'. [ 296.934488][T23226] netlink: 'syz.2.7506': attribute type 1 has an invalid length. [ 296.942322][T23226] netlink: 'syz.2.7506': attribute type 4 has an invalid length. [ 296.950118][T23226] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7506'. [ 297.088416][T23247] dvmrp0: entered allmulticast mode [ 297.110682][T23247] dvmrp0: left allmulticast mode [ 297.119745][T23253] netlink: 19 bytes leftover after parsing attributes in process `syz.6.7519'. [ 297.168934][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7521'. [ 297.177868][T23257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7521'. [ 297.223312][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7522'. [ 299.293000][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7557'. [ 299.301951][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7557'. [ 299.360849][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 299.360905][ T29] audit: type=1326 audit(299.348:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 299.392248][ T29] audit: type=1326 audit(299.348:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 299.415378][ T29] audit: type=1326 audit(299.358:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 299.438462][ T29] audit: type=1326 audit(299.358:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 299.461585][ T29] audit: type=1326 audit(299.358:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 299.578913][ T29] audit: type=1326 audit(299.568:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23369 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 299.606659][ T29] audit: type=1326 audit(299.568:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23369 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 299.629771][ T29] audit: type=1326 audit(299.568:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23369 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 299.652867][ T29] audit: type=1326 audit(299.598:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23369 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 299.675925][ T29] audit: type=1326 audit(299.598:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23369 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 300.483796][T23426] netlink: 'syz.3.7591': attribute type 4 has an invalid length. [ 300.511746][T22982] lo speed is unknown, defaulting to 1000 [ 300.517553][T22982] syz0: Port: 1 Link DOWN [ 302.083664][T23549] __nla_validate_parse: 7 callbacks suppressed [ 302.083734][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7647'. [ 302.098877][T23549] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7647'. [ 302.108033][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7647'. [ 302.116978][T23549] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7647'. [ 302.155055][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7647'. [ 302.441805][T23572] lo speed is unknown, defaulting to 1000 [ 302.524540][T23582] lo speed is unknown, defaulting to 1000 [ 302.547000][T23592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7664'. [ 302.681808][T23592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7664'. [ 302.689971][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7669'. [ 302.849016][T23630] netlink: 'syz.2.7682': attribute type 1 has an invalid length. [ 302.880260][T23630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.890178][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7683'. [ 302.943206][T23630] bond0: (slave veth5): Enslaving as an active interface with a down link [ 302.964611][T23630] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 302.973684][T23630] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 303.009034][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7683'. [ 303.033173][T23646] pim6reg1: entered promiscuous mode [ 303.038595][T23646] pim6reg1: entered allmulticast mode [ 303.705280][T23708] lo speed is unknown, defaulting to 1000 [ 303.848920][T23716] netlink: 'syz.6.7719': attribute type 1 has an invalid length. [ 303.864174][T23716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.918962][T23716] bond1: (slave veth7): Enslaving as an active interface with a down link [ 303.982132][T23716] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.991537][T23716] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 304.606393][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 304.606411][ T29] audit: type=1400 audit(304.598:7926): avc: denied { setattr } for pid=23750 comm="syz.0.7732" name="/" dev="configfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.792950][T23768] loop4: detected capacity change from 0 to 512 [ 304.833763][T23768] EXT4-fs (loop4): 1 orphan inode deleted [ 304.839853][T23768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.124181][T23793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.131449][T23793] IPv6: NLM_F_CREATE should be set when creating new route [ 305.316992][T23797] IPVS: Error connecting to the multicast addr [ 305.379035][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.762374][T23835] syzkaller0: entered allmulticast mode [ 305.774738][T23835] syzkaller0: entered promiscuous mode [ 305.789910][T23835] syzkaller0 (unregistering): left allmulticast mode [ 305.796712][T23835] syzkaller0 (unregistering): left promiscuous mode [ 306.485823][ T29] audit: type=1326 audit(819.477:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.508613][ T29] audit: type=1326 audit(819.477:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.531447][ T29] audit: type=1326 audit(819.477:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.554274][ T29] audit: type=1326 audit(819.477:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.577005][ T29] audit: type=1326 audit(819.477:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.599721][ T29] audit: type=1326 audit(819.477:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.622516][ T29] audit: type=1326 audit(819.477:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.645346][ T29] audit: type=1326 audit(819.477:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.668103][ T29] audit: type=1326 audit(819.477:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x50000 [ 306.909435][T23897] loop3: detected capacity change from 0 to 2048 [ 306.924648][T23897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.985614][T23903] netlink: 'syz.0.7789': attribute type 1 has an invalid length. [ 307.014941][T23903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.051122][T23903] bond3 (unregistering): Released all slaves [ 307.073944][T23907] veth0_vlan: entered allmulticast mode [ 307.086864][T23907] ªªªªªª: renamed from vlan0 [ 307.204907][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.790468][T23948] wg2: entered promiscuous mode [ 307.795424][T23948] wg2: entered allmulticast mode [ 308.253620][T23982] loop4: detected capacity change from 0 to 8192 [ 308.694903][T24047] __nla_validate_parse: 8 callbacks suppressed [ 308.694924][T24047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7847'. [ 308.758717][T24057] loop3: detected capacity change from 0 to 128 [ 308.774027][T22981] Process accounting resumed [ 308.779377][T22981] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 308.787079][T22981] FAT-fs (loop3): Filesystem has been set read-only [ 308.857801][T24068] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 308.878256][T24070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7858'. [ 308.887416][T24070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7858'. [ 308.887482][T24068] SELinux: failed to load policy [ 308.902092][T24070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7858'. [ 308.911199][T24070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7858'. [ 308.949045][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7859'. [ 309.180133][T22981] IPVS: starting estimator thread 0... [ 309.264010][T24096] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7868'. [ 309.300011][T24090] IPVS: using max 2400 ests per chain, 120000 per kthread [ 309.603527][T24124] Falling back ldisc for ttyS3. [ 309.669761][T24133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7884'. [ 309.703894][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 309.703912][ T29] audit: type=1326 audit(822.697:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.733516][ T29] audit: type=1326 audit(822.707:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.756480][ T29] audit: type=1326 audit(822.707:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.779663][ T29] audit: type=1326 audit(822.707:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.802699][ T29] audit: type=1326 audit(822.707:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.825765][ T29] audit: type=1326 audit(822.707:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.848930][ T29] audit: type=1326 audit(822.707:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.872013][ T29] audit: type=1326 audit(822.707:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.895081][ T29] audit: type=1326 audit(822.707:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 309.918134][ T29] audit: type=1326 audit(822.727:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.0.7885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 310.055363][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7888'. [ 310.064423][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7888'. [ 310.294831][T24179] netlink: 'syz.0.7914': attribute type 4 has an invalid length. [ 310.464994][T24196] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 310.475626][T24196] SELinux: failed to load policy [ 310.505970][T24201] veth0_vlan: left allmulticast mode [ 311.122689][T24246] infiniband syz2: set down [ 311.127226][T24246] infiniband syz2: added bond0 [ 311.143031][T24246] RDS/IB: syz2: added [ 311.147414][T24246] smc: adding ib device syz2 with port count 1 [ 311.154003][T24246] smc: ib device syz2 port 1 has no pnetid [ 311.510427][T24277] macvtap1: entered allmulticast mode [ 311.515874][T24277] bridge0: entered allmulticast mode [ 311.525090][T24277] bridge0: port 1(macvtap1) entered blocking state [ 311.531871][T24277] bridge0: port 1(macvtap1) entered disabled state [ 311.540617][T24277] bridge0: left allmulticast mode [ 311.620968][ T3414] IPVS: starting estimator thread 0... [ 311.719899][T24292] IPVS: using max 2400 ests per chain, 120000 per kthread [ 311.759735][T24300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.772858][T24300] vlan1: entered allmulticast mode [ 311.778029][T24300] bond1: entered allmulticast mode [ 311.964957][T24314] loop4: detected capacity change from 0 to 512 [ 311.995313][T24314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.044893][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.216604][T24451] loop4: detected capacity change from 0 to 512 [ 314.280664][T24451] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 314.300608][T24456] __nla_validate_parse: 14 callbacks suppressed [ 314.300626][T24456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8016'. [ 314.335868][T24456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8016'. [ 314.370413][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8016'. [ 314.415576][T24456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8016'. [ 314.434352][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8016'. [ 314.482383][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8016'. [ 314.537395][T24466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8020'. [ 314.581451][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8020'. [ 314.604164][T24475] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8024'. [ 314.613453][T24476] delete_channel: no stack [ 314.947396][T24498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8032'. [ 314.985115][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 314.985133][ T29] audit: type=1326 audit(1340.976:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.014517][ T29] audit: type=1326 audit(1340.976:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.040714][ T29] audit: type=1326 audit(1341.006:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.064451][ T29] audit: type=1326 audit(1341.006:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.087599][ T29] audit: type=1326 audit(1341.006:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.111412][ T29] audit: type=1326 audit(1341.006:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.134434][ T29] audit: type=1326 audit(1341.006:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.157528][ T29] audit: type=1326 audit(1341.006:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.180700][ T29] audit: type=1326 audit(1341.006:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 315.203840][ T29] audit: type=1326 audit(1341.006:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.0.8036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197240efc9 code=0x7ffc0000 [ 316.361284][T24586] netlink: 'syz.2.8068': attribute type 10 has an invalid length. [ 316.370965][T24586] team0: Port device geneve1 added [ 316.380103][ T3745] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.388395][ T3745] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.404956][ T3745] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.426305][ T3745] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.468246][ T3430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.481181][T24590] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 317.061709][T24621] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.079633][ T3430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.140837][T24621] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.190963][T24621] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.214232][T24624] lo speed is unknown, defaulting to 1000 [ 317.251000][T24621] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.297795][T24631] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 317.304394][T24631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.312047][T24631] vhci_hcd vhci_hcd.0: Device attached [ 317.338864][ T3771] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.349348][ T3735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.357588][ T3771] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.378962][ T3771] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.387539][ T3771] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.397544][T24631] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 317.404095][T24631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.411934][T24631] vhci_hcd vhci_hcd.0: Device attached [ 317.421104][T24631] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 317.427657][T24631] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 317.435392][T24631] vhci_hcd vhci_hcd.0: Device attached [ 317.469680][T24631] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 317.476289][T24631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.483880][T24631] vhci_hcd vhci_hcd.0: Device attached [ 317.491389][T24631] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.500356][T24631] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.508991][T24631] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.517841][T24631] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 317.524509][T24631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 317.532166][T24631] vhci_hcd vhci_hcd.0: Device attached [ 317.538269][T24642] vhci_hcd: connection closed [ 317.538431][T24638] vhci_hcd: connection closed [ 317.538478][T24636] vhci_hcd: connection closed [ 317.544383][T24640] vhci_hcd: connection closed [ 317.549488][T19971] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 317.565163][T24632] vhci_hcd: connection closed [ 317.565370][T24633] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 317.566706][ T3771] vhci_hcd: stop threads [ 317.580347][ T3771] vhci_hcd: release socket [ 317.584783][ T3771] vhci_hcd: disconnect device [ 317.592982][ T3771] vhci_hcd: stop threads [ 317.597292][ T3771] vhci_hcd: release socket [ 317.601793][ T3771] vhci_hcd: disconnect device [ 317.606628][ T3771] vhci_hcd: stop threads [ 317.610988][ T3771] vhci_hcd: release socket [ 317.615449][ T3771] vhci_hcd: disconnect device [ 317.620296][ T3771] vhci_hcd: stop threads [ 317.624555][ T3771] vhci_hcd: release socket [ 317.628979][ T3771] vhci_hcd: disconnect device [ 317.633858][ T3771] vhci_hcd: stop threads [ 317.638129][ T3771] vhci_hcd: release socket [ 317.642683][ T3771] vhci_hcd: disconnect device [ 318.194182][T24658] rdma_rxe: rxe_newlink: failed to add bond0 [ 318.265730][T24666] pimreg: entered allmulticast mode [ 318.284120][T24666] pimreg: left allmulticast mode [ 318.350789][T24681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24681 comm=syz.6.8104 [ 318.379547][ T3784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.507034][T24702] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 318.536336][T24704] rdma_rxe: rxe_newlink: failed to add bond0 [ 318.551469][T24706] dvmrp0: entered allmulticast mode [ 318.566845][T24706] dvmrp0: left allmulticast mode [ 318.969562][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.582546][T24788] __nla_validate_parse: 9 callbacks suppressed [ 319.582564][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8150'. [ 319.768265][T24802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8156'. [ 319.851428][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8156'. [ 320.108345][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 320.108364][ T29] audit: type=1326 audit(1346.097:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.158599][ T29] audit: type=1326 audit(1346.097:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.181703][ T29] audit: type=1326 audit(1346.137:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.204785][ T29] audit: type=1326 audit(1346.137:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.227864][ T29] audit: type=1326 audit(1346.137:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.250965][ T29] audit: type=1326 audit(1346.137:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.274041][ T29] audit: type=1326 audit(1346.137:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.297042][ T29] audit: type=1326 audit(1346.137:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.319997][ T29] audit: type=1326 audit(1346.137:8355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.343049][ T29] audit: type=1326 audit(1346.137:8356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24822 comm="syz.3.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 320.413173][T24837] dvmrp0: entered allmulticast mode [ 320.421251][T24837] dvmrp0: left allmulticast mode [ 320.640611][T24872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.739431][T24884] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1320987079/1320987081 [ 320.760543][T24884] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1320987079/1320987081 [ 320.769943][T24884] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1320987079/1320987081 [ 321.936756][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 321.945773][T24949] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8222'. [ 321.954907][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 321.963885][T24949] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8222'. [ 321.984352][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 322.117183][T24966] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8229'. [ 322.134798][T24970] loop4: detected capacity change from 0 to 128 [ 322.147352][T24970] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.165828][T24970] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.191482][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8233'. [ 322.215175][ T3753] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.615172][T25008] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 322.638147][T25008] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 322.682352][T19971] usb 9-1: enqueue for inactive port 0 [ 322.803959][T19971] usb 9-1: enqueue for inactive port 0 [ 323.026943][T19971] vhci_hcd: vhci_device speed not set [ 323.615805][T25074] loop4: detected capacity change from 0 to 512 [ 323.648625][T25074] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 323.660235][T25074] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 323.670486][T25074] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.8278: Corrupt directory, running e2fsck is recommended [ 323.699499][T25074] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 323.736357][T25074] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.8278: corrupted in-inode xattr: invalid ea_ino [ 323.812575][T25074] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.8278: couldn't read orphan inode 15 (err -117) [ 323.857261][T25074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.020232][T25074] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 324.030876][T25074] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 324.116025][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.811684][T25156] lo speed is unknown, defaulting to 1000 [ 325.364692][T25172] __nla_validate_parse: 6 callbacks suppressed [ 325.364713][T25172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8297'. [ 325.390646][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8298'. [ 325.401988][T25175] ip6gre2: entered promiscuous mode [ 325.449681][T25177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8299'. [ 325.490571][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 325.490588][ T29] audit: type=1326 audit(1351.487:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.550463][ T29] audit: type=1326 audit(1351.487:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.573677][ T29] audit: type=1326 audit(1351.487:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.596638][ T29] audit: type=1326 audit(1351.487:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.619639][ T29] audit: type=1326 audit(1351.487:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.642737][ T29] audit: type=1326 audit(1351.487:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.665825][ T29] audit: type=1326 audit(1351.487:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.688866][ T29] audit: type=1326 audit(1351.487:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.711867][ T29] audit: type=1326 audit(1351.487:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.734898][ T29] audit: type=1326 audit(1351.487:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25178 comm="syz.2.8300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 325.776315][T25189] @: renamed from vlan0 [ 325.898022][T25200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25200 comm=syz.2.8310 [ 325.910669][T25200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25200 comm=syz.2.8310 [ 326.181024][T25226] sctp: [Deprecated]: syz.3.8321 (pid 25226) Use of int in max_burst socket option deprecated. [ 326.181024][T25226] Use struct sctp_assoc_value instead [ 326.244874][T25232] netlink: 'syz.3.8324': attribute type 3 has an invalid length. [ 326.306451][T25238] lo speed is unknown, defaulting to 1000 [ 326.789658][T25279] can0: slcan on ttyS3. [ 326.827316][T25286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8346'. [ 326.920156][T25279] can0 (unregistered): slcan off ttyS3. [ 327.296815][T25325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8363'. [ 327.315337][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8363'. [ 327.450648][T25345] sctp: [Deprecated]: syz.6.8371 (pid 25345) Use of int in max_burst socket option deprecated. [ 327.450648][T25345] Use struct sctp_assoc_value instead [ 327.540165][T25358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8378'. [ 327.845813][T25381] sctp: [Deprecated]: syz.4.8387 (pid 25381) Use of int in max_burst socket option deprecated. [ 327.845813][T25381] Use struct sctp_assoc_value instead [ 327.869593][T25385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8388'. [ 328.234985][T25426] netlink: 'syz.2.8408': attribute type 21 has an invalid length. [ 328.278632][T25431] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8410'. [ 328.311348][T25433] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 328.409919][T25445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8416'. [ 328.615608][T25460] loop4: detected capacity change from 0 to 1764 [ 328.627165][T25460] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 329.063044][T25504] sd 0:0:1:0: device reset [ 329.451764][T25535] netlink: 'syz.6.8454': attribute type 12 has an invalid length. [ 330.516945][T25605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25605 comm=syz.2.8482 [ 330.596354][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8484'. [ 330.708294][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 330.708308][ T29] audit: type=1326 audit(1356.697:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.765621][ T29] audit: type=1326 audit(1356.737:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.788811][ T29] audit: type=1326 audit(1356.737:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.811876][ T29] audit: type=1326 audit(1356.737:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.834936][ T29] audit: type=1326 audit(1356.737:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.857960][ T29] audit: type=1326 audit(1356.737:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.880997][ T29] audit: type=1326 audit(1356.737:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.904009][ T29] audit: type=1326 audit(1356.737:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.927044][ T29] audit: type=1326 audit(1356.737:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 330.950488][T25631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25631 comm=syz.2.8490 [ 330.963924][ T29] audit: type=1326 audit(1356.787:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25624 comm="syz.3.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256f8aefc9 code=0x7ffc0000 [ 331.517496][T25672] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 331.557578][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8512'. [ 331.698686][T25690] vhci_hcd: invalid port number 96 [ 331.703904][T25690] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 331.819141][T25710] serio: Serial port ptm0 [ 332.004838][T25733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8536'. [ 332.342433][T25758] veth14: entered promiscuous mode [ 332.347661][T25758] veth14: entered allmulticast mode [ 332.386892][T25758] lo speed is unknown, defaulting to 1000 [ 332.689636][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8556'. [ 332.741805][T25784] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8557'. [ 332.923681][T25795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8563'. [ 332.996541][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8566'. [ 333.017680][T25807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.025013][T25807] IPv6: NLM_F_CREATE should be set when creating new route [ 333.033404][T25807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.040710][T25807] IPv6: NLM_F_CREATE should be set when creating new route [ 333.747400][T25837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8588'. [ 333.756517][T25837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8588'. [ 334.400057][T25879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25879 comm=syz.6.8595 [ 335.306243][T25923] netlink: 'syz.2.8615': attribute type 12 has an invalid length. [ 335.364165][T25925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25925 comm=syz.6.8616 [ 335.512997][T25943] netlink: '+}[@': attribute type 10 has an invalid length. [ 335.541440][T25943] team0 (unregistering): Port device team_slave_0 removed [ 335.554706][T25943] team0 (unregistering): Port device team_slave_1 removed [ 335.939204][T25969] netlink: 'syz.4.8635': attribute type 10 has an invalid length. [ 335.950111][T25969] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 336.250853][T25997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.415312][T26012] veth8: entered promiscuous mode [ 336.420467][T26012] veth8: entered allmulticast mode [ 336.500677][T26015] lo speed is unknown, defaulting to 1000 [ 336.519823][T26009] loop4: detected capacity change from 0 to 8192 [ 336.602377][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 336.602394][ T29] audit: type=1326 audit(1362.598:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.677242][ T29] audit: type=1326 audit(1362.628:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.700498][ T29] audit: type=1326 audit(1362.638:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.723914][ T29] audit: type=1326 audit(1362.638:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.747125][ T29] audit: type=1326 audit(1362.638:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.770470][ T29] audit: type=1326 audit(1362.638:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.793625][ T29] audit: type=1326 audit(1362.638:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.816707][ T29] audit: type=1326 audit(1362.638:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.839811][ T29] audit: type=1326 audit(1362.638:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.862811][ T29] audit: type=1326 audit(1362.638:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26016 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 336.932666][T26024] bond3: entered allmulticast mode [ 336.938449][T26024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.975541][T26024] bond3: (slave ip6gretap1): making interface the new active one [ 336.983387][T26024] ip6gretap1: entered allmulticast mode [ 336.990829][T26024] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 337.186090][T26047] serio: Serial port ptm0 [ 337.258334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.438631][T26072] loop4: detected capacity change from 0 to 128 [ 337.475494][T26072] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.517189][T19423] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.007856][T26092] syz.3.8684: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 338.022631][T26092] CPU: 1 UID: 0 PID: 26092 Comm: syz.3.8684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 338.022659][T26092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.022677][T26092] Call Trace: [ 338.022689][T26092] [ 338.022699][T26092] __dump_stack+0x1d/0x30 [ 338.022729][T26092] dump_stack_lvl+0xe8/0x140 [ 338.022822][T26092] dump_stack+0x15/0x1b [ 338.022846][T26092] warn_alloc+0x12b/0x1a0 [ 338.022890][T26092] ? __rcu_read_unlock+0x4f/0x70 [ 338.022941][T26092] __vmalloc_node_range_noprof+0x9d/0xed0 [ 338.023027][T26092] ? __futex_wait+0x1fa/0x260 [ 338.023051][T26092] ? __pfx_futex_wake_mark+0x10/0x10 [ 338.023070][T26092] ? __rcu_read_unlock+0x4f/0x70 [ 338.023116][T26092] ? avc_has_perm_noaudit+0x1b1/0x200 [ 338.023142][T26092] ? should_fail_ex+0x30/0x280 [ 338.023255][T26092] ? xskq_create+0x36/0xe0 [ 338.023277][T26092] vmalloc_user_noprof+0x7d/0xb0 [ 338.023471][T26092] ? xskq_create+0x80/0xe0 [ 338.023496][T26092] xskq_create+0x80/0xe0 [ 338.023523][T26092] xsk_init_queue+0x95/0xf0 [ 338.023555][T26092] xsk_setsockopt+0x477/0x640 [ 338.023631][T26092] ? __pfx_xsk_setsockopt+0x10/0x10 [ 338.023709][T26092] __sys_setsockopt+0x184/0x200 [ 338.023801][T26092] __x64_sys_setsockopt+0x64/0x80 [ 338.023870][T26092] x64_sys_call+0x20ec/0x3000 [ 338.023892][T26092] do_syscall_64+0xd2/0x200 [ 338.023909][T26092] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 338.023940][T26092] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 338.024036][T26092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.024057][T26092] RIP: 0033:0x7f256f8aefc9 [ 338.024072][T26092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.024166][T26092] RSP: 002b:00007f256e317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.024185][T26092] RAX: ffffffffffffffda RBX: 00007f256fb05fa0 RCX: 00007f256f8aefc9 [ 338.024200][T26092] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 338.024213][T26092] RBP: 00007f256f931f91 R08: 0000000000000004 R09: 0000000000000000 [ 338.024254][T26092] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 338.024268][T26092] R13: 00007f256fb06038 R14: 00007f256fb05fa0 R15: 00007ffeb0575408 [ 338.024348][T26092] [ 338.024361][T26092] Mem-Info: [ 338.252776][T26092] active_anon:26215 inactive_anon:398 isolated_anon:0 [ 338.252776][T26092] active_file:23083 inactive_file:2629 isolated_file:0 [ 338.252776][T26092] unevictable:16902 dirty:248 writeback:1 [ 338.252776][T26092] slab_reclaimable:3997 slab_unreclaimable:115300 [ 338.252776][T26092] mapped:29080 shmem:22188 pagetables:1560 [ 338.252776][T26092] sec_pagetables:0 bounce:0 [ 338.252776][T26092] kernel_misc_reclaimable:0 [ 338.252776][T26092] free:1633881 free_pcp:66466 free_cma:0 [ 338.298864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.307044][T26092] Node 0 active_anon:104976kB inactive_anon:1592kB active_file:92332kB inactive_file:10516kB unevictable:67608kB isolated(anon):0kB isolated(file):0kB mapped:116320kB dirty:992kB writeback:4kB shmem:88752kB kernel_stack:4896kB pagetables:6240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.335234][T26092] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.364934][T26092] lowmem_reserve[]: 0 2881 7859 7859 [ 338.370299][T26092] Node 0 DMA32 free:2946640kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 338.401733][T26092] lowmem_reserve[]: 0 0 4978 4978 [ 338.406835][T26092] Node 0 Normal free:3573524kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105208kB inactive_anon:1592kB active_file:92332kB inactive_file:10516kB unevictable:67608kB writepending:996kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:261880kB local_pcp:84660kB free_cma:0kB [ 338.440744][T26092] lowmem_reserve[]: 0 0 0 0 [ 338.445374][T26092] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.458175][T26092] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946640kB [ 338.474585][T26092] Node 0 Normal: 17*4kB (UM) 26*8kB (UME) 42*16kB (UME) 49*32kB (UME) 37*64kB (UME) 200*128kB (UME) 358*256kB (UME) 253*512kB (UME) 54*1024kB (UME) 45*2048kB (UME) 775*4096kB (UM) = 3573524kB [ 338.493880][T26092] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 338.503227][T26092] 64832 total pagecache pages [ 338.507933][T26092] 79 pages in swap cache [ 338.512244][T26092] Free swap = 76kB [ 338.516082][T26092] Total swap = 124996kB [ 338.520302][T26092] 2097051 pages RAM [ 338.524140][T26092] 0 pages HighMem/MovableOnly [ 338.528864][T26092] 81083 pages reserved [ 339.905509][T26138] netlink: 'syz.2.8705': attribute type 21 has an invalid length. [ 339.921294][T26138] netlink: 'syz.2.8705': attribute type 1 has an invalid length. [ 339.929160][T26138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8705'. [ 340.357847][T26173] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8720'. [ 340.578721][T26189] netlink: 'syz.2.8727': attribute type 10 has an invalid length. [ 340.588580][T26189] team0: Port device dummy0 added [ 340.595460][T26189] netlink: 'syz.2.8727': attribute type 10 has an invalid length. [ 340.604202][T26189] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.630779][T26189] team0: Failed to send options change via netlink (err -105) [ 340.638561][T26189] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.647701][T26189] team0: Port device dummy0 removed [ 340.655579][T26189] .`: (slave dummy0): Enslaving as an active interface with an up link [ 340.736210][T26203] cgroup: Unknown subsys name 'cpuset' [ 341.415340][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8746'. [ 341.736955][T26260] netlink: 'syz.0.8753': attribute type 10 has an invalid length. [ 341.760759][T26260] bond2: (slave dummy0): Releasing active interface [ 341.771277][T26260] dummy0: left promiscuous mode [ 341.786083][T26260] netlink: 'syz.0.8753': attribute type 10 has an invalid length. [ 341.799688][T26260] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 341.940053][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 341.940068][ T29] audit: type=1326 audit(1367.938:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 341.989901][ T29] audit: type=1326 audit(1367.968:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.013190][ T29] audit: type=1326 audit(1367.968:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.028247][T26282] lo speed is unknown, defaulting to 1000 [ 342.036295][ T29] audit: type=1326 audit(1367.968:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.065050][ T29] audit: type=1326 audit(1367.968:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.088344][ T29] audit: type=1326 audit(1367.968:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.111485][ T29] audit: type=1326 audit(1367.968:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.134527][ T29] audit: type=1326 audit(1367.968:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.157835][ T29] audit: type=1326 audit(1367.968:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.180842][ T29] audit: type=1326 audit(1367.968:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.8759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39f46efc9 code=0x7ffc0000 [ 342.266943][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8767'. [ 342.276067][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8767'. [ 342.838333][ T3753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.849115][ T3753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.868805][ T3753] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 342.885861][ T3753] bond0 (unregistering): Released all slaves [ 342.916871][ T3753] bond1 (unregistering): (slave batadv1): Releasing active interface [ 342.939129][ T3753] bond1 (unregistering): Released all slaves [ 342.970336][ T3753] bond2 (unregistering): (slave veth9): Releasing active interface [ 342.990644][ T3753] bond2 (unregistering): Released all slaves [ 343.043006][ T3753] tipc: Disabling bearer [ 343.048043][ T3753] tipc: Left network mode [ 343.162238][T26339] lo speed is unknown, defaulting to 1000 [ 343.222478][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.248022][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.458875][T26339] chnl_net:caif_netlink_parms(): no params data found [ 343.514872][T26339] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.521995][T26339] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.529321][T26339] bridge_slave_0: entered allmulticast mode [ 343.535926][T26339] bridge_slave_0: entered promiscuous mode [ 343.542850][T26339] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.550073][T26339] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.557306][T26339] bridge_slave_1: entered allmulticast mode [ 343.563826][T26339] bridge_slave_1: entered promiscuous mode [ 343.583370][ T3753] IPVS: stop unused estimator thread 0... [ 343.583856][T26339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.599679][T26339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.619868][T26339] team0: Port device team_slave_0 added [ 343.626718][T26339] team0: Port device team_slave_1 added [ 343.642702][T26339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.649715][T26339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.675925][T26339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.695615][T26339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.702612][T26339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.728619][T26339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.754565][T26339] hsr_slave_0: entered promiscuous mode [ 343.760792][T26339] hsr_slave_1: entered promiscuous mode [ 343.766822][T26339] debugfs: 'hsr0' already exists in 'hsr' [ 343.772675][T26339] Cannot create hsr debugfs directory [ 343.836494][T26339] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 343.889183][T26339] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 343.939218][T26339] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 343.999048][T26339] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 344.063301][T26339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.072326][T26339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.081167][T26339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.089964][T26339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.123625][T26339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.135395][T26339] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.145899][ T3771] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.153084][ T3771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.163757][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.170918][ T3771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.230972][T26339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.334373][T26339] veth0_vlan: entered promiscuous mode [ 344.342294][T26339] veth1_vlan: entered promiscuous mode [ 344.357249][T26339] veth0_macvtap: entered promiscuous mode [ 344.364535][T26339] veth1_macvtap: entered promiscuous mode [ 344.375470][T26339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.386687][T26339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.397808][ T3771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.407125][ T3771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.417563][ T3771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.426631][ T3771] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.806263][T26426] netlink: 'syz.3.8801': attribute type 1 has an invalid length. [ 344.843548][T26426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.885772][T26426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.896912][T26426] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 344.922361][T26426] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 344.956683][T26442] tipc: Enabling of bearer rejected, failed to enable media [ 345.032119][T26454] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 345.066204][T26458] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8821'. [ 345.261376][T26477] netlink: 'syz.2.8830': attribute type 1 has an invalid length. [ 345.314652][T26477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.371286][T26487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.398894][T26487] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 345.439389][T26487] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 345.698856][T26526] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 345.786659][T26532] netlink: 'syz.5.8853': attribute type 1 has an invalid length. [ 346.108550][T26560] .`: (slave dummy0): Releasing backup interface [ 346.199335][T26560] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.401075][T26579] netlink: 'syz.5.8873': attribute type 7 has an invalid length. [ 346.408879][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8873'. [ 346.421139][T26580] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8872'. [ 346.486168][T26584] syzkaller0: entered promiscuous mode [ 346.491899][T26584] syzkaller0: entered allmulticast mode [ 347.064101][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 347.064118][ T29] audit: type=1326 audit(1373.058:8803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.121845][ T29] audit: type=1326 audit(1373.088:8804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.145209][ T29] audit: type=1326 audit(1373.088:8805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.168169][ T29] audit: type=1326 audit(1373.088:8806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.191179][ T29] audit: type=1326 audit(1373.088:8807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.214293][ T29] audit: type=1326 audit(1373.088:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.237273][ T29] audit: type=1326 audit(1373.088:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.260332][ T29] audit: type=1326 audit(1373.088:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.283301][ T29] audit: type=1326 audit(1373.088:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.306281][ T29] audit: type=1326 audit(1373.088:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26636 comm="syz.2.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 347.604543][T26674] netlink: 'syz.5.8924': attribute type 12 has an invalid length. [ 347.874105][T26712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8931'. [ 348.382517][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8942'. [ 348.523030][T26742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8943'. [ 348.552863][T26742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8943'. [ 348.689670][T26744] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.715199][T26746] tipc: Started in network mode [ 348.720149][T26746] tipc: Node identity ac14140f, cluster identity 4711 [ 348.739759][T26746] tipc: New replicast peer: 255.255.255.255 [ 348.745913][T26746] tipc: Enabled bearer , priority 10 [ 348.753007][T26744] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.772949][T26748] loop5: detected capacity change from 0 to 512 [ 348.789864][T26744] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.805493][T26748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.858855][T26744] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.890532][T26754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8947'. [ 348.908965][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8947'. [ 348.965862][ T3753] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.988965][ T3753] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.022544][ T3753] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.024747][T26339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.030991][ T3753] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.101993][T26768] netlink: 'syz.5.8952': attribute type 13 has an invalid length. [ 349.109920][T26768] netlink: 'syz.5.8952': attribute type 27 has an invalid length. [ 349.178274][T26776] loop4: detected capacity change from 0 to 512 [ 349.216008][T26776] EXT4-fs: Ignoring removed oldalloc option [ 349.228760][T26768] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.235983][T26768] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.240759][T26776] EXT4-fs (loop4): 1 truncate cleaned up [ 349.261727][T26781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.287322][T26776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.331099][T26768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.356883][T26768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.363722][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.429533][ T3768] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.438772][ T3768] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.451162][ T3768] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.471547][ T3768] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.536052][T26792] loop5: detected capacity change from 0 to 2048 [ 349.544889][T26792] ext4: Unknown parameter 'smackfsdef' [ 349.585425][T26792] vlan2: entered allmulticast mode [ 349.877691][T19971] tipc: Node number set to 2886997007 [ 350.110535][T26820] netlink: 'syz.3.8986': attribute type 1 has an invalid length. [ 350.124606][T26820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.139801][T26820] macvtap1: entered promiscuous mode [ 350.145156][T26820] bond5: entered promiscuous mode [ 350.150489][T26820] macvtap1: entered allmulticast mode [ 350.157645][T26820] bond5: entered allmulticast mode [ 350.163264][T26820] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 350.297590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.619195][T26869] __nla_validate_parse: 1 callbacks suppressed [ 350.619215][T26869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8994'. [ 350.635496][T26869] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8994'. [ 351.227004][T26878] netlink: 'syz.2.8997': attribute type 13 has an invalid length. [ 351.337542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.436537][T26883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8999'. [ 351.451122][ T3784] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.477813][ T3784] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.518879][ T3784] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.537704][ T3784] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.665382][T26891] loop5: detected capacity change from 0 to 4096 [ 351.705840][T26891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.777224][T26339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.967704][ T3753] Bluetooth: hci0: Frame reassembly failed (-84) [ 352.127786][T26920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9013'. [ 352.472270][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9030'. [ 352.584628][T26961] tipc: Enabling of bearer rejected, already enabled [ 352.725387][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 352.725405][ T29] audit: type=1326 audit(1378.718:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.787291][ T29] audit: type=1326 audit(1378.748:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.810417][ T29] audit: type=1326 audit(1378.748:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b8c0cd810 code=0x7ffc0000 [ 352.833527][ T29] audit: type=1326 audit(1378.748:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.856547][ T29] audit: type=1326 audit(1378.748:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.879699][ T29] audit: type=1326 audit(1378.748:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.903004][ T29] audit: type=1326 audit(1378.748:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.926067][ T29] audit: type=1326 audit(1378.748:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.949151][ T29] audit: type=1326 audit(1378.748:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 352.972312][ T29] audit: type=1326 audit(1378.748:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 353.077729][T26975] wg2: entered promiscuous mode [ 353.082642][T26975] wg2: entered allmulticast mode [ 353.242275][T26989] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9046'. [ 353.977517][ T3659] Bluetooth: hci0: command 0x1003 tx timeout [ 353.983662][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 354.281075][T27053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9072'. [ 354.493006][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9077'. [ 354.573229][T27068] lo speed is unknown, defaulting to 1000 [ 354.841938][T27086] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 355.195673][T27116] vlan0: entered allmulticast mode [ 355.460368][T27140] lo speed is unknown, defaulting to 1000 [ 355.771841][T27161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.831477][T27158] lo speed is unknown, defaulting to 1000 [ 356.829283][T27223] lo speed is unknown, defaulting to 1000 [ 357.471027][T27255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9153'. [ 357.550911][T27262] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 357.651671][T27268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9157'. [ 357.716027][T27272] rtc_cmos 00:00: Alarms can be up to one day in the future [ 357.765071][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 357.765086][ T29] audit: type=1326 audit(1383.759:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 357.794441][ T29] audit: type=1326 audit(1383.759:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 357.849579][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9161'. [ 357.897397][ T29] audit: type=1326 audit(1383.759:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 357.920553][ T29] audit: type=1326 audit(1383.759:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 357.943580][ T29] audit: type=1326 audit(1383.759:9059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 357.966708][ T29] audit: type=1326 audit(1383.759:9060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 357.989893][ T29] audit: type=1326 audit(1383.769:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 358.013013][ T29] audit: type=1326 audit(1383.769:9062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 358.036042][ T29] audit: type=1326 audit(1383.769:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 358.059186][ T29] audit: type=1326 audit(1383.769:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27274 comm="syz.2.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 358.122212][T27283] lo speed is unknown, defaulting to 1000 [ 358.331700][T27291] tipc: Enabling of bearer rejected, failed to enable media [ 358.333527][T19971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.348477][T19971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.356135][T19971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.363905][T19971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.371243][T19971] rtc rtc0: __rtc_set_alarm: err=-22 [ 358.885865][T27299] loop5: detected capacity change from 0 to 2048 [ 358.951130][T27299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.988775][T27299] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9168: bg 0: block 234: padding at end of block bitmap is not set [ 359.038543][T26339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.191786][T27314] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9173'. [ 359.593960][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9186'. [ 359.611481][T27345] ip6gre3: entered promiscuous mode [ 359.635621][T27349] netlink: 'syz.5.9188': attribute type 10 has an invalid length. [ 359.654161][T27349] team0: Port device dummy0 added [ 359.660753][T27351] netlink: 'syz.6.9191': attribute type 1 has an invalid length. [ 359.671210][T27349] netlink: 'syz.5.9188': attribute type 10 has an invalid length. [ 359.690062][T27351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.707211][T27349] team0: Port device dummy0 removed [ 359.714177][T27356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9192'. [ 359.724953][T27349] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 359.745564][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9192'. [ 359.750016][T27351] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 359.763201][T27351] bond3: (slave batadv1): making interface the new active one [ 359.772013][T27351] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 359.817314][T27364] lo speed is unknown, defaulting to 1000 [ 359.892870][T27369] tipc: Started in network mode [ 359.897959][T27369] tipc: Node identity a64cc618745d, cluster identity 4711 [ 359.905182][T27369] tipc: Enabled bearer , priority 0 [ 359.922141][T27369] tipc: Disabling bearer [ 360.016863][T27387] vlan0: entered allmulticast mode [ 360.104716][T27394] netlink: 'syz.2.9206': attribute type 10 has an invalid length. [ 360.113791][T27394] team0: Port device dummy0 added [ 360.128893][T27394] netlink: 'syz.2.9206': attribute type 10 has an invalid length. [ 360.140472][T27392] pim6reg1: entered promiscuous mode [ 360.145801][T27392] pim6reg1: entered allmulticast mode [ 360.190055][T27394] team0: Port device dummy0 removed [ 360.204211][T27394] .`: (slave dummy0): Enslaving as an active interface with an up link [ 360.255390][T27401] netlink: 'syz.2.9209': attribute type 1 has an invalid length. [ 360.275035][T27401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.293071][T27401] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 360.303129][T27401] bond3: (slave batadv1): making interface the new active one [ 360.312021][T27401] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 360.450724][T27422] loop4: detected capacity change from 0 to 512 [ 360.457658][T27422] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 360.468129][T27422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9216'. [ 360.771363][T27444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9223'. [ 360.783184][T27443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9226'. [ 360.966428][T27477] netlink: 'syz.6.9239': attribute type 7 has an invalid length. [ 360.979375][T27478] vlan0: entered allmulticast mode [ 361.498939][T27508] netlink: 'syz.3.9253': attribute type 10 has an invalid length. [ 361.535021][T27508] team0: Port device dummy0 added [ 361.547732][T27508] netlink: 'syz.3.9253': attribute type 10 has an invalid length. [ 361.585592][T27508] team0: Port device dummy0 removed [ 361.807187][T27537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.815286][T27537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.214386][T27561] netlink: 'syz.2.9276': attribute type 4 has an invalid length. [ 362.769196][T27613] __nla_validate_parse: 6 callbacks suppressed [ 362.769212][T27613] netlink: 87 bytes leftover after parsing attributes in process `gtp'. [ 362.784182][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 362.784197][ T29] audit: type=1326 audit(1388.779:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 362.830444][ T29] audit: type=1400 audit(1388.799:9429): avc: denied { ioctl } for pid=27614 comm="syz.4.9298" path="socket:[90112]" dev="sockfs" ino=90112 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 362.854794][ T29] audit: type=1326 audit(1388.809:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 362.877963][ T29] audit: type=1326 audit(1388.829:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 362.908879][ T29] audit: type=1326 audit(1388.899:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 362.932703][ T29] audit: type=1326 audit(1388.929:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 362.959257][ T29] audit: type=1326 audit(1388.959:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 362.998502][ T29] audit: type=1326 audit(1388.979:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 363.021603][ T29] audit: type=1326 audit(1388.989:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 363.049771][ T29] audit: type=1326 audit(1389.039:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27569 comm="syz.2.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b8c0cefc9 code=0x7ffc0000 [ 363.147851][T27634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9316'. [ 363.157855][T27634] IPVS: Unknown mcast interface: ipvlan1 [ 363.232787][T27640] lo speed is unknown, defaulting to 1000 [ 363.340378][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9309'. [ 363.381042][T27647] netlink: 236 bytes leftover after parsing attributes in process `syz.6.9309'. [ 363.589938][T27661] lo speed is unknown, defaulting to 1000 [ 363.840031][T27676] bridge: RTM_NEWNEIGH with invalid ether address [ 364.340417][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9330'. [ 364.358672][T27694] team2: entered promiscuous mode [ 364.363925][T27694] team2: entered allmulticast mode [ 364.369366][T27694] 8021q: adding VLAN 0 to HW filter on device team2 [ 364.669997][T27717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9338'. [ 364.689090][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9338'. [ 365.272380][T27749] validate_nla: 3 callbacks suppressed [ 365.272401][T27749] netlink: 'syz.5.9353': attribute type 7 has an invalid length. [ 365.285790][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9353'. [ 365.394668][T27758] netlink: 'syz.2.9356': attribute type 4 has an invalid length. [ 365.405294][T27758] netlink: 'syz.2.9356': attribute type 4 has an invalid length. [ 365.446902][T27762] pim6reg1: entered promiscuous mode [ 365.452348][T27762] pim6reg1: entered allmulticast mode [ 365.604715][T27775] loop4: detected capacity change from 0 to 256 [ 365.879275][T27790] netlink: 'syz.4.9372': attribute type 7 has an invalid length. [ 365.887100][T27790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9372'. [ 365.962722][T27792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9373'. [ 366.293586][T27796] geneve2: entered promiscuous mode [ 366.299046][T27796] geneve2: entered allmulticast mode [ 366.379994][T27798] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 366.451179][T27801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27801 comm=syz.2.9377 [ 366.615429][T27814] pimreg: entered allmulticast mode [ 366.624163][T27814] pimreg: left allmulticast mode [ 366.771340][T27821] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 366.931081][T27831] bridge0: port 3(batadv0) entered blocking state [ 366.937773][T27831] bridge0: port 3(batadv0) entered disabled state [ 366.944588][T27831] batadv0: entered allmulticast mode [ 366.950545][T27831] batadv0: entered promiscuous mode [ 367.037126][T27842] loop5: detected capacity change from 0 to 164 [ 367.047323][T27842] syz.5.9396: attempt to access beyond end of device [ 367.047323][T27842] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 367.061540][T27842] syz.5.9396: attempt to access beyond end of device [ 367.061540][T27842] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 367.436705][ T3743] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 367.446062][ T3743] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 368.061923][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 368.061942][ T29] audit: type=1326 audit(1394.059:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.110486][ T29] audit: type=1326 audit(1394.059:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.133632][ T29] audit: type=1326 audit(1394.099:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.156617][ T29] audit: type=1326 audit(1394.099:9747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.179626][ T29] audit: type=1326 audit(1394.099:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d4d7dd810 code=0x7ffc0000 [ 368.202750][ T29] audit: type=1326 audit(1394.099:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.225753][ T29] audit: type=1326 audit(1394.099:9750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.248705][ T29] audit: type=1326 audit(1394.099:9751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.271783][ T29] audit: type=1326 audit(1394.099:9752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0d4d7defc9 code=0x7ffc0000 [ 368.294999][ T29] audit: type=1326 audit(1394.099:9753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27880 comm="syz.5.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d4d7df003 code=0x7ffc0000 [ 368.669459][T27906] lo speed is unknown, defaulting to 1000 [ 369.352655][ T3425] IPVS: starting estimator thread 0... [ 369.446611][T27935] IPVS: using max 1920 ests per chain, 96000 per kthread [ 369.849862][ T3784] Bluetooth: hci0: Frame reassembly failed (-84) [ 370.304751][T27969] siw: device registration error -23 [ 370.577512][T27987] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 370.577512][T27987] program syz.5.9454 not setting count and/or reply_len properly [ 370.985536][T28024] wg2: entered promiscuous mode [ 370.990510][T28024] wg2: entered allmulticast mode [ 371.600529][T28051] __nla_validate_parse: 3 callbacks suppressed [ 371.600543][T28051] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9482'. [ 371.788137][T28062] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.9487'. [ 371.896404][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.947794][T28085] loop5: detected capacity change from 0 to 2048 [ 371.968941][T28085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.056436][T28096] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9497: bg 0: block 345: padding at end of block bitmap is not set [ 372.073184][T28096] EXT4-fs (loop5): Remounting filesystem read-only [ 372.081512][ T3743] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 372.352710][T26339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.558722][T28122] loop5: detected capacity change from 0 to 512 [ 372.565726][T28122] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 372.591870][T28120] lo speed is unknown, defaulting to 1000 [ 372.595898][T28122] loop5: detected capacity change from 0 to 2048 [ 372.633158][T28122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.822327][T26339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.035472][T28141] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9516'. [ 373.186373][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 373.186390][ T29] audit: type=1400 audit(1399.160:10095): avc: denied { bind } for pid=28144 comm="syz.4.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.211744][ T29] audit: type=1400 audit(1399.160:10096): avc: denied { listen } for pid=28144 comm="syz.4.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.231032][ T29] audit: type=1400 audit(1399.160:10097): avc: denied { write } for pid=28144 comm="syz.4.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.288696][ T29] audit: type=1400 audit(1399.190:10098): avc: denied { accept } for pid=28144 comm="syz.4.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.308072][ T29] audit: type=1400 audit(1399.190:10099): avc: denied { read } for pid=28144 comm="syz.4.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.327315][ T29] audit: type=1400 audit(1399.260:10100): avc: denied { mount } for pid=28153 comm="syz.5.9524" name="/" dev="configfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 373.349789][ T29] audit: type=1400 audit(1399.260:10101): avc: denied { search } for pid=28153 comm="syz.5.9524" name="/" dev="configfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.371685][ T29] audit: type=1400 audit(1399.260:10102): avc: denied { search } for pid=28153 comm="syz.5.9524" name="/" dev="configfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.393610][ T29] audit: type=1400 audit(1399.260:10103): avc: denied { read open } for pid=28153 comm="syz.5.9524" path="/" dev="configfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.415732][ T29] audit: type=1400 audit(1399.270:10104): avc: denied { create } for pid=28157 comm="syz.4.9526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.572080][T28175] loop4: detected capacity change from 0 to 1024 [ 373.596767][T28175] EXT4-fs: Ignoring removed bh option [ 373.602284][T28175] EXT4-fs: inline encryption not supported [ 373.618695][T28175] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.637157][T28178] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9536'. [ 373.694875][T28175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 373.704075][T28175] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.9533: lblock 2 mapped to illegal pblock 2 (length 1) [ 373.720411][T28175] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.9533: lblock 0 mapped to illegal pblock 48 (length 1) [ 373.784058][T28175] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9533: Failed to acquire dquot type 0 [ 373.796982][T28175] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 373.806676][T28175] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.9533: mark_inode_dirty error [ 373.821861][T28175] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 373.832682][T28175] EXT4-fs (loop4): 1 orphan inode deleted [ 373.840345][T28175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.856419][ T3743] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 373.889209][ T3743] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 0 [ 373.900832][T28175] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm syz.4.9533: lblock 1 mapped to illegal pblock 1 (length 1) [ 373.934907][T28202] netlink: 'syz.2.9543': attribute type 1 has an invalid length. [ 373.966461][T28202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.978075][T28202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9543'. [ 373.997565][T28202] bond4 (unregistering): Released all slaves [ 374.018423][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.036863][T19423] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 374.068616][T19423] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 374.091593][T19423] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 374.436655][T28263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9569'. [ 374.562101][T28273] lo speed is unknown, defaulting to 1000 [ 374.904819][T28308] bridge: RTM_NEWNEIGH with invalid ether address [ 375.040117][T28324] netlink: 'syz.4.9596': attribute type 30 has an invalid length. [ 375.555753][T28348] lo speed is unknown, defaulting to 1000 [ 375.585109][T28357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9610'. [ 375.686180][T28359] netlink: 'syz.6.9611': attribute type 1 has an invalid length. [ 375.719799][T28359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.740253][T28361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9611'. [ 375.829781][T28361] bond4 (unregistering): Released all slaves [ 376.080641][T28370] pim6reg1: entered promiscuous mode [ 376.086011][T28370] pim6reg1: entered allmulticast mode [ 376.338761][T28390] loop4: detected capacity change from 0 to 512 [ 376.345561][T28390] EXT4-fs: dax option not supported [ 376.927408][T28431] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9641'. [ 376.981282][T28436] vlan0: entered allmulticast mode [ 376.986543][T28436] dummy0: entered allmulticast mode [ 377.100503][T28441] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.9645'. [ 377.284162][T28447] loop4: detected capacity change from 0 to 512 [ 377.291350][T28447] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 377.311092][T28447] loop4: detected capacity change from 0 to 2048 [ 377.341854][T28447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.464835][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.320876][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 378.320892][ T29] audit: type=1400 audit(1404.310:10219): avc: denied { create } for pid=28508 comm="syz.6.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.358005][ T29] audit: type=1400 audit(1404.340:10220): avc: denied { bind } for pid=28508 comm="syz.6.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.391058][T28513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9672'. [ 378.411797][T28515] loop4: detected capacity change from 0 to 512 [ 378.434413][T28515] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.448542][T28515] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.9674: inode has both inline data and extents flags [ 378.462540][T28515] EXT4-fs (loop4): get root inode failed [ 378.468252][T28515] EXT4-fs (loop4): mount failed [ 378.478640][ T29] audit: type=1400 audit(1404.470:10221): avc: denied { ioctl } for pid=28523 comm="syz.3.9677" path="socket:[94190]" dev="sockfs" ino=94190 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.504433][T28524] bridge0: port 1(gretap0) entered blocking state [ 378.510931][T28524] bridge0: port 1(gretap0) entered disabled state [ 378.517782][T28524] gretap0: entered allmulticast mode [ 378.526920][T28524] gretap0: left allmulticast mode [ 378.532158][T28524] bridge0: port 1(gretap0) entered disabled state [ 378.650905][ T29] audit: type=1400 audit(1404.640:10222): avc: denied { create } for pid=28537 comm="syz.6.9684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 378.679358][ T29] audit: type=1400 audit(1404.640:10223): avc: denied { write } for pid=28537 comm="syz.6.9684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 379.017483][ T29] audit: type=1400 audit(1405.000:10224): avc: denied { write } for pid=28563 comm="syz.6.9696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 379.042176][T28559] loop5: detected capacity change from 0 to 4096 [ 379.088620][T28559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.104733][T28559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.120194][ T29] audit: type=1400 audit(1405.120:10225): avc: denied { add_name } for pid=28558 comm="syz.5.9693" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.141877][ T29] audit: type=1400 audit(1405.120:10226): avc: denied { create } for pid=28558 comm="syz.5.9693" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.187145][ T29] audit: type=1400 audit(1405.160:10227): avc: denied { read append open } for pid=28558 comm="syz.5.9693" path="/184/file0/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.211756][ T29] audit: type=1326 audit(1405.170:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28573 comm="syz.6.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd50efc9 code=0x7ffc0000 [ 379.440121][T26339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.587287][T28605] netlink: 'syz.5.9712': attribute type 1 has an invalid length. [ 379.627981][T28605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.638987][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9712'. [ 379.657852][T28612] bond1 (unregistering): Released all slaves [ 379.724220][T28622] bridge: RTM_NEWNEIGH with invalid ether address [ 379.738597][T28624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9721'. [ 379.892110][T28641] lo speed is unknown, defaulting to 1000 [ 379.903469][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9731'. [ 380.383919][T28688] tipc: Enabling of bearer rejected, already enabled [ 380.413977][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9750'. [ 380.424809][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9750'. [ 380.432426][T28695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9751'. [ 380.459238][T28695] team1: entered promiscuous mode [ 380.464353][T28695] team1: entered allmulticast mode [ 380.470243][T28695] 8021q: adding VLAN 0 to HW filter on device team1 [ 380.595305][T28712] loop4: detected capacity change from 0 to 1024 [ 380.607796][T28712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.128147][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.167676][T28739] loop4: detected capacity change from 0 to 1024 [ 381.185767][T28739] EXT4-fs: Ignoring removed orlov option [ 381.196962][T28739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.469067][T28739] ================================================================== [ 381.477218][T28739] BUG: KCSAN: data-race in filemap_read / filemap_read [ 381.484136][T28739] [ 381.486483][T28739] write to 0xffff888115a12ca8 of 8 bytes by task 28752 on cpu 1: [ 381.494217][T28739] filemap_read+0x974/0xa00 [ 381.498854][T28739] generic_file_read_iter+0x79/0x330 [ 381.504185][T28739] ext4_file_read_iter+0x1cc/0x290 [ 381.509314][T28739] copy_splice_read+0x442/0x660 [ 381.514184][T28739] splice_direct_to_actor+0x290/0x680 [ 381.519602][T28739] do_splice_direct+0xda/0x150 [ 381.524385][T28739] do_sendfile+0x380/0x650 [ 381.528842][T28739] __x64_sys_sendfile64+0x105/0x150 [ 381.534076][T28739] x64_sys_call+0x2bb4/0x3000 [ 381.538778][T28739] do_syscall_64+0xd2/0x200 [ 381.543301][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.549228][T28739] [ 381.551576][T28739] read to 0xffff888115a12ca8 of 8 bytes by task 28739 on cpu 0: [ 381.559229][T28739] filemap_read+0x6f/0xa00 [ 381.563685][T28739] generic_file_read_iter+0x79/0x330 [ 381.569007][T28739] ext4_file_read_iter+0x1cc/0x290 [ 381.574148][T28739] copy_splice_read+0x442/0x660 [ 381.579030][T28739] splice_direct_to_actor+0x290/0x680 [ 381.584500][T28739] do_splice_direct+0xda/0x150 [ 381.589377][T28739] do_sendfile+0x380/0x650 [ 381.593845][T28739] __x64_sys_sendfile64+0x105/0x150 [ 381.599070][T28739] x64_sys_call+0x2bb4/0x3000 [ 381.603770][T28739] do_syscall_64+0xd2/0x200 [ 381.608288][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.614207][T28739] [ 381.616545][T28739] value changed: 0x00000000000002f7 -> 0x00000000000002f8 [ 381.623668][T28739] [ 381.626006][T28739] Reported by Kernel Concurrency Sanitizer on: [ 381.632225][T28739] CPU: 0 UID: 0 PID: 28739 Comm: syz.4.9767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.642141][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.652224][T28739] ================================================================== [ 381.698937][T19423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.970479][T28750] syz.3.9783 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 381.984659][T28750] CPU: 1 UID: 0 PID: 28750 Comm: syz.3.9783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.984691][T28750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.984768][T28750] Call Trace: [ 381.984778][T28750] [ 381.984805][T28750] __dump_stack+0x1d/0x30 [ 381.984827][T28750] dump_stack_lvl+0xe8/0x140 [ 381.984845][T28750] dump_stack+0x15/0x1b [ 381.984862][T28750] dump_header+0x81/0x220 [ 381.984917][T28750] oom_kill_process+0x342/0x400 [ 381.984945][T28750] out_of_memory+0x979/0xb80 [ 381.984988][T28750] try_charge_memcg+0x610/0xa10 [ 381.985018][T28750] obj_cgroup_charge_pages+0xa6/0x150 [ 381.985040][T28750] __memcg_kmem_charge_page+0x9f/0x170 [ 381.985062][T28750] __alloc_frozen_pages_noprof+0x188/0x360 [ 381.985124][T28750] alloc_pages_mpol+0xb3/0x260 [ 381.985145][T28750] alloc_pages_noprof+0x90/0x130 [ 381.985166][T28750] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 381.985225][T28750] __kvmalloc_node_noprof+0x483/0x670 [ 381.985256][T28750] ? ip_set_alloc+0x24/0x30 [ 381.985321][T28750] ? ip_set_alloc+0x24/0x30 [ 381.985348][T28750] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 381.985377][T28750] ip_set_alloc+0x24/0x30 [ 381.985454][T28750] hash_netiface_create+0x282/0x740 [ 381.985487][T28750] ? __pfx_hash_netiface_create+0x10/0x10 [ 381.985610][T28750] ip_set_create+0x3cc/0x970 [ 381.985677][T28750] ? __nla_parse+0x40/0x60 [ 381.985716][T28750] nfnetlink_rcv_msg+0x4c6/0x590 [ 381.985777][T28750] netlink_rcv_skb+0x123/0x220 [ 381.985883][T28750] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.985915][T28750] nfnetlink_rcv+0x167/0x16c0 [ 381.985941][T28750] ? kmem_cache_free+0xe4/0x3d0 [ 381.986028][T28750] ? __kfree_skb+0x109/0x150 [ 381.986054][T28750] ? nlmon_xmit+0x4f/0x60 [ 381.986075][T28750] ? consume_skb+0x49/0x150 [ 381.986116][T28750] ? nlmon_xmit+0x4f/0x60 [ 381.986136][T28750] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 381.986168][T28750] ? __dev_queue_xmit+0x1200/0x2000 [ 381.986197][T28750] ? __dev_queue_xmit+0x182/0x2000 [ 381.986261][T28750] ? ref_tracker_free+0x37d/0x3e0 [ 381.986312][T28750] ? __netlink_deliver_tap+0x4dc/0x500 [ 381.986355][T28750] netlink_unicast+0x5c0/0x690 [ 381.986427][T28750] netlink_sendmsg+0x58b/0x6b0 [ 381.986462][T28750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.986582][T28750] __sock_sendmsg+0x145/0x180 [ 381.986603][T28750] ____sys_sendmsg+0x31e/0x4e0 [ 381.986670][T28750] ___sys_sendmsg+0x17b/0x1d0 [ 381.986736][T28750] __x64_sys_sendmsg+0xd4/0x160 [ 381.986784][T28750] x64_sys_call+0x191e/0x3000 [ 381.986875][T28750] do_syscall_64+0xd2/0x200 [ 381.986892][T28750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.986918][T28750] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 381.987019][T28750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.987039][T28750] RIP: 0033:0x7f256f8aefc9 [ 381.987052][T28750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.987067][T28750] RSP: 002b:00007f256e317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.987084][T28750] RAX: ffffffffffffffda RBX: 00007f256fb05fa0 RCX: 00007f256f8aefc9 [ 381.987095][T28750] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 381.987167][T28750] RBP: 00007f256f931f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.987177][T28750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.987187][T28750] R13: 00007f256fb06038 R14: 00007f256fb05fa0 R15: 00007ffeb0575408 [ 381.987204][T28750] [ 382.327299][T28750] memory: usage 307200kB, limit 307200kB, failcnt 620 [ 382.334089][T28750] memory+swap: usage 363024kB, limit 9007199254740988kB, failcnt 0 [ 382.342066][T28750] kmem: usage 261756kB, limit 9007199254740988kB, failcnt 0 [ 382.349412][T28750] Memory cgroup stats for /syz3: [ 382.351796][T28750] cache 45858816 [ 382.360393][T28750] rss 405504 [ 382.363613][T28750] shmem 45858816 [ 382.367225][T28750] mapped_file 0 [ 382.370693][T28750] dirty 0 [ 382.373634][T28750] writeback 0 [ 382.377205][T28750] workingset_refault_anon 4423 [ 382.381984][T28750] workingset_refault_file 599 [ 382.386753][T28750] swap 57163776 [ 382.390235][T28750] swapcached 253952 [ 382.394051][T28750] pgpgin 488714 [ 382.397642][T28750] pgpgout 477353 [ 382.401229][T28750] pgfault 547129 [ 382.404785][T28750] pgmajfault 667 [ 382.408350][T28750] inactive_anon 15179776 [ 382.412775][T28750] active_anon 31338496 [ 382.416901][T28750] inactive_file 0 [ 382.420558][T28750] active_file 16384 [ 382.424362][T28750] unevictable 0 [ 382.427839][T28750] hierarchical_memory_limit 314572800 [ 382.433243][T28750] hierarchical_memsw_limit 9223372036854771712 [ 382.439425][T28750] total_cache 45858816 [ 382.443549][T28750] total_rss 405504 [ 382.447475][T28750] total_shmem 45858816 [ 382.451554][T28750] total_mapped_file 0 [ 382.455537][T28750] total_dirty 0 [ 382.459145][T28750] total_writeback 0 [ 382.463120][T28750] total_workingset_refault_anon 4423 [ 382.468528][T28750] total_workingset_refault_file 599 [ 382.473735][T28750] total_swap 57163776 [ 382.477760][T28750] total_swapcached 253952 [ 382.482111][T28750] total_pgpgin 488714 [ 382.486129][T28750] total_pgpgout 477353 [ 382.490205][T28750] total_pgfault 547129 [ 382.494270][T28750] total_pgmajfault 667 [ 382.498481][T28750] total_inactive_anon 15179776 [ 382.503263][T28750] total_active_anon 31338496 [ 382.507876][T28750] total_inactive_file 0 [ 382.512031][T28750] total_active_file 16384 [ 382.516375][T28750] total_unevictable 0 [ 382.520378][T28750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6994,pid=21640,uid=0 [ 382.535127][T28750] Memory cgroup out of memory: Killed process 21640 (syz.3.6994) total-vm:95872kB, anon-rss:1304kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 382.552889][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 382.563926][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 382.563953][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.563967][ T3320] Call Trace: [ 382.563975][ T3320] [ 382.563985][ T3320] __dump_stack+0x1d/0x30 [ 382.564079][ T3320] dump_stack_lvl+0xe8/0x140 [ 382.564100][ T3320] dump_stack+0x15/0x1b [ 382.564119][ T3320] dump_header+0x81/0x220 [ 382.564141][ T3320] oom_kill_process+0x342/0x400 [ 382.564219][ T3320] out_of_memory+0x979/0xb80 [ 382.564251][ T3320] try_charge_memcg+0x610/0xa10 [ 382.564293][ T3320] charge_memcg+0x51/0xc0 [ 382.564322][ T3320] __mem_cgroup_charge+0x28/0xb0 [ 382.564426][ T3320] filemap_add_folio+0x111/0x360 [ 382.564514][ T3320] __filemap_get_folio+0x31e/0x650 [ 382.564624][ T3320] filemap_fault+0x447/0xb60 [ 382.564649][ T3320] __do_fault+0xbc/0x200 [ 382.564673][ T3320] handle_mm_fault+0xf78/0x2be0 [ 382.564765][ T3320] ? vma_start_read+0x141/0x1f0 [ 382.564800][ T3320] do_user_addr_fault+0x630/0x1080 [ 382.564824][ T3320] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 382.564924][ T3320] exc_page_fault+0x62/0xa0 [ 382.565003][ T3320] asm_exc_page_fault+0x26/0x30 [ 382.565027][ T3320] RIP: 0033:0x7f256f785ed4 [ 382.565045][ T3320] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f7 ea 00 48 01 d1 [ 382.565063][ T3320] RSP: 002b:00007ffeb0575790 EFLAGS: 00010206 [ 382.565082][ T3320] RAX: 0000001b33c24000 RBX: 00000000000010a8 RCX: 000000000005d048 [ 382.565162][ T3320] RDX: 000000000edfe4e1 RSI: 00007ffeb0575820 RDI: 0000000000000001 [ 382.565198][ T3320] RBP: 00007ffeb05757cc R08: 0000000038bdf68e R09: 7fffffffffffffff [ 382.565214][ T3320] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 382.565230][ T3320] R13: 00000000000927c0 R14: 000000000005d349 R15: 00007ffeb0575820 [ 382.565254][ T3320] [ 382.565262][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 694 [ 382.762491][ T3320] memory+swap: usage 363024kB, limit 9007199254740988kB, failcnt 0 [ 382.770455][ T3320] kmem: usage 261928kB, limit 9007199254740988kB, failcnt 0 [ 382.777799][ T3320] Memory cgroup stats for /syz3: [ 382.780431][ T3320] cache 45858816 [ 382.788998][ T3320] rss 212992 [ 382.792221][ T3320] shmem 45858816 [ 382.795860][ T3320] mapped_file 0 [ 382.799424][ T3320] dirty 0 [ 382.802491][ T3320] writeback 0 [ 382.805806][ T3320] workingset_refault_anon 4423 [ 382.810602][ T3320] workingset_refault_file 599 [ 382.815298][ T3320] swap 57163776 [ 382.818905][ T3320] swapcached 253952 [ 382.822720][ T3320] pgpgin 488714 [ 382.826337][ T3320] pgpgout 477400 [ 382.830026][ T3320] pgfault 547131 [ 382.833578][ T3320] pgmajfault 668 [ 382.837160][ T3320] inactive_anon 14987264 [ 382.841404][ T3320] active_anon 31338496 [ 382.845534][ T3320] inactive_file 0 [ 382.849204][ T3320] active_file 16384 [ 382.853015][ T3320] unevictable 0 [ 382.856523][ T3320] hierarchical_memory_limit 314572800 [ 382.861913][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 382.868174][ T3320] total_cache 45858816 [ 382.872247][ T3320] total_rss 212992 [ 382.875991][ T3320] total_shmem 45858816 [ 382.880068][ T3320] total_mapped_file 0 [ 382.884120][ T3320] total_dirty 0 [ 382.887783][ T3320] total_writeback 0 [ 382.891594][ T3320] total_workingset_refault_anon 4423 [ 382.896990][ T3320] total_workingset_refault_file 599 [ 382.902187][ T3320] total_swap 57163776 [ 382.906211][ T3320] total_swapcached 253952 [ 382.910537][ T3320] total_pgpgin 488714 [ 382.914519][ T3320] total_pgpgout 477400 [ 382.918614][ T3320] total_pgfault 547131 [ 382.922771][ T3320] total_pgmajfault 668 [ 382.926864][ T3320] total_inactive_anon 14987264 [ 382.931634][ T3320] total_active_anon 31338496 [ 382.936291][ T3320] total_inactive_file 0 [ 382.940500][ T3320] total_active_file 16384 [ 382.944830][ T3320] total_unevictable 0 [ 382.948868][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1103,pid=6629,uid=0 [ 382.963594][ T3320] Memory cgroup out of memory: Killed process 6629 (syz.3.1103) total-vm:95872kB, anon-rss:1144kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000