last executing test programs: 4m10.38586846s ago: executing program 32 (id=443): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0b45000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) ioctl$VT_DISALLOCATE(r0, 0x5608) 3m47.673385855s ago: executing program 33 (id=1104): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f0000000500)) 3m46.284893756s ago: executing program 34 (id=1135): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 3m14.657838973s ago: executing program 3 (id=2018): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x5, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810d8, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 3m14.633444353s ago: executing program 3 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3m14.588912614s ago: executing program 3 (id=2024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 3m14.540264955s ago: executing program 3 (id=2028): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000280)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) 3m14.14557375s ago: executing program 3 (id=2040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) 3m13.556930939s ago: executing program 3 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000380)) 3m13.51873801s ago: executing program 35 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000380)) 3m3.937603531s ago: executing program 2 (id=2399): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3m3.890211282s ago: executing program 2 (id=2402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 3m3.779700654s ago: executing program 2 (id=2408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r2, 0x0, 0x0, 0x0) 3m3.709228685s ago: executing program 2 (id=2412): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 3m3.670771785s ago: executing program 2 (id=2414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x40000000000}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 3m3.404271649s ago: executing program 2 (id=2424): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 3m3.383395s ago: executing program 36 (id=2424): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 2m45.488173164s ago: executing program 8 (id=3062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m45.417386136s ago: executing program 8 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@delchain={0x24, 0x2e, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xfff3, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 2m45.384871496s ago: executing program 8 (id=3066): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0x0, r0, 0x0}]) 2m45.262557788s ago: executing program 8 (id=3071): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 2m45.189159679s ago: executing program 8 (id=3074): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xe, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0) 2m44.873211643s ago: executing program 8 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m44.873057123s ago: executing program 37 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m25.119668115s ago: executing program 1 (id=3718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x4000000000000000}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 2m25.095187575s ago: executing program 1 (id=3720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) 2m25.069173166s ago: executing program 1 (id=3722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 2m25.018345017s ago: executing program 1 (id=3723): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m24.997449027s ago: executing program 1 (id=3725): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x4}, &(0x7f0000000200)=0x90) 2m24.964405988s ago: executing program 1 (id=3727): socket(0x1e, 0x4, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m24.939884638s ago: executing program 38 (id=3727): socket(0x1e, 0x4, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m39.4676673s ago: executing program 9 (id=4961): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = dup(r0) bind$unix(r1, &(0x7f0000000240)=@abs={0xa, 0x2, 0x200000}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1m39.44843147s ago: executing program 9 (id=4963): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x40, 0x40, 0x89, 0x0, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r1], 0x1) 1m39.425601161s ago: executing program 9 (id=4964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m39.40450547s ago: executing program 9 (id=4966): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, 0x0) 1m39.181161474s ago: executing program 9 (id=4970): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r0) 1m38.905125508s ago: executing program 9 (id=4977): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x8000004) r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1m38.884387998s ago: executing program 39 (id=4977): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x8000004) r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.529326327s ago: executing program 7 (id=7019): set_mempolicy(0x3, 0x0, 0xa) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffa8) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x115042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c30, 0x0, 0x3) 1.437414498s ago: executing program 4 (id=7020): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x20000}], 0x1, 0x45833af92e4b39ff, 0x0) 1.389027839s ago: executing program 6 (id=7021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1.338979569s ago: executing program 6 (id=7022): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)='X', 0x1}, {&(0x7f00000007c0)="b9", 0x1}, {&(0x7f0000000340)='J', 0x1}, {&(0x7f0000000940)='Q', 0x1}, {&(0x7f0000000a40)="0e", 0x1}, {&(0x7f0000000b40)='\\', 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000700)=';', 0x1}, {&(0x7f0000000c00)="7f", 0x1}, {&(0x7f0000000cc0)="c7", 0x1}, {&(0x7f0000000880)="f9", 0x1}, {&(0x7f0000000d80)='X', 0x1}, {&(0x7f0000000680)='G', 0x1}, {&(0x7f0000000e40)='D', 0x1}, {&(0x7f0000000e80)="c6", 0x1}, {&(0x7f0000000ec0)='.', 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)="cf", 0x1}, {&(0x7f0000001180)="cd", 0x1}], 0x2}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.269091081s ago: executing program 6 (id=7023): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) 1.267592021s ago: executing program 7 (id=7024): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x100, 0x0, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.133001963s ago: executing program 4 (id=7026): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) read(r1, &(0x7f0000000e00)=""/4096, 0x1000) 1.118970113s ago: executing program 6 (id=7028): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x5, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.118321793s ago: executing program 7 (id=7029): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1.087489383s ago: executing program 7 (id=7030): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 882.654346ms ago: executing program 0 (id=7032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 823.100897ms ago: executing program 0 (id=7033): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 802.789038ms ago: executing program 7 (id=7034): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x69) close(r0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 784.255418ms ago: executing program 0 (id=7035): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 770.488988ms ago: executing program 6 (id=7037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 694.776789ms ago: executing program 0 (id=7040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 675.086809ms ago: executing program 6 (id=7041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 663.25451ms ago: executing program 7 (id=7043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 596.159181ms ago: executing program 0 (id=7044): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 595.374851ms ago: executing program 5 (id=7045): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2", 0x1}], 0x1, 0xc) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x284}, 0x1, 0x0, 0x0, 0x4800}, 0x4004001) 594.809151ms ago: executing program 5 (id=7046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2, 0x3, 0x100000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) 459.926773ms ago: executing program 5 (id=7047): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) close(r2) 437.000653ms ago: executing program 5 (id=7048): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 376.865564ms ago: executing program 0 (id=7049): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0x10000002, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0/file0'}, 0x11) close_range(r0, r1, 0x0) 376.438404ms ago: executing program 40 (id=7049): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0x10000002, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bff200010074", "e2266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0/file0'}, 0x11) close_range(r0, r1, 0x0) 376.005934ms ago: executing program 5 (id=7051): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 357.319844ms ago: executing program 5 (id=7052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x100, 0x0, 0x1dd}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 348.454754ms ago: executing program 4 (id=7053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 212.979706ms ago: executing program 4 (id=7054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x27}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 68.371559ms ago: executing program 4 (id=7055): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 0s ago: executing program 4 (id=7056): clock_adjtime(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd26, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x8c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa}}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x1, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x4, 0x1000, 0x7, 0xd443d0e8}, {0xfffffffc, 0x5, 0x5127, 0x800}, {0x4, 0x5d14, 0x7f, 0x72}, {0x80, 0x3, 0x2, 0x1e0}, {0x7, 0x0, 0xfffffff0, 0xfffffffe}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0xb8}}, 0x24040084) kernel console output (not intermixed with test programs): ss `syz.5.5368'. [ 220.010865][T16674] netlink: 'syz.0.5367': attribute type 4 has an invalid length. [ 220.065115][T16681] wg2: entered promiscuous mode [ 220.071086][T16681] wg2: entered allmulticast mode [ 220.204203][T16697] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.214153][T16697] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.224045][T16697] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.234503][T16697] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.247403][T16697] vxlan0: entered promiscuous mode [ 220.284274][T16701] lo speed is unknown, defaulting to 1000 [ 221.084704][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 221.084722][ T29] audit: type=1326 audit(230.052:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.129476][ T29] audit: type=1326 audit(230.052:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.154434][ T29] audit: type=1326 audit(230.052:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.180615][ T29] audit: type=1326 audit(230.052:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.204043][ T29] audit: type=1326 audit(230.052:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.228340][ T29] audit: type=1326 audit(230.052:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.253278][ T29] audit: type=1326 audit(230.052:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.276696][ T29] audit: type=1326 audit(230.052:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.300479][ T29] audit: type=1326 audit(230.052:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.325630][ T29] audit: type=1326 audit(230.052:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.4.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 221.579449][T16760] IPVS: Error connecting to the multicast addr [ 221.715770][T16765] loop0: detected capacity change from 0 to 256 [ 221.724178][T16765] vfat: Unknown parameter 'shortname' [ 222.583006][T16790] @ÿ: renamed from bond_slave_0 (while UP) [ 223.015810][T16805] loop0: detected capacity change from 0 to 512 [ 223.037085][T16805] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 223.051582][T16777] syz.7.5408 (16777) used greatest stack depth: 6040 bytes left [ 223.115398][T16814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=16814 comm=syz.0.5419 [ 223.161395][T16818] __nla_validate_parse: 4 callbacks suppressed [ 223.161502][T16818] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5423'. [ 223.219517][T16824] netlink: 'syz.4.5426': attribute type 1 has an invalid length. [ 223.260317][T16824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.281822][T16824] vlan2: entered allmulticast mode [ 223.287192][T16824] bond1: entered allmulticast mode [ 223.408663][T16836] loop4: detected capacity change from 0 to 512 [ 223.459593][T16836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.684112][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.079168][T16856] loop0: detected capacity change from 0 to 512 [ 224.096628][T16856] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.124584][T16856] EXT4-fs (loop0): 1 truncate cleaned up [ 224.141211][T16856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.308833][T16864] loop4: detected capacity change from 0 to 512 [ 224.355188][T16864] EXT4-fs (loop4): 1 orphan inode deleted [ 224.361824][T16864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.374800][ T8774] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:69: Failed to release dquot type 1 [ 224.418225][T16864] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 224.463305][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.677123][T16883] netlink: 'syz.4.5447': attribute type 1 has an invalid length. [ 224.692866][T16883] bond2: entered promiscuous mode [ 224.698918][T16883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.713620][T16883] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5447'. [ 224.726801][T16883] batadv1: entered promiscuous mode [ 224.732708][T16883] batadv1: entered allmulticast mode [ 224.740035][T16883] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 224.749165][T16883] bond2: (slave batadv1): making interface the new active one [ 224.759222][T16883] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 224.773995][T16889] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5447'. [ 224.788685][T16889] batadv2: entered promiscuous mode [ 224.795576][T16889] batadv2: entered allmulticast mode [ 224.796840][T16888] netlink: 'syz.6.5448': attribute type 13 has an invalid length. [ 224.809985][T16889] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 224.821403][T16889] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 224.888107][T16892] netlink: 'syz.4.5449': attribute type 10 has an invalid length. [ 224.904512][T16892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 225.101988][T16903] sd 0:0:1:0: device reset [ 225.140060][T16907] xt_connbytes: Forcing CT accounting to be enabled [ 225.147737][T16907] Cannot find set identified by id 0 to match [ 225.194718][T16910] loop7: detected capacity change from 0 to 2048 [ 225.214255][T16910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.234991][T16913] lo speed is unknown, defaulting to 1000 [ 225.251238][T16910] Invalid ELF header magic: != ELF [ 225.328213][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.363943][T16917] netlink: 'syz.7.5460': attribute type 13 has an invalid length. [ 225.432725][T16920] netlink: 'syz.5.5461': attribute type 1 has an invalid length. [ 225.474004][T16921] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5461'. [ 225.522414][T16922] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5461'. [ 226.355717][T16931] netlink: 'syz.6.5465': attribute type 1 has an invalid length. [ 226.823291][T16917] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.832175][T16917] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.840943][T16917] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.849633][T16917] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.889980][T16917] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.898838][T16917] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.907533][T16917] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.916171][T16917] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.969817][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.047552][T16939] loop4: detected capacity change from 0 to 736 [ 227.055691][T16939] iso9660: Unknown parameter '§ÐQþ{Uº²a×ÓNÉDÙÂ?»sæM00000000000000000000' [ 227.080066][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 227.080118][ T29] audit: type=1326 audit(236.340:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.112046][ T29] audit: type=1326 audit(236.340:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.140404][ T29] audit: type=1326 audit(236.340:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.167140][ T29] audit: type=1326 audit(236.340:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.192791][ T29] audit: type=1326 audit(236.340:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.216914][ T29] audit: type=1326 audit(236.340:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.241880][ T29] audit: type=1326 audit(236.340:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.266353][ T29] audit: type=1326 audit(236.340:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.290396][ T29] audit: type=1326 audit(236.340:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.315347][ T29] audit: type=1326 audit(236.340:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 227.390360][T16920] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 227.402614][T16921] batadv0: entered promiscuous mode [ 227.416912][T16921] batadv0: entered allmulticast mode [ 227.442468][T16952] netlink: 'syz.7.5471': attribute type 1 has an invalid length. [ 227.457100][T16922] batadv0: entered promiscuous mode [ 227.462811][T16922] batadv0: entered allmulticast mode [ 227.487273][ T6123] : Port: 1 Link DOWN [ 227.491981][T16931] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 227.520962][T16952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.559345][T16958] bond4: (slave gretap1): making interface the new active one [ 227.574773][T16958] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 227.614900][T16963] vlan2: entered allmulticast mode [ 227.620181][T16963] bond4: entered allmulticast mode [ 227.625473][T16963] gretap1: entered allmulticast mode [ 227.688459][T16963] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 228.031898][T16981] lo speed is unknown, defaulting to 1000 [ 228.107823][T16985] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5484'. [ 228.136017][T16985] netlink: zone id is out of range [ 228.144697][T16985] netlink: zone id is out of range [ 228.150018][T16985] netlink: zone id is out of range [ 228.156017][T16985] netlink: zone id is out of range [ 228.161222][T16985] netlink: zone id is out of range [ 228.166402][T16985] netlink: zone id is out of range [ 228.206901][T16985] netlink: zone id is out of range [ 228.219487][T16985] netlink: del zone limit has 8 unknown bytes [ 228.386371][T17001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5490'. [ 228.951538][T17026] lo speed is unknown, defaulting to 1000 [ 229.135204][T17035] loop4: detected capacity change from 0 to 1024 [ 229.149662][T17035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.159914][T17035] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.178099][T17035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 229.195339][T17035] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5503: lblock 2 mapped to illegal pblock 2 (length 1) [ 229.216238][T17035] EXT4-fs (loop4): Remounting filesystem read-only [ 229.224937][T17035] EXT4-fs (loop4): 1 orphan inode deleted [ 229.231894][T17035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.419297][T17040] loop0: detected capacity change from 0 to 8192 [ 229.789434][T17064] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.5514'. [ 229.941062][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.190347][T17074] sch_fq: defrate 2048 ignored. [ 230.237448][T17087] macvlan1: entered promiscuous mode [ 230.252363][T17087] ipvlan0: entered promiscuous mode [ 230.305447][T17087] ipvlan0: left promiscuous mode [ 230.315053][T17087] macvlan1: left promiscuous mode [ 230.324585][T17090] netlink: 'syz.4.5525': attribute type 1 has an invalid length. [ 230.366167][T17090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.400255][T17092] bond3: (slave gretap1): making interface the new active one [ 230.422331][T17092] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 230.455713][T17090] vlan2: entered allmulticast mode [ 230.461144][T17090] bond3: entered allmulticast mode [ 230.466559][T17090] gretap1: entered allmulticast mode [ 230.472705][T17090] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 230.652744][T17107] loop4: detected capacity change from 0 to 512 [ 230.659795][T17107] journal_path: Non-blockdev passed as './bus' [ 230.666007][T17107] EXT4-fs: error: could not find journal device path [ 230.723115][T17113] loop7: detected capacity change from 0 to 512 [ 230.732263][T17113] EXT4-fs: Ignoring removed bh option [ 230.744443][T17113] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.754320][T17113] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 230.766066][T17113] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 230.776926][T17113] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 230.785443][T17113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.837599][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.884800][T17121] loop4: detected capacity change from 0 to 512 [ 230.895148][T17121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.908090][T17121] EXT4-fs (loop4): 1 truncate cleaned up [ 230.914397][T17121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.960037][T17125] loop7: detected capacity change from 0 to 128 [ 231.026032][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.051887][T17127] netlink: 'syz.5.5540': attribute type 9 has an invalid length. [ 231.060115][T17127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5540'. [ 231.149721][T17130] loop4: detected capacity change from 0 to 8192 [ 231.163628][T17130] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.238617][T17142] loop7: detected capacity change from 0 to 2048 [ 231.271512][T17142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.330932][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5548'. [ 231.340635][T17148] hsr_slave_0: left promiscuous mode [ 231.341946][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.356256][T17148] hsr_slave_1: left promiscuous mode [ 231.531462][T17161] lo speed is unknown, defaulting to 1000 [ 231.620683][T17169] loop4: detected capacity change from 0 to 2048 [ 231.664194][T17169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.753425][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.971015][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5566'. [ 232.037990][T17193] xfrm1: entered promiscuous mode [ 232.043177][T17193] xfrm1: entered allmulticast mode [ 232.393037][T17224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=17224 comm=syz.5.5576 [ 232.483988][ T29] kauditd_printk_skb: 1054 callbacks suppressed [ 232.484006][ T29] audit: type=1326 audit(242.020:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 232.530719][ T29] audit: type=1326 audit(242.020:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 232.554203][ T29] audit: type=1326 audit(242.041:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 232.577590][ T29] audit: type=1326 audit(242.041:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e0139e963 code=0x7ffc0000 [ 232.600532][ T29] audit: type=1326 audit(242.062:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e0139d3df code=0x7ffc0000 [ 232.624557][ T29] audit: type=1326 audit(242.073:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4e0139e9b7 code=0x7ffc0000 [ 232.648329][ T29] audit: type=1326 audit(242.104:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e0139d290 code=0x7ffc0000 [ 232.671904][ T29] audit: type=1326 audit(242.104:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e0139d58a code=0x7ffc0000 [ 232.695159][ T29] audit: type=1326 audit(242.104:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 232.719043][ T29] audit: type=1326 audit(242.125:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 232.776113][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5585'. [ 232.864396][T17249] loop0: detected capacity change from 0 to 512 [ 232.888762][T17251] netlink: 'syz.6.5589': attribute type 29 has an invalid length. [ 232.901887][T17251] netlink: 'syz.6.5589': attribute type 29 has an invalid length. [ 232.902118][T17249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.924234][T17251] netlink: 'syz.6.5589': attribute type 29 has an invalid length. [ 232.946365][T17251] netlink: 'syz.6.5589': attribute type 29 has an invalid length. [ 232.980090][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.026916][T17265] loop4: detected capacity change from 0 to 512 [ 233.038051][T17265] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.050211][T17265] EXT4-fs (loop4): 1 truncate cleaned up [ 233.056644][T17265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.106217][T17271] netlink: 'syz.0.5597': attribute type 12 has an invalid length. [ 233.164174][T17278] loop7: detected capacity change from 0 to 1024 [ 233.189857][T17278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.212929][T17278] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 233.226462][T17278] JBD2: no valid journal superblock found [ 233.232453][T17278] EXT4-fs (loop7): Could not load journal inode [ 233.451802][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5612'. [ 233.504888][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5612'. [ 233.662828][T17325] netlink: 'syz.0.5619': attribute type 10 has an invalid length. [ 233.684437][T17325] dummy0: left promiscuous mode [ 233.699803][T17325] team0: Port device dummy0 added [ 233.712722][T17328] netlink: 'syz.0.5619': attribute type 10 has an invalid length. [ 233.741782][T17328] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 233.766497][T17328] team0: Failed to send options change via netlink (err -105) [ 233.777153][T17328] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 233.805416][T17328] team0: Port device dummy0 removed [ 234.108414][T17357] netlink: 'syz.0.5630': attribute type 1 has an invalid length. [ 234.131131][T17357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.194936][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5630'. [ 234.224823][T17364] bond3 (unregistering): Released all slaves [ 234.454763][T17383] lo speed is unknown, defaulting to 1000 [ 234.543916][T17395] loop7: detected capacity change from 0 to 512 [ 234.586883][T17395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.626672][T17395] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.5646: corrupted inode contents [ 234.686468][T17395] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.5646: mark_inode_dirty error [ 234.751201][T17395] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.5646: corrupted inode contents [ 234.783472][T17395] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.5646: mark_inode_dirty error [ 234.806288][T17413] loop0: detected capacity change from 0 to 512 [ 234.816898][T17410] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.5646: corrupted inode contents [ 234.829934][T17410] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.5646: mark_inode_dirty error [ 234.846224][T17413] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.5650: corrupted in-inode xattr: invalid ea_ino [ 234.864090][T17410] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.5646: corrupted inode contents [ 234.919987][T17411] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.5646: corrupted inode contents [ 234.944614][T17413] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.5650: couldn't read orphan inode 15 (err -117) [ 234.960145][T17411] EXT4-fs error (device loop7): ext4_setent:3643: inode #2: comm syz.7.5646: mark_inode_dirty error [ 234.981759][T17413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.002982][T17411] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.5646: corrupted inode contents [ 235.088018][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.125682][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.191084][T17423] pim6reg1: entered promiscuous mode [ 235.196748][T17423] pim6reg1: entered allmulticast mode [ 235.437191][T17442] netlink: 'syz.7.5662': attribute type 1 has an invalid length. [ 235.458857][T17442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.459348][T17446] loop0: detected capacity change from 0 to 512 [ 235.503898][T17442] bond5 (unregistering): Released all slaves [ 235.522802][T17446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.565437][T17446] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5664: corrupted inode contents [ 235.595615][T17446] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.5664: mark_inode_dirty error [ 235.647545][T17446] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5664: corrupted inode contents [ 235.706709][T17446] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.5664: mark_inode_dirty error [ 235.746410][T17457] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5664: corrupted inode contents [ 235.791682][T17457] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.5664: mark_inode_dirty error [ 235.824662][T17457] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5664: corrupted inode contents [ 235.848135][T17446] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5664: corrupted inode contents [ 235.863818][T17446] EXT4-fs error (device loop0): ext4_setent:3643: inode #2: comm syz.0.5664: mark_inode_dirty error [ 235.892817][T17446] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5664: corrupted inode contents [ 235.898745][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.971904][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.053766][T17471] loop4: detected capacity change from 0 to 128 [ 236.152852][T17472] syzkaller0: entered promiscuous mode [ 236.158590][T17472] syzkaller0: entered allmulticast mode [ 236.494262][T17501] vlan2: entered promiscuous mode [ 236.499456][T17501] ip6gretap0: entered promiscuous mode [ 236.660454][T17517] loop0: detected capacity change from 0 to 512 [ 236.668275][T17517] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.690029][T17517] EXT4-fs (loop0): 1 truncate cleaned up [ 236.696283][T17517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.789547][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.844013][T17522] syzkaller0: entered promiscuous mode [ 236.850258][T17522] syzkaller0: entered allmulticast mode [ 236.983285][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5698'. [ 237.003740][T17540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5696'. [ 237.572109][T17568] netlink: '+}[@': attribute type 5 has an invalid length. [ 237.581378][T17568] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 237.591066][T17568] : renamed from bond0 [ 237.687045][T17576] pim6reg1: entered promiscuous mode [ 237.692596][T17576] pim6reg1: entered allmulticast mode [ 237.894743][T17582] netlink: 'syz.6.5715': attribute type 1 has an invalid length. [ 237.915128][T17582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.941315][T17582] bond3 (unregistering): Released all slaves [ 237.958334][T17589] loop4: detected capacity change from 0 to 164 [ 237.969828][T17589] syz.4.5718: attempt to access beyond end of device [ 237.969828][T17589] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 237.985029][T17589] syz.4.5718: attempt to access beyond end of device [ 237.985029][T17589] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 238.077285][T17595] syz_tun: entered promiscuous mode [ 238.085274][T17595] vlan2: entered promiscuous mode [ 238.202783][T17596] syzkaller0: entered promiscuous mode [ 238.209362][T17596] syzkaller0: entered allmulticast mode [ 238.265174][T17601] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5722'. [ 238.413928][T17612] loop7: detected capacity change from 0 to 1024 [ 238.420992][T17612] EXT4-fs: Ignoring removed oldalloc option [ 238.442676][T17612] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 238.464586][T17612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.495329][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.598174][T17623] loop0: detected capacity change from 0 to 512 [ 238.650316][T17623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.707206][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.810700][T17639] serio: Serial port ttyS3 [ 238.813426][T17637] lo speed is unknown, defaulting to 1000 [ 239.106392][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 239.106429][ T29] audit: type=1400 audit(761.972:6682): avc: denied { append } for pid=17647 comm="syz.0.5738" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.143630][ T29] audit: type=1400 audit(761.982:6683): avc: denied { create } for pid=17646 comm="syz.7.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.164753][ T29] audit: type=1400 audit(762.014:6684): avc: denied { bind } for pid=17646 comm="syz.7.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.211300][ T29] audit: type=1326 audit(762.087:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.236054][ T29] audit: type=1326 audit(762.087:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.261930][ T29] audit: type=1326 audit(762.087:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.286962][ T29] audit: type=1326 audit(762.087:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.311840][ T29] audit: type=1326 audit(762.087:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.336578][ T29] audit: type=1326 audit(762.087:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.360816][ T29] audit: type=1326 audit(762.087:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17613 comm="syz.4.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7fc00000 [ 239.511585][T17672] loop7: detected capacity change from 0 to 1024 [ 239.545918][T17672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.604562][T17678] lo speed is unknown, defaulting to 1000 [ 239.615525][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.667318][T17687] netlink: 'syz.7.5752': attribute type 1 has an invalid length. [ 239.706583][T17687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.715651][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5752'. [ 239.759237][T17694] bond0 (unregistering): Released all slaves [ 240.135177][T17720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.299749][T17738] lo speed is unknown, defaulting to 1000 [ 240.533088][T17755] loop0: detected capacity change from 0 to 8192 [ 240.714249][T17772] loop4: detected capacity change from 0 to 1156 [ 240.733174][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5791'. [ 241.035397][T17798] netlink: 'syz.5.5800': attribute type 1 has an invalid length. [ 241.065530][T17798] bond1: entered promiscuous mode [ 241.073147][T17798] bond1: entered allmulticast mode [ 241.086598][T17798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.100488][T17801] netlink: 'syz.4.5801': attribute type 10 has an invalid length. [ 241.110813][T17801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5801'. [ 241.128542][T17798] bridge7: entered promiscuous mode [ 241.134826][T17798] bridge7: entered allmulticast mode [ 241.143764][T17798] bond1: (slave bridge7): Enslaving as a backup interface with an up link [ 241.154557][T17801] dummy0: entered promiscuous mode [ 241.162028][T17801] bond0: (slave dummy0): Releasing backup interface [ 241.176828][ T6955] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.190721][T17801] bridge0: port 3(dummy0) entered blocking state [ 241.198663][T17801] bridge0: port 3(dummy0) entered disabled state [ 241.219918][T17801] dummy0: entered allmulticast mode [ 241.291499][T17811] netlink: 'syz.5.5805': attribute type 13 has an invalid length. [ 241.305807][ T6944] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.372670][T17815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5807'. [ 241.541393][T17829] netlink: 'syz.5.5813': attribute type 4 has an invalid length. [ 241.549720][T17829] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5813'. [ 241.705343][T17841] netlink: 'syz.5.5819': attribute type 39 has an invalid length. [ 241.777664][T17847] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 241.818916][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.827321][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.837171][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.850356][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.859767][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.868240][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.877964][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.887404][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.896109][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.904376][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.913032][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.920716][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.929846][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.938252][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.949504][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.959456][ T6126] hid-generic 0006:0000:0000.000A: unknown main item tag 0x0 [ 241.970429][ T6126] hid-generic 0006:0000:0000.000A: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 242.017450][T17861] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5828'. [ 242.031581][T17856] 9pnet_fd: p9_fd_create_tcp (17856): problem connecting socket to 127.0.0.1 [ 242.146020][T17872] wg2: left promiscuous mode [ 242.151396][T17872] wg2: left allmulticast mode [ 242.234267][T17872] wg2: entered promiscuous mode [ 242.239628][T17872] wg2: entered allmulticast mode [ 242.559340][T17909] loop0: detected capacity change from 0 to 1024 [ 242.568307][T17909] EXT4-fs: Ignoring removed orlov option [ 242.574351][T17909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.603458][T17909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.665172][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.710300][T17919] netlink: 'syz.5.5853': attribute type 10 has an invalid length. [ 242.718637][T17919] veth0_vlan: entered allmulticast mode [ 242.724699][T17919] veth0_vlan: left promiscuous mode [ 242.730973][T17919] veth0_vlan: entered promiscuous mode [ 242.740451][T17919] team0: Device veth0_vlan failed to register rx_handler [ 242.760179][T17925] netlink: 'syz.0.5852': attribute type 12 has an invalid length. [ 243.117991][T17936] hub 9-0:1.0: USB hub found [ 243.122953][T17936] hub 9-0:1.0: 8 ports detected [ 243.143648][T17941] ip6gre2: entered allmulticast mode [ 243.544974][T17981] lo speed is unknown, defaulting to 1000 [ 243.605045][T17987] tipc: Started in network mode [ 243.610117][T17987] tipc: Node identity ac14140f, cluster identity 4711 [ 243.620159][T17987] tipc: New replicast peer: 255.255.255.255 [ 243.626480][T17987] tipc: Enabled bearer , priority 10 [ 244.036786][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 244.036806][ T29] audit: type=1326 audit(767.158:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.069101][ T29] audit: type=1326 audit(767.158:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.092764][ T29] audit: type=1326 audit(767.169:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.116292][ T29] audit: type=1326 audit(767.169:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.141194][ T29] audit: type=1326 audit(767.169:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.165735][ T29] audit: type=1326 audit(767.169:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.189895][ T29] audit: type=1326 audit(767.169:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.213450][ T29] audit: type=1326 audit(767.221:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.238551][ T29] audit: type=1326 audit(767.263:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.263527][ T29] audit: type=1326 audit(767.263:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 244.320128][T18016] netlink: 'syz.0.5889': attribute type 27 has an invalid length. [ 244.344794][T18016] vlan0: left promiscuous mode [ 244.356237][T18016] team1: left promiscuous mode [ 244.362366][T18016] team1: left allmulticast mode [ 244.403852][T18016] ip6gre1: left allmulticast mode [ 244.409395][T18016] macvlan2: left promiscuous mode [ 244.415952][T18016] bond2: left promiscuous mode [ 244.423114][T18016] batadv1: left promiscuous mode [ 244.428327][T18016] batadv1: left allmulticast mode [ 244.434471][T18016] batadv2: left promiscuous mode [ 244.440125][T18016] batadv2: left allmulticast mode [ 244.468788][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.480354][T18023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.716914][ T6126] tipc: Node number set to 2886997007 [ 244.971542][T18051] tipc: Enabled bearer , priority 0 [ 244.996274][T18050] tipc: Resetting bearer [ 245.027439][T18050] tipc: Disabling bearer [ 245.227895][T18064] blktrace: Concurrent blktraces are not allowed on loop14 [ 245.245925][T18064] relay: one or more items not logged [item size (56) > sub-buffer size (16)] [ 245.819272][T18079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5914'. [ 246.017030][T18095] loop7: detected capacity change from 0 to 1024 [ 246.070046][T18095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.157817][T18095] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 246.210056][T18110] netlink: 'syz.0.5926': attribute type 7 has an invalid length. [ 246.219419][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 246.247415][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.459274][T18128] loop7: detected capacity change from 0 to 1024 [ 246.489522][T18128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.824320][T18128] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 246.847337][T18128] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 246.863011][T18128] EXT4-fs (loop7): This should not happen!! Data will be lost [ 246.863011][T18128] [ 246.875313][T18128] EXT4-fs (loop7): Total free blocks count 0 [ 246.883297][T18128] EXT4-fs (loop7): Free/Dirty block details [ 246.891148][T18128] EXT4-fs (loop7): free_blocks=4293918720 [ 246.899994][T18128] EXT4-fs (loop7): dirty_blocks=64 [ 246.906538][T18128] EXT4-fs (loop7): Block reservation details [ 246.914853][T18128] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 247.052065][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.268429][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5954'. [ 247.382382][T18189] wg2: left promiscuous mode [ 247.387866][T18189] wg2: left allmulticast mode [ 247.425017][T18189] wg2: entered promiscuous mode [ 247.430452][T18189] wg2: entered allmulticast mode [ 247.504375][T18193] lo speed is unknown, defaulting to 1000 [ 247.861220][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5969'. [ 247.870929][T18217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.879166][T18217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.892704][T18217] bond0: (slave macvlan2): Releasing active interface [ 247.900082][T18217] macvlan2 (unregistering): left allmulticast mode [ 247.916974][T18219] syzkaller0: entered allmulticast mode [ 247.923807][T18222] syzkaller0 (unregistering): left allmulticast mode [ 248.068628][T18233] xt_hashlimit: size too large, truncated to 1048576 [ 248.295757][T18240] loop7: detected capacity change from 0 to 1024 [ 248.327328][T18240] EXT4-fs: Ignoring removed nobh option [ 248.333074][T18240] EXT4-fs: Ignoring removed nobh option [ 248.365083][T18240] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 248.387732][T18240] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: comm syz.7.5971: inode #4294967295: comm syz.7.5971: iget: illegal inode # [ 248.467926][T18240] EXT4-fs (loop7): no journal found [ 248.473724][T18240] EXT4-fs (loop7): can't get journal size [ 248.533090][T18260] lo speed is unknown, defaulting to 1000 [ 248.547614][T18240] EXT4-fs (loop7): failed to initialize system zone (-22) [ 248.589254][T18240] EXT4-fs (loop7): mount failed [ 248.601322][T18264] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5983'. [ 248.749966][T18276] netlink: '+}[@': attribute type 13 has an invalid length. [ 249.268240][T18310] loop4: detected capacity change from 0 to 128 [ 249.298718][T18314] netlink: 'syz.7.6006': attribute type 12 has an invalid length. [ 249.311657][T18310] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.443162][T18330] loop6: detected capacity change from 0 to 7 [ 249.535561][T15712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.578582][T18348] batadv_slave_1: entered promiscuous mode [ 249.607199][T18348] batadv_slave_1: left promiscuous mode [ 249.698183][T18361] lo speed is unknown, defaulting to 1000 [ 249.866621][T18373] loop4: detected capacity change from 0 to 1024 [ 249.903858][T18373] ext4: Unknown parameter 'uid<00000000000000000000' [ 249.919499][T18373] loop4: detected capacity change from 0 to 128 [ 249.929813][T18373] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.958816][ T6900] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.582854][T18408] loop0: detected capacity change from 0 to 128 [ 250.674545][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 250.674564][ T29] audit: type=1400 audit(774.129:6977): avc: denied { append } for pid=18416 comm="syz.4.6047" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 250.740794][T18423] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 251.159257][ T29] audit: type=1400 audit(774.633:6978): avc: denied { create } for pid=18433 comm="syz.0.6055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 251.212416][ T29] audit: type=1400 audit(774.665:6979): avc: denied { write } for pid=18433 comm="syz.0.6055" path="socket:[55098]" dev="sockfs" ino=55098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 251.628974][T18478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=18478 comm=syz.5.6061 [ 251.960736][ T29] audit: type=1326 audit(775.473:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 251.985564][ T29] audit: type=1326 audit(775.473:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 252.009109][ T29] audit: type=1326 audit(775.473:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 252.034679][ T29] audit: type=1326 audit(775.473:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 252.059490][ T29] audit: type=1326 audit(775.473:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 252.437159][T18534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18534 comm=syz.6.6071 [ 252.450970][ T29] audit: type=1326 audit(775.599:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 252.478434][ T29] audit: type=1326 audit(775.599:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.6.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 252.567494][T18541] netlink: 'syz.4.6074': attribute type 10 has an invalid length. [ 252.575901][T18541] dummy0: left allmulticast mode [ 252.597943][T18541] dummy0: left promiscuous mode [ 252.603306][T18541] bridge0: port 3(dummy0) entered disabled state [ 252.631307][T18544] netlink: 'syz.4.6074': attribute type 10 has an invalid length. [ 252.767581][T18541] team0: Port device dummy0 added [ 252.784761][T18544] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 252.860070][T18544] team0: Failed to send options change via netlink (err -105) [ 252.874968][T18544] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 252.887869][T18544] team0: Port device dummy0 removed [ 252.899186][T18544] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.048275][T18477] lo speed is unknown, defaulting to 1000 [ 253.978634][T18589] loop7: detected capacity change from 0 to 1024 [ 253.985541][T18589] EXT4-fs: Ignoring removed bh option [ 253.991215][T18589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.007940][T18589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.371308][T18600] gtp0: entered promiscuous mode [ 254.656945][T18613] @ÿ: renamed from bond_slave_0 [ 254.884516][T18632] netlink: 'syz.4.6109': attribute type 1 has an invalid length. [ 255.031534][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.039385][T18636] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6112'. [ 255.124285][T18659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6121'. [ 255.309064][T18679] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6129'. [ 255.353201][T18681] lo speed is unknown, defaulting to 1000 [ 255.375905][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6131'. [ 255.447376][T18685] bond0: (slave 1@ÿ): Releasing backup interface [ 255.525348][T18693] 9pnet_fd: Insufficient options for proto=fd [ 255.628428][T18700] netlink: 'syz.4.6138': attribute type 10 has an invalid length. [ 255.637118][T18700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6138'. [ 255.652922][T18700] dummy0: entered promiscuous mode [ 255.663690][T18700] bond0: (slave dummy0): Releasing backup interface [ 255.806500][T18713] loop7: detected capacity change from 0 to 1024 [ 255.824868][T18713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.888938][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.054177][T18733] loop7: detected capacity change from 0 to 128 [ 256.076175][T18733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 256.084255][T18733] FAT-fs (loop7): Filesystem has been set read-only [ 256.098331][T18733] syz.7.6152: attempt to access beyond end of device [ 256.098331][T18733] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 256.114475][T18733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 256.123535][T18733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 256.133639][T18733] syz.7.6152: attempt to access beyond end of device [ 256.133639][T18733] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 256.155494][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 256.155510][ T29] audit: type=1326 audit(779.872:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.194669][T18733] syz.7.6152: attempt to access beyond end of device [ 256.194669][T18733] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 256.230566][ T29] audit: type=1326 audit(779.872:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.254220][ T29] audit: type=1326 audit(779.872:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.277864][ T29] audit: type=1326 audit(779.872:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.301575][ T29] audit: type=1326 audit(779.872:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.326271][ T29] audit: type=1326 audit(779.882:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.349762][ T29] audit: type=1326 audit(779.882:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.373270][ T29] audit: type=1326 audit(779.882:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.396411][ T29] audit: type=1326 audit(779.882:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.420122][ T29] audit: type=1326 audit(779.882:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18743 comm="syz.5.6156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 256.477677][T18755] syz_tun: entered allmulticast mode [ 256.484536][T18754] syz_tun: left allmulticast mode [ 256.534194][T18760] loop4: detected capacity change from 0 to 164 [ 256.550339][T18760] syz.4.6163: attempt to access beyond end of device [ 256.550339][T18760] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 256.595740][T18760] syz.4.6163: attempt to access beyond end of device [ 256.595740][T18760] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 256.693554][T18775] xt_cluster: node mask cannot exceed total number of nodes [ 256.752668][T18780] netlink: 'syz.7.6172': attribute type 4 has an invalid length. [ 256.762229][T18780] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6172'. [ 256.807697][T18784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6174'. [ 256.915361][T18792] loop7: detected capacity change from 0 to 2048 [ 256.922816][T18792] EXT4-fs: Ignoring removed bh option [ 256.956579][T18792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.962598][T18796] lo speed is unknown, defaulting to 1000 [ 257.229163][T18814] netlink: 'syz.6.6186': attribute type 1 has an invalid length. [ 257.280156][T18814] bond3: entered promiscuous mode [ 257.288118][T18814] bond3: entered allmulticast mode [ 257.297830][T18814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.330555][T18814] bridge0: entered promiscuous mode [ 257.337197][T18814] bridge0: entered allmulticast mode [ 257.378689][T18818] loop4: detected capacity change from 0 to 512 [ 257.387600][ T8774] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.399099][T18814] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 257.439233][T18818] EXT4-fs (loop4): 1 orphan inode deleted [ 257.466516][ T8774] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:69: Failed to release dquot type 1 [ 257.479804][T18818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.645257][ T6916] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.658733][T18804] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 257.701693][T18804] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 257.716467][T18804] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.716467][T18804] [ 257.727066][T18804] EXT4-fs (loop7): Total free blocks count 0 [ 257.734173][T18804] EXT4-fs (loop7): Free/Dirty block details [ 257.737868][ T6900] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 257.741741][T18804] EXT4-fs (loop7): free_blocks=2415919104 [ 257.754081][ T6900] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.754081][ T6900] [ 257.754182][ T6900] EXT4-fs (loop7): Total free blocks count 0 [ 257.754199][ T6900] EXT4-fs (loop7): Free/Dirty block details [ 257.811950][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.850232][T18834] netlink: 664 bytes leftover after parsing attributes in process `syz.6.6193'. [ 257.874656][T18836] xt_hashlimit: size too large, truncated to 1048576 [ 257.935366][T18838] netlink: 'syz.6.6194': attribute type 3 has an invalid length. [ 257.950447][T18838] netlink: 'syz.6.6194': attribute type 3 has an invalid length. [ 258.328251][T18867] loop7: detected capacity change from 0 to 256 [ 258.356814][T18869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6209'. [ 258.419897][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.438866][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.319803][T18930] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6233'. [ 259.542932][T18957] loop4: detected capacity change from 0 to 512 [ 259.570700][T18957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.611563][T18957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.658522][T18966] batadv_slave_1: entered allmulticast mode [ 259.687637][T18965] batadv_slave_1: left allmulticast mode [ 259.761449][T18972] pim6reg1: entered promiscuous mode [ 259.766903][T18972] pim6reg1: entered allmulticast mode [ 259.828753][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.621481][T19007] loop7: detected capacity change from 0 to 1024 [ 260.639338][T19007] EXT4-fs: Ignoring removed oldalloc option [ 260.646829][T19007] EXT4-fs: Ignoring removed orlov option [ 260.653041][T19007] EXT4-fs (loop7): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 260.686292][T19007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.713663][T19021] batadv_slave_1: entered promiscuous mode [ 260.720911][T19007] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 18: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 260.738224][T19021] batadv_slave_1: left promiscuous mode [ 260.743954][T19007] EXT4-fs (loop7): Remounting filesystem read-only [ 260.796127][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.865645][T19037] netlink: 'syz.5.6278': attribute type 7 has an invalid length. [ 260.873656][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6278'. [ 260.923382][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 260.923402][ T29] audit: type=1326 audit(784.880:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 260.953426][ T29] audit: type=1326 audit(784.880:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 260.982395][ T29] audit: type=1326 audit(784.880:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb1135ed197 code=0x7ffc0000 [ 261.006568][ T29] audit: type=1326 audit(784.880:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.029788][ T29] audit: type=1326 audit(784.880:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.054057][ T29] audit: type=1326 audit(784.943:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.078009][ T29] audit: type=1326 audit(784.943:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.102084][ T29] audit: type=1326 audit(784.943:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.126460][ T29] audit: type=1326 audit(785.027:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.150406][ T29] audit: type=1326 audit(785.027:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19043 comm="syz.7.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 261.890813][T19079] tipc: Enabled bearer , priority 0 [ 261.901516][T19079] tipc: Disabling bearer [ 261.979531][T19082] lo speed is unknown, defaulting to 1000 [ 262.051492][T19089] loop7: detected capacity change from 0 to 164 [ 262.059374][T19089] iso9660: Unexpected value for 'nojoliet' [ 262.381894][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6311'. [ 262.552826][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6317'. [ 262.610765][T19133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.777200][T19163] ÿÿÿÿÿÿ: renamed from vlan1 [ 262.819073][T19164] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6328'. [ 262.872237][T19174] openvswitch: netlink: Message has 6 unknown bytes. [ 263.004106][T19181] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6340'. [ 263.478567][T19204] xt_hashlimit: size too large, truncated to 1048576 [ 263.493755][T19206] ref_ctr increment failed for inode: 0xae3 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881041e6780 [ 263.524750][T19205] uprobe: syz.5.6351:19205 failed to unregister, leaking uprobe [ 263.546668][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.571615][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.781112][T19216] SELinux: failed to load policy [ 264.156100][T19242] loop4: detected capacity change from 0 to 128 [ 264.183764][T19242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 264.279719][T19242] syz.4.6364: attempt to access beyond end of device [ 264.279719][T19242] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 264.392588][ T6913] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 264.409099][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6371'. [ 264.481078][T19260] loop4: detected capacity change from 0 to 2048 [ 264.509244][T19260] EXT4-fs: Ignoring removed bh option [ 264.532796][T19260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.571214][T19260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 264.618433][T19260] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 264.635298][T19260] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.635298][T19260] [ 264.640533][T19266] netlink: 'syz.4.6372': attribute type 10 has an invalid length. [ 264.647224][T19260] EXT4-fs (loop4): Total free blocks count 0 [ 264.647249][T19260] EXT4-fs (loop4): Free/Dirty block details [ 264.647265][T19260] EXT4-fs (loop4): free_blocks=2415919104 [ 264.656822][T19266] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6372'. [ 264.663459][T19260] EXT4-fs (loop4): dirty_blocks=16 [ 264.663479][T19260] EXT4-fs (loop4): Block reservation details [ 264.705618][T19260] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 264.865306][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.917781][T19277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6378'. [ 264.981616][T19284] pim6reg1: entered promiscuous mode [ 264.987205][T19284] pim6reg1: entered allmulticast mode [ 265.233109][T19304] loop4: detected capacity change from 0 to 512 [ 265.326122][T19308] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 265.350774][T19304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.548072][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.620885][T19322] xt_connbytes: Forcing CT accounting to be enabled [ 265.637622][T19322] xt_bpf: check failed: parse error [ 265.716317][ T29] kauditd_printk_skb: 700 callbacks suppressed [ 265.716377][ T29] audit: type=1326 audit(789.919:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.748734][ T29] audit: type=1326 audit(789.919:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.772361][ T29] audit: type=1326 audit(789.919:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.797887][ T29] audit: type=1326 audit(789.919:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.822835][ T29] audit: type=1326 audit(789.919:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.851116][ T29] audit: type=1326 audit(789.919:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.876654][ T29] audit: type=1326 audit(789.919:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.901463][ T29] audit: type=1326 audit(789.919:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.925876][ T29] audit: type=1326 audit(789.919:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 265.953848][ T29] audit: type=1326 audit(790.161:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 266.352971][T19381] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6418'. [ 266.360371][T19384] serio: Serial port ttyS3 [ 266.743523][T19414] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6434'. [ 266.992528][T19428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19428 comm=syz.5.6441 [ 267.069404][T19433] netlink: 'syz.5.6443': attribute type 10 has an invalid length. [ 267.077754][T19433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6443'. [ 267.117269][T19433] dummy0: entered promiscuous mode [ 267.129849][T19433] bridge0: port 3(dummy0) entered blocking state [ 267.137292][T19433] bridge0: port 3(dummy0) entered disabled state [ 267.160986][T19433] dummy0: entered allmulticast mode [ 267.364726][T19455] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6454'. [ 267.735511][T19483] netlink: 'syz.6.6476': attribute type 10 has an invalid length. [ 267.744019][T19483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6476'. [ 267.763160][T19484] loop4: detected capacity change from 0 to 764 [ 267.790271][T19484] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 267.945563][T19468] lo speed is unknown, defaulting to 1000 [ 268.145930][T19502] @ÿ: renamed from bond_slave_0 [ 268.241317][T19511] loop4: detected capacity change from 0 to 1024 [ 268.271440][T19511] EXT4-fs: Ignoring removed nobh option [ 268.277964][T19511] EXT4-fs: Ignoring removed nobh option [ 268.277992][T19518] 9pnet_fd: Insufficient options for proto=fd [ 268.287583][T19511] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 268.305128][T19511] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.6472: inode #4294967295: comm syz.4.6472: iget: illegal inode # [ 268.321089][T19511] EXT4-fs (loop4): no journal found [ 268.326488][T19511] EXT4-fs (loop4): can't get journal size [ 268.337483][T19511] EXT4-fs (loop4): failed to initialize system zone (-22) [ 268.360086][T19511] EXT4-fs (loop4): mount failed [ 269.556113][T19546] @ÿ: renamed from bond_slave_0 [ 269.612387][T19550] netlink: 404 bytes leftover after parsing attributes in process `syz.7.6495'. [ 269.690555][T19553] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 269.802407][T19563] netlink: 'syz.4.6500': attribute type 4 has an invalid length. [ 269.811781][T19563] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6500'. [ 269.939894][T19571] loop0: detected capacity change from 0 to 1024 [ 269.958114][T19571] EXT4-fs: Ignoring removed nobh option [ 269.964266][T19571] EXT4-fs: Ignoring removed nobh option [ 269.991998][T19571] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 270.019563][T19571] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.6496: inode #4294967295: comm syz.0.6496: iget: illegal inode # [ 270.062604][T19571] EXT4-fs (loop0): no journal found [ 270.068173][T19571] EXT4-fs (loop0): can't get journal size [ 270.092564][T19571] EXT4-fs (loop0): failed to initialize system zone (-22) [ 270.109366][T19571] EXT4-fs (loop0): mount failed [ 270.370645][T19607] 9pnet_fd: Insufficient options for proto=fd [ 270.697083][T19640] netlink: 'syz.6.6514': attribute type 4 has an invalid length. [ 270.705234][T19640] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6514'. [ 270.798566][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 270.798646][ T29] audit: type=1326 audit(795.242:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 270.929334][ T29] audit: type=1326 audit(795.326:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 270.953530][ T29] audit: type=1326 audit(795.326:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 270.976686][ T29] audit: type=1326 audit(795.347:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 270.999883][ T29] audit: type=1326 audit(795.347:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 271.024859][ T29] audit: type=1326 audit(795.347:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 271.049517][ T29] audit: type=1326 audit(795.347:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 271.073386][ T29] audit: type=1326 audit(795.347:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 271.097072][ T29] audit: type=1326 audit(795.347:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 271.120530][ T29] audit: type=1326 audit(795.347:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.5.6516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f7e6a1fe929 code=0x7ffc0000 [ 271.183614][T19684] netlink: 'syz.4.6521': attribute type 1 has an invalid length. [ 271.229853][T19684] bond4: entered promiscuous mode [ 271.235334][T19684] bond4: entered allmulticast mode [ 271.255170][T19684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.295170][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6523'. [ 271.314902][T19692] bond0: (slave c@ÿ): Releasing backup interface [ 271.357655][T19684] bridge5: entered promiscuous mode [ 271.363186][T19684] bridge5: entered allmulticast mode [ 271.400283][T19684] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 271.436321][ T6936] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.461918][T19698] netlink: 'syz.6.6525': attribute type 39 has an invalid length. [ 271.522918][T19704] loop4: detected capacity change from 0 to 128 [ 271.535011][T19704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 271.543135][T19704] FAT-fs (loop4): Filesystem has been set read-only [ 271.557253][T19704] syz.4.6530: attempt to access beyond end of device [ 271.557253][T19704] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 271.574210][T19704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 271.582246][T19704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 271.590486][ T6962] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.628111][T19713] loop0: detected capacity change from 0 to 128 [ 271.644114][T19704] syz.4.6530: attempt to access beyond end of device [ 271.644114][T19704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 271.659350][T19704] syz.4.6530: attempt to access beyond end of device [ 271.659350][T19704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 271.695977][T19713] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.725326][T19716] lo speed is unknown, defaulting to 1000 [ 271.732944][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6538'. [ 271.807219][T19725] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6539'. [ 271.827720][T11059] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.848716][T19729] loop4: detected capacity change from 0 to 128 [ 271.869370][T19729] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.892736][T19732] netlink: 'syz.0.6540': attribute type 1 has an invalid length. [ 271.920650][T19732] bond3: entered promiscuous mode [ 271.925933][T19732] bond3: entered allmulticast mode [ 271.931748][T19732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.947440][T19732] bridge3: entered promiscuous mode [ 271.953225][T19732] bridge3: entered allmulticast mode [ 271.959274][T19732] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 272.027621][ T6936] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.055992][T15712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.141039][ T6926] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.238481][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6553'. [ 272.370704][T19768] netlink: 'syz.7.6557': attribute type 1 has an invalid length. [ 272.393376][T19768] bond0: entered promiscuous mode [ 272.398744][T19768] bond0: entered allmulticast mode [ 272.404356][T19768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.420364][T19768] bridge10: entered promiscuous mode [ 272.425861][T19768] bridge10: entered allmulticast mode [ 272.432559][T19768] bond0: (slave bridge10): Enslaving as a backup interface with an up link [ 272.493459][ T6926] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.617306][ T6964] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.932378][T19777] loop7: detected capacity change from 0 to 164 [ 272.950567][T19777] syz.7.6570: attempt to access beyond end of device [ 272.950567][T19777] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 272.966616][T19777] syz.7.6570: attempt to access beyond end of device [ 272.966616][T19777] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 273.358955][T19802] netlink: 'syz.6.6581': attribute type 13 has an invalid length. [ 273.793246][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6566'. [ 273.815877][T19817] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 273.826343][T19817] SELinux: failed to load policy [ 273.832383][T19817] netlink: 'syz.7.6574': attribute type 10 has an invalid length. [ 273.841833][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6574'. [ 273.852477][T19817] dummy0: entered promiscuous mode [ 273.858744][T19817] bridge0: port 1(dummy0) entered blocking state [ 273.865846][T19817] bridge0: port 1(dummy0) entered disabled state [ 273.873521][T19817] dummy0: entered allmulticast mode [ 273.908991][T19820] loop7: detected capacity change from 0 to 128 [ 273.939146][T19820] syz.7.6577: attempt to access beyond end of device [ 273.939146][T19820] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 273.954136][T19820] syz.7.6577: attempt to access beyond end of device [ 273.954136][T19820] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 273.968139][T19820] syz.7.6577: attempt to access beyond end of device [ 273.968139][T19820] loop7: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 273.982176][T19820] syz.7.6577: attempt to access beyond end of device [ 273.982176][T19820] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 274.010479][T19820] syz.7.6577: attempt to access beyond end of device [ 274.010479][T19820] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 274.040542][T19830] netlink: 'syz.4.6593': attribute type 39 has an invalid length. [ 274.086371][T19819] Buffer I/O error on dev loop7, logical block 305, async page read [ 274.101176][T19819] Buffer I/O error on dev loop7, logical block 306, async page read [ 274.110391][T19819] Buffer I/O error on dev loop7, logical block 307, async page read [ 274.119596][T19819] Buffer I/O error on dev loop7, logical block 308, async page read [ 274.127945][T19819] Buffer I/O error on dev loop7, logical block 309, async page read [ 274.136701][T19819] Buffer I/O error on dev loop7, logical block 310, async page read [ 274.146838][T19819] Buffer I/O error on dev loop7, logical block 311, async page read [ 274.159612][T19819] Buffer I/O error on dev loop7, logical block 312, async page read [ 274.168529][T19819] Buffer I/O error on dev loop7, logical block 305, async page read [ 274.176943][T19819] Buffer I/O error on dev loop7, logical block 306, async page read [ 274.225848][T19838] loop7: detected capacity change from 0 to 128 [ 274.252879][T19838] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.318663][ T6415] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.655797][T19870] netlink: 'syz.7.6598': attribute type 3 has an invalid length. [ 274.667677][T19870] netlink: 'syz.7.6598': attribute type 3 has an invalid length. [ 274.685952][T19874] loop4: detected capacity change from 0 to 128 [ 274.801458][T19878] loop7: detected capacity change from 0 to 128 [ 274.826031][T19878] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.915332][T19884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6603'. [ 274.927589][ T6415] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.975761][T19886] lo speed is unknown, defaulting to 1000 [ 274.978884][T19889] loop4: detected capacity change from 0 to 2048 [ 274.992904][T19889] EXT4-fs: Ignoring removed bh option [ 275.016392][T19889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.066512][T19896] xt_hashlimit: size too large, truncated to 1048576 [ 275.238814][T19720] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 275.581635][T19898] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 275.594571][T19898] EXT4-fs (loop4): This should not happen!! Data will be lost [ 275.594571][T19898] [ 275.604656][T19898] EXT4-fs (loop4): Total free blocks count 0 [ 275.610748][T19898] EXT4-fs (loop4): Free/Dirty block details [ 275.616893][T19898] EXT4-fs (loop4): free_blocks=2415919104 [ 275.622813][T19898] EXT4-fs (loop4): dirty_blocks=8224 [ 275.628448][T19898] EXT4-fs (loop4): Block reservation details [ 275.634520][T19898] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 275.667215][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 275.667234][ T29] audit: type=1326 audit(800.365:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.696834][ T29] audit: type=1326 audit(800.365:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.720093][ T29] audit: type=1326 audit(800.365:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.743559][ T29] audit: type=1326 audit(800.365:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.767179][ T29] audit: type=1326 audit(800.365:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.790896][ T29] audit: type=1326 audit(800.365:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.814225][ T29] audit: type=1326 audit(800.365:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.838313][ T29] audit: type=1326 audit(800.365:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.863555][ T29] audit: type=1326 audit(800.365:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.887223][ T29] audit: type=1326 audit(800.365:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19904 comm="syz.7.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 275.927524][ T6900] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 276.162186][T19930] lo speed is unknown, defaulting to 1000 [ 276.211516][T19932] tipc: Enabled bearer , priority 0 [ 276.228678][T19931] tipc: Resetting bearer [ 276.260778][T19931] tipc: Disabling bearer [ 276.339289][T19943] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 276.375121][T19945] loop4: detected capacity change from 0 to 1024 [ 276.403755][T19945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.424503][T19945] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 276.437472][T19945] EXT4-fs (loop4): This should not happen!! Data will be lost [ 276.437472][T19945] [ 276.447534][T19945] EXT4-fs (loop4): Total free blocks count 0 [ 276.453742][T19945] EXT4-fs (loop4): Free/Dirty block details [ 276.459850][T19945] EXT4-fs (loop4): free_blocks=0 [ 276.465094][T19945] EXT4-fs (loop4): dirty_blocks=0 [ 276.470515][T19945] EXT4-fs (loop4): Block reservation details [ 276.475057][T19954] loop0: detected capacity change from 0 to 1024 [ 276.476834][T19945] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 276.490157][T19954] EXT4-fs: Ignoring removed oldalloc option [ 276.497219][T19954] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 276.527429][T19954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.579237][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.687693][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.815018][T19969] netlink: 'syz.4.6636': attribute type 7 has an invalid length. [ 276.823115][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6636'. [ 276.944916][T19973] lo speed is unknown, defaulting to 1000 [ 277.196256][T19986] netlink: 'syz.4.6641': attribute type 12 has an invalid length. [ 278.149181][T20007] netlink: 'syz.0.6646': attribute type 3 has an invalid length. [ 278.197307][T20007] netlink: 'syz.0.6646': attribute type 3 has an invalid length. [ 278.350631][T20017] lo speed is unknown, defaulting to 1000 [ 278.540129][T20032] xt_hashlimit: size too large, truncated to 1048576 [ 278.699287][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6667'. [ 278.720939][T20034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.729488][T20034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.796594][T20034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.805418][T20034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.122027][T20052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.133581][T20052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.169974][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6665'. [ 279.239212][T20052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.250005][T20052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.338301][T20052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.349306][T20052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.393961][T20052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.404730][T20052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.491213][T20052] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.499784][T20052] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.512812][T20052] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.522301][T20052] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.536727][T20052] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.545696][T20052] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.558558][T20052] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.567979][T20052] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.624667][T20068] netlink: 'syz.4.6669': attribute type 3 has an invalid length. [ 279.637959][T20068] netlink: 'syz.4.6669': attribute type 3 has an invalid length. [ 279.656036][T20069] syzkaller0: entered allmulticast mode [ 279.678029][T20069] syzkaller0 (unregistering): left allmulticast mode [ 279.906751][T20075] batadv_slave_1: entered promiscuous mode [ 279.916315][T20075] batadv_slave_1: left promiscuous mode [ 280.266456][T20096] netlink: 'syz.6.6678': attribute type 27 has an invalid length. [ 280.268518][T20097] lo speed is unknown, defaulting to 1000 [ 280.276115][T20096] gtp0: left promiscuous mode [ 280.286674][T20096] bond3: left promiscuous mode [ 280.292214][T20096] bridge0: left promiscuous mode [ 280.299908][T20096] bond3: left allmulticast mode [ 280.305200][T20096] bridge0: left allmulticast mode [ 280.350680][T20099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.360621][T20099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.537893][T20110] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.548166][T20110] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.584941][T20111] lo speed is unknown, defaulting to 1000 [ 280.629626][T20110] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.640235][T20110] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.715542][T20110] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.726157][T20110] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.805856][T20110] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.816217][T20110] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.899974][T20118] ÿÿÿÿÿÿ: renamed from vlan1 [ 281.400389][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 281.400445][ T29] audit: type=1326 audit(806.381:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.477646][ T29] audit: type=1326 audit(806.423:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.501810][ T29] audit: type=1326 audit(806.423:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.526137][ T29] audit: type=1326 audit(806.423:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.553192][ T29] audit: type=1326 audit(806.423:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e013a0847 code=0x7ffc0000 [ 281.577155][ T29] audit: type=1326 audit(806.423:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.600623][ T29] audit: type=1326 audit(806.423:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.625164][ T29] audit: type=1326 audit(806.423:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4e0139d197 code=0x7ffc0000 [ 281.649715][ T29] audit: type=1326 audit(806.423:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.673017][ T29] audit: type=1326 audit(806.423:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.6.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 281.889176][T20150] syz_tun: entered allmulticast mode [ 281.898557][T20149] syz_tun: left allmulticast mode [ 281.936297][T20154] ref_ctr increment failed for inode: 0x156b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005d640 [ 281.949207][T20153] uprobe: syz.7.6705:20153 failed to unregister, leaking uprobe [ 283.101626][T20110] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.110246][T20110] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.176660][T20110] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.185541][T20110] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.241204][T20110] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.250891][T20110] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.308796][T20110] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.317350][T20110] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.446513][T20198] loop7: detected capacity change from 0 to 128 [ 283.464681][T20198] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 283.512312][T20200] SELinux: failed to load policy [ 283.555200][T20198] bio_check_eod: 398 callbacks suppressed [ 283.555218][T20198] syz.7.6720: attempt to access beyond end of device [ 283.555218][T20198] loop7: rw=0, sector=97, nr_sectors = 944 limit=128 [ 283.639677][T20212] loop6: detected capacity change from 0 to 7 [ 283.677596][ T6962] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 284.302085][T20235] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.312154][T20235] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.327700][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6735'. [ 284.338401][T20238] dummy0: left allmulticast mode [ 284.345683][T20238] bridge0: port 1(dummy0) entered disabled state [ 284.404123][T20235] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.415630][T20235] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.429101][T20243] batadv_slave_1: entered promiscuous mode [ 284.438023][T20243] batadv_slave_1: left promiscuous mode [ 284.467452][T20235] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.477487][T20235] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.516995][T20249] vlan1: entered promiscuous mode [ 284.522378][T20249] ip6gretap0: entered promiscuous mode [ 284.549378][T20235] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.559521][T20235] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.908701][T20257] loop0: detected capacity change from 0 to 1024 [ 284.945226][T20257] ext4: Unknown parameter 'uid<00000000000000000000' [ 284.967801][T20257] loop0: detected capacity change from 0 to 128 [ 284.978082][T20257] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.010375][ T6936] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.151504][T20266] ÿÿÿÿÿÿ: renamed from vlan1 [ 285.194395][T20270] openvswitch: netlink: Message has 6 unknown bytes. [ 285.408533][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6752'. [ 285.419942][T20280] dummy0: left allmulticast mode [ 285.425512][T20280] bridge0: port 3(dummy0) entered disabled state [ 285.434454][T20282] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 285.443619][T20280] bridge_slave_1: left allmulticast mode [ 285.449519][T20280] bridge_slave_1: left promiscuous mode [ 285.455569][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.465709][T20280] bridge_slave_0: left allmulticast mode [ 285.471803][T20280] bridge_slave_0: left promiscuous mode [ 285.477696][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.525062][T20286] batadv_slave_1: entered promiscuous mode [ 285.532375][T20286] batadv_slave_1: left promiscuous mode [ 286.492078][T20235] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.500501][T20235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.546417][T20235] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.555323][T20235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.565006][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 286.565025][ T29] audit: type=1326 audit(811.809:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 286.585952][T20235] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.603555][T20235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.612067][ T29] audit: type=1326 audit(811.840:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 286.635561][ T29] audit: type=1326 audit(811.840:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 286.645365][T20235] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.658968][ T29] audit: type=1326 audit(811.840:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 286.667300][T20235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.691089][ T29] audit: type=1326 audit(811.840:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 286.691127][ T29] audit: type=1326 audit(811.840:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 286.746391][ T29] audit: type=1326 audit(811.840:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1135e58e7 code=0x7ffc0000 [ 286.769959][ T29] audit: type=1326 audit(811.840:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb11358ab19 code=0x7ffc0000 [ 286.793010][ T29] audit: type=1326 audit(811.840:8265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1135e58e7 code=0x7ffc0000 [ 286.816536][ T29] audit: type=1326 audit(811.840:8266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb11358ab19 code=0x7ffc0000 [ 286.915722][T20314] batadv_slave_1: entered promiscuous mode [ 286.925715][T20314] batadv_slave_1: left promiscuous mode [ 287.003709][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6770'. [ 287.004345][T20322] vlan1: entered promiscuous mode [ 287.018449][T20322] syz_tun: entered promiscuous mode [ 287.029287][T20325] bridge_slave_1: left allmulticast mode [ 287.035554][T20325] bridge_slave_1: left promiscuous mode [ 287.041748][T20325] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.051060][T20325] bridge_slave_0: left allmulticast mode [ 287.056978][T20325] bridge_slave_0: left promiscuous mode [ 287.063139][T20325] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.139416][T20327] netlink: 87 bytes leftover after parsing attributes in process `syz.6.6785'. [ 287.213088][T20323] lo speed is unknown, defaulting to 1000 [ 287.328084][T20337] netlink: 'syz.6.6777': attribute type 10 has an invalid length. [ 287.336552][T20337] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6777'. [ 290.387560][T20350] loop0: detected capacity change from 0 to 512 [ 290.399913][T20357] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6795'. [ 290.410287][T20350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 290.442958][T20350] EXT4-fs (loop0): 1 truncate cleaned up [ 290.464487][T20350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.633008][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.898840][T20378] lo speed is unknown, defaulting to 1000 [ 291.157576][T20388] xt_cluster: node mask cannot exceed total number of nodes [ 291.182340][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6797'. [ 291.288497][T20395] lo: entered allmulticast mode [ 291.294867][T20394] lo: left allmulticast mode [ 291.416464][T20403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.451078][T20403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.481939][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6816'. [ 291.586694][T20412] loop0: detected capacity change from 0 to 128 [ 291.626687][T20412] syz.0.6806: attempt to access beyond end of device [ 291.626687][T20412] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 291.678518][T20412] syz.0.6806: attempt to access beyond end of device [ 291.678518][T20412] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 291.790462][T20412] syz.0.6806: attempt to access beyond end of device [ 291.790462][T20412] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 291.859271][T20415] syz.0.6806: attempt to access beyond end of device [ 291.859271][T20415] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 291.879351][T20412] syz.0.6806: attempt to access beyond end of device [ 291.879351][T20412] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 291.924073][T20412] syz.0.6806: attempt to access beyond end of device [ 291.924073][T20412] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 291.953447][T20415] syz.0.6806: attempt to access beyond end of device [ 291.953447][T20415] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 292.005433][T20412] syz.0.6806: attempt to access beyond end of device [ 292.005433][T20412] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 292.043594][T20415] syz.0.6806: attempt to access beyond end of device [ 292.043594][T20415] loop0: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 292.100021][T20415] syz.0.6806: attempt to access beyond end of device [ 292.100021][T20415] loop0: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 292.119835][T20411] lo speed is unknown, defaulting to 1000 [ 292.226746][ T6957] buffer_io_error: 246 callbacks suppressed [ 292.226765][ T6957] Buffer I/O error on dev loop0, logical block 305, lost async page write [ 292.513380][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6812'. [ 292.630792][T20425] lo speed is unknown, defaulting to 1000 [ 292.729643][T20435] loop7: detected capacity change from 0 to 512 [ 292.755306][T20435] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 292.794064][T20435] EXT4-fs (loop7): 1 truncate cleaned up [ 292.803213][T20435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.981367][T20444] netlink: 'syz.5.6819': attribute type 2 has an invalid length. [ 292.989578][T20444] netlink: 'syz.5.6819': attribute type 1 has an invalid length. [ 292.997610][T20444] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.6819'. [ 293.041342][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.207483][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.217668][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.750513][T20468] netlink: 'syz.7.6830': attribute type 10 has an invalid length. [ 293.767545][T20468] dummy0: left promiscuous mode [ 293.788557][T20468] team0: Port device dummy0 added [ 293.790282][T20472] loop4: detected capacity change from 0 to 2048 [ 293.814042][T20468] netlink: 'syz.7.6830': attribute type 10 has an invalid length. [ 293.840913][T20469] lo speed is unknown, defaulting to 1000 [ 293.843135][T20472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.847534][T20468] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 293.895176][T20468] team0: Failed to send options change via netlink (err -105) [ 293.905892][T20468] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 293.915957][T20468] team0: Port device dummy0 removed [ 293.922836][T20468] : (slave dummy0): Enslaving as an active interface with an up link [ 293.926069][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 293.926090][ T29] audit: type=1326 audit(819.525:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 293.960938][ T29] audit: type=1326 audit(819.525:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 293.984174][ T29] audit: type=1326 audit(819.525:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.007597][ T29] audit: type=1326 audit(819.525:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.031913][ T29] audit: type=1326 audit(819.525:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.055926][ T29] audit: type=1326 audit(819.525:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.063158][T20486] loop0: detected capacity change from 0 to 128 [ 294.079825][ T29] audit: type=1326 audit(819.525:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.109322][ T29] audit: type=1326 audit(819.525:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.165365][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.167853][ T29] audit: type=1326 audit(819.567:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.198310][ T29] audit: type=1326 audit(819.766:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20482 comm="syz.6.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0139e929 code=0x7ffc0000 [ 294.299231][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6836'. [ 294.358194][T20500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.394732][T20500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.902001][T20536] xt_cluster: node mask cannot exceed total number of nodes [ 295.249785][T20555] loop4: detected capacity change from 0 to 128 [ 295.486332][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6862'. [ 295.506014][T20554] Buffer I/O error on dev loop4, logical block 305, async page read [ 295.514248][T20554] Buffer I/O error on dev loop4, logical block 306, async page read [ 295.524172][T20554] Buffer I/O error on dev loop4, logical block 307, async page read [ 295.532692][T20554] Buffer I/O error on dev loop4, logical block 308, async page read [ 295.553101][T20554] Buffer I/O error on dev loop4, logical block 309, async page read [ 295.571109][T20569] xt_cluster: node mask cannot exceed total number of nodes [ 295.620228][T20554] Buffer I/O error on dev loop4, logical block 310, async page read [ 295.639245][T20554] Buffer I/O error on dev loop4, logical block 311, async page read [ 295.660640][T20554] Buffer I/O error on dev loop4, logical block 312, async page read [ 295.669315][T20554] Buffer I/O error on dev loop4, logical block 305, async page read [ 295.683861][T20571] loop0: detected capacity change from 0 to 512 [ 295.737752][T20571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.823104][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.227948][T20593] lo speed is unknown, defaulting to 1000 [ 296.273085][T20605] xt_cluster: node mask cannot exceed total number of nodes [ 296.559831][T20609] loop7: detected capacity change from 0 to 512 [ 296.594652][T20609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.630849][T20618] netlink: 'syz.0.6885': attribute type 10 has an invalid length. [ 296.662621][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.696055][T20618] team0: Port device dummy0 added [ 296.720325][T20618] netlink: 'syz.0.6885': attribute type 10 has an invalid length. [ 296.743629][T20618] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 296.778551][T20618] team0: Failed to send options change via netlink (err -105) [ 296.807656][T20618] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 296.832997][T20618] team0: Port device dummy0 removed [ 296.927764][T20637] tipc: Enabling of bearer rejected, failed to enable media [ 297.065301][T20651] loop4: detected capacity change from 0 to 512 [ 297.103045][T20651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.157785][T15712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.362705][T20669] netlink: 'syz.6.6906': attribute type 10 has an invalid length. [ 297.388152][T20669] netlink: 'syz.6.6906': attribute type 10 has an invalid length. [ 297.439454][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6907'. [ 297.494897][T20673] tipc: Enabled bearer , priority 0 [ 297.527195][T20672] tipc: Resetting bearer [ 297.565186][T20672] tipc: Disabling bearer [ 297.597864][T20682] lo speed is unknown, defaulting to 1000 [ 298.237136][T20728] syzkaller1: entered promiscuous mode [ 298.243778][T20728] syzkaller1: entered allmulticast mode [ 298.354977][T20732] tipc: Enabled bearer , priority 0 [ 298.367593][T20731] tipc: Resetting bearer [ 298.411191][T20731] tipc: Disabling bearer [ 298.583006][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6938'. [ 298.743902][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6945'. [ 298.782788][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6945'. [ 299.109960][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 299.109978][ T29] audit: type=1326 audit(824.974:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.150485][ T29] audit: type=1326 audit(824.974:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.174063][ T29] audit: type=1326 audit(824.974:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20778 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa30c9811e5 code=0x7ffc0000 [ 299.197726][ T29] audit: type=1326 audit(824.974:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.222297][ T29] audit: type=1326 audit(824.974:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.245871][ T29] audit: type=1326 audit(824.984:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.269672][ T29] audit: type=1326 audit(824.984:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.295052][ T29] audit: type=1326 audit(824.984:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.341999][ T29] audit: type=1326 audit(825.163:8751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20778 comm="syz.4.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa30c94e929 code=0x7ffc0000 [ 299.706939][T20810] loop0: detected capacity change from 0 to 512 [ 299.715056][T20810] EXT4-fs: Ignoring removed orlov option [ 299.722128][T20810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.752970][T20810] EXT4-fs (loop0): orphan cleanup on readonly fs [ 299.763657][ T29] audit: type=1326 audit(825.656:8752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.7.6968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1135ee929 code=0x7ffc0000 [ 299.791770][T20810] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6967: bg 0: block 248: padding at end of block bitmap is not set [ 299.810147][T20810] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6967: Failed to acquire dquot type 1 [ 299.831058][T20810] EXT4-fs (loop0): 1 truncate cleaned up [ 299.848756][T20810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.866997][T20810] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 299.877739][T20818] tmpfs: Bad value for 'mpol' [ 299.897106][T20810] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 299.919018][T20810] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6967'. [ 299.931272][T20810] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6967'. [ 299.965072][T20822] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6971'. [ 299.990362][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.087023][T20830] netlink: 'syz.5.6974': attribute type 10 has an invalid length. [ 300.095275][T20830] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6974'. [ 300.113714][T20834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6975'. [ 300.125524][T20830] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.135155][T20830] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.144251][T20830] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.153528][T20830] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.168164][T20830] team0: Port device geneve1 added [ 300.192983][T20832] syzkaller1: entered promiscuous mode [ 300.199167][T20832] syzkaller1: entered allmulticast mode [ 300.293364][T20849] tipc: Enabling of bearer rejected, failed to enable media [ 300.366367][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6986'. [ 301.176729][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103d93200: rx timeout, send abort [ 301.572958][T20919] loop7: detected capacity change from 0 to 512 [ 301.581778][T20919] EXT4-fs: Ignoring removed orlov option [ 301.589532][T20919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.603115][T20920] loop0: detected capacity change from 0 to 1024 [ 301.609355][T20919] EXT4-fs (loop7): orphan cleanup on readonly fs [ 301.619458][T20919] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7013: bg 0: block 248: padding at end of block bitmap is not set [ 301.641801][T20919] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7013: Failed to acquire dquot type 1 [ 301.653058][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103d93400: rx timeout, send abort [ 301.669660][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103d93200: abort rx timeout. Force session deactivation [ 301.676322][T20919] EXT4-fs (loop7): 1 truncate cleaned up [ 301.701799][T20920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.729878][T20919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.768702][T20919] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 301.793787][T20919] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 301.813174][T20919] netlink: 160 bytes leftover after parsing attributes in process `syz.7.7013'. [ 301.824968][T20928] loop4: detected capacity change from 0 to 8192 [ 301.835510][T20919] netlink: 160 bytes leftover after parsing attributes in process `syz.7.7013'. [ 301.898480][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.988558][T20939] loop7: detected capacity change from 0 to 512 [ 302.015065][T20939] EXT4-fs (loop7): 1 orphan inode deleted [ 302.023290][T20939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.042344][ T6936] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:40: Failed to release dquot type 1 [ 302.138832][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103d93400: abort rx timeout. Force session deactivation [ 302.222123][ T6415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.412444][T20962] netlink: 'syz.6.7028': attribute type 13 has an invalid length. [ 302.616142][T11059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.638582][T20967] veth0_vlan: entered allmulticast mode [ 302.774917][T20985] tipc: Enabling of bearer rejected, failed to enable media [ 302.851377][T20997] loop7: detected capacity change from 0 to 1024 [ 302.865041][T20997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.302159][T21026] syzkaller0: entered promiscuous mode [ 303.308770][T21026] syzkaller0: entered allmulticast mode [ 303.357708][T21016] lo speed is unknown, defaulting to 1000 [ 303.445842][T21016] chnl_net:caif_netlink_parms(): no params data found [ 303.559443][T20997] ================================================================== [ 303.567870][T20997] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 303.576355][T20997] [ 303.579028][T20997] write to 0xffff888119520f94 of 4 bytes by task 21005 on cpu 1: [ 303.587139][T20997] xas_set_mark+0x12b/0x140 [ 303.591693][T20997] tag_pages_for_writeback+0xc2/0x290 [ 303.597300][T20997] ext4_do_writepages+0x697/0x21c0 [ 303.602570][T20997] ext4_writepages+0x176/0x300 [ 303.607484][T20997] do_writepages+0x1c6/0x310 [ 303.612569][T20997] file_write_and_wait_range+0x156/0x2c0 [ 303.618523][T20997] generic_buffers_fsync_noflush+0x45/0x120 [ 303.624984][T20997] ext4_sync_file+0x1ab/0x690 [ 303.629982][T20997] vfs_fsync_range+0x10d/0x130 [ 303.635157][T20997] ext4_buffered_write_iter+0x34f/0x3c0 [ 303.641410][T20997] ext4_file_write_iter+0xdbf/0xf00 [ 303.647181][T20997] iter_file_splice_write+0x5f2/0x970 [ 303.652778][T20997] direct_splice_actor+0x156/0x2a0 [ 303.658155][T20997] splice_direct_to_actor+0x312/0x680 [ 303.663596][T20997] do_splice_direct+0xda/0x150 [ 303.668438][T20997] do_sendfile+0x380/0x650 [ 303.672925][T20997] __x64_sys_sendfile64+0x105/0x150 [ 303.678348][T20997] x64_sys_call+0xb39/0x2fb0 [ 303.682991][T20997] do_syscall_64+0xd2/0x200 [ 303.687646][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.693857][T20997] [ 303.696431][T20997] read to 0xffff888119520f94 of 4 bytes by task 20997 on cpu 0: [ 303.704556][T20997] file_write_and_wait_range+0x10e/0x2c0 [ 303.710262][T20997] generic_buffers_fsync_noflush+0x45/0x120 [ 303.716401][T20997] ext4_sync_file+0x1ab/0x690 [ 303.721331][T20997] vfs_fsync_range+0x10d/0x130 [ 303.726230][T20997] ext4_buffered_write_iter+0x34f/0x3c0 [ 303.731808][T20997] ext4_file_write_iter+0xdbf/0xf00 [ 303.737208][T20997] iter_file_splice_write+0x5f2/0x970 [ 303.742664][T20997] direct_splice_actor+0x156/0x2a0 [ 303.747928][T20997] splice_direct_to_actor+0x312/0x680 [ 303.753344][T20997] do_splice_direct+0xda/0x150 [ 303.758316][T20997] do_sendfile+0x380/0x650 [ 303.762760][T20997] __x64_sys_sendfile64+0x105/0x150 [ 303.768010][T20997] x64_sys_call+0xb39/0x2fb0 [ 303.772646][T20997] do_syscall_64+0xd2/0x200 [ 303.777530][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.783545][T20997] [ 303.786018][T20997] value changed: 0x02000021 -> 0x04000021 [ 303.791839][T20997] [ 303.794244][T20997] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.800615][T20997] CPU: 0 UID: 0 PID: 20997 Comm: syz.7.7043 Tainted: G W 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 303.815252][T20997] Tainted: [W]=WARN [ 303.819459][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.830075][T20997] ================================================================== [ 303.959266][ T6936] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 303.994404][ T6936] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 304.017680][ T6936] bridge3 (unregistering): left promiscuous mode [ 304.019661][T10496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.024166][ T6936] bridge3 (unregistering): left allmulticast mode [ 304.109287][ T6936] bond1 (unregistering): Released all slaves [ 304.118276][ T6936] bond0 (unregistering): Released all slaves [ 304.128873][ T6936] bond2 (unregistering): (slave batadv1): Releasing active interface [ 304.138833][ T6936] bond2 (unregistering): (slave batadv2): Releasing active interface [ 304.148740][ T6936] bond2 (unregistering): Released all slaves [ 304.158528][ T6936] bond3 (unregistering): Released all slaves [ 304.167273][T21016] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 304.213030][ T6936] tipc: Left network mode [ 304.278696][ T6936] team0 (unregistering): Port device team_slave_1 removed [ 304.291734][ T6936] team0 (unregistering): Port device team_slave_0 removed [ 304.502717][ T6936] IPVS: stop unused estimator thread 0... [ 304.595412][ T6936] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.641802][ T6936] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.719314][ T6936] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.756584][ T6936] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.891227][ T6936] bond0 (unregistering): Released all slaves [ 304.924038][ T6936] team0: Port device geneve1 removed [ 305.146811][ T6936] bond1 (unregistering): (slave bridge7): Removing an active aggregator [ 305.156699][ T6936] bond1 (unregistering): (slave bridge7): Releasing backup interface [ 305.166081][ T6936] bridge7 (unregistering): left promiscuous mode [ 305.172478][ T6936] bridge7 (unregistering): left allmulticast mode [ 305.262451][ T6936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.272065][ T6936] bond0 (unregistering): Released all slaves [ 305.282340][ T6936] bond1 (unregistering): Released all slaves [ 305.310575][ T6936] tipc: Disabling bearer [ 305.316561][ T6936] tipc: Left network mode [ 305.322708][ T6936] IPVS: stopping backup sync thread 14474 ... [ 305.377655][ T6936] team0 (unregistering): Port device team_slave_1 removed [ 305.388846][ T6936] team0 (unregistering): Port device team_slave_0 removed