last executing test programs: 4m44.486950961s ago: executing program 1 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) uname(&(0x7f0000000140)=""/227) 4m44.454116224s ago: executing program 1 (id=18): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 4m44.428198556s ago: executing program 1 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) io_setup(0x7, &(0x7f0000000280)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 4m44.288991798s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='tracefs\x00', 0x5, 0x0) 4m44.227141954s ago: executing program 1 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 4m43.794179172s ago: executing program 1 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x3da}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x43bc, 0x0, 0x0, 0x0, 0x0) 4m43.793983573s ago: executing program 32 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x3da}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x43bc, 0x0, 0x0, 0x0, 0x0) 4m6.137778712s ago: executing program 0 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$eJzs3c1rXFUbAPDnTj6b9m3zwgtv66bBhRZKJ22NrYJgxIUIFgq6tg2TaYiZZEpmUpqQhUUEQQQtLgTduPaj7tyKrv0b3IhIS9W0WHEhI3c+kkkmH5M2H23z+8FNzpl775zz3DNz7rlzDzMB7FkD6Z9MxJGI+DCJOFR/PImIrmqqM2K4tt29hflcuiRRqbz+e1Ld5u7CfC6a9kntr2cOR8T370Ycz7SWW5qdmxgpFLoa+cHy5OXB0uzcifHJkbH8WH7qzKmhodNnnz17Zuti/fPHuQO3Pnrl6a+H/37n/zc++CGJ4ThQX9ccx1YZiIH6MelKD+EyL291Ybss2WB95w7Vg81J35od9fY5EoeiQ0sBwGMvPf9XAIA9JnH+B4A9pvE5wN2F+Vxjaf58YN+ufCqxc26/FBG9tfgb9zdrazrr9+x6q/dB++4m0RmLtys3vN/VroGI+OzbN79Ml9im+5AAq3n7WkRc7B9o7f+TljkLm3WyjW0GVuT1f7BzvkvHP8+tNv7LLI5/YnH8k3YLtfkhPau8d+/HQER3c771/Z+5ueqOL25B4fXx3wu1uW1poE3jv8VJa/0d9dx/0szRiBgv5NO+7WBEHIuunkvjhfypdco4duefO2utax7//XH9rS/S8tP/S1tkbnb2LN9ndKQ88iAxN7t9LeKJzqW5ffda+v/e6lh3sf2jsTbifPMT3VrxxEeXkq8+/96na5Wfxp/G21ha499elc8jnorV429I1p2fOJg2/8na39XL+ObnT/rWKr+5/dMlLb9xLbCG7vuPtlXa/n3rx9+fLM3XzE+XtrL0duJf/fXfnbxRTTcOxtWRcnn6VER38lrr46eX9m3kG9un8dciXRl/Zt3Xf3oleLHNGDtv/fZVxJMH7y/+RVt1yblMGv/optp/84kb9yY61iq/vfYfqqaO1R9pp/9rt4IPcuwAAAAAAAAAAAAAAAAAAAAAAAAAoF2ZiDgQSSa7mM5kstnab3j/L/oyhWKpfPxScWZqNKq/ld0fXZnGV10equWTxvef9jflT6/IPxMR/42Ij3v2VfPZXLEwutvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/jV+/z/1a89u1w4A2Da9G25xJ78sW6lUKttYHwBg+218/gcAHjfrnP/37WQ9AICd4/ofAPYe538A2Huc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhm58+dS5fKXwvzuTQ/emV2ZqJ45cRovjSRnZzJZXPF6cvZsWJxrJDP5oqTGz1foVi8PBRTM1cHy/lSebA0O3dhsjgzVb4wPjkylr+Q79qRqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgc0qzcxMjhUJ++rFIvB8RD0E1tiORxENRjV1J/HLip8PrbXN9g5fx8EMRxSOW2O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR8G8AAAD//21CJgc=") chmod(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec382bf68c76d977) 4m6.060463109s ago: executing program 0 (id=956): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x2, [{}, {}]}, 0x48) 4m5.351093742s ago: executing program 0 (id=970): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2m26.375208724s ago: executing program 5 (id=3424): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.265726164s ago: executing program 5 (id=3426): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) 2m26.265415244s ago: executing program 5 (id=3428): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) add_key$keyring(&(0x7f0000000300), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m25.488433173s ago: executing program 5 (id=3447): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d07, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES16], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m24.326213965s ago: executing program 5 (id=3453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x43b4a43143cbebb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1ffffffd}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 2m24.323574166s ago: executing program 34 (id=3453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x43b4a43143cbebb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1ffffffd}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 1m46.16765408s ago: executing program 3 (id=4505): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000380)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14"], 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}], 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1m46.149304991s ago: executing program 3 (id=4506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r4, &(0x7f0000000140)='./file0\x00') close_range(r2, 0xffffffffffffffff, 0x0) 1m46.112998094s ago: executing program 3 (id=4507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) chroot(0x0) bind$can_raw(r2, &(0x7f0000000080)={0x1d, 0x0, 0x16000000}, 0x10) 1m46.056222019s ago: executing program 3 (id=4510): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 1m45.860143257s ago: executing program 3 (id=4514): unshare(0x60060200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m45.573895412s ago: executing program 3 (id=4517): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 1m45.573434112s ago: executing program 35 (id=4517): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 47.405888577s ago: executing program 8 (id=5814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 46.951469737s ago: executing program 8 (id=5824): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) close_range(r0, 0xffffffffffffffff, 0x0) 46.814069019s ago: executing program 8 (id=5827): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000022c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x1, 0x0) socket(0x10, 0x3, 0x0) 46.80097633s ago: executing program 8 (id=5828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 46.724794417s ago: executing program 8 (id=5830): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_load(0xffffffffffffffff, 0x0, 0x190da) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kexec_load(0x40000000, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 45.43820611s ago: executing program 8 (id=5848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) 45.411051333s ago: executing program 36 (id=5848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) 1.926412299s ago: executing program 9 (id=6729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x356f, 0x80, 0x3, 0x285}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) r5 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 1.769167883s ago: executing program 9 (id=6734): unshare(0x8000000) getpgid(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.716688348s ago: executing program 9 (id=6736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0x800, 0x783f, 0x40, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 1.645731454s ago: executing program 2 (id=6738): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.636647395s ago: executing program 9 (id=6739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) 1.475722169s ago: executing program 2 (id=6742): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.387273797s ago: executing program 9 (id=6743): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 1.366042079s ago: executing program 2 (id=6744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 771.225282ms ago: executing program 2 (id=6749): socket(0xa, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 704.925967ms ago: executing program 7 (id=6750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) modify_ldt$write2(0x11, &(0x7f00000000c0)={0xff, 0x20001000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 704.533237ms ago: executing program 2 (id=6751): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 644.743513ms ago: executing program 6 (id=6754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) 630.281374ms ago: executing program 2 (id=6755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 628.725234ms ago: executing program 6 (id=6757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3e0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) 592.262677ms ago: executing program 4 (id=6758): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xec4ba78a, 0x2, 0x100b, 0x8000, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 591.341687ms ago: executing program 4 (id=6768): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 523.968994ms ago: executing program 6 (id=6759): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) 523.630044ms ago: executing program 4 (id=6760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x92}, 0x18) add_key$keyring(&(0x7f0000000f40), 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000440)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 522.798194ms ago: executing program 9 (id=6761): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 514.046614ms ago: executing program 7 (id=6762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 474.961938ms ago: executing program 6 (id=6763): mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 464.559338ms ago: executing program 7 (id=6764): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 355.989878ms ago: executing program 6 (id=6765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r4}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(0xffffffffffffffff) 344.589439ms ago: executing program 7 (id=6766): pipe(&(0x7f0000005880)) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8840, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 200.202482ms ago: executing program 4 (id=6767): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2d3, &(0x7f0000000b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f00000001c0)) 198.866042ms ago: executing program 6 (id=6778): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) 160.825296ms ago: executing program 4 (id=6769): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x9}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 71.109943ms ago: executing program 4 (id=6770): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYRES16], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8c1, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 43.007636ms ago: executing program 7 (id=6771): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 0s ago: executing program 7 (id=6772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.205243][ T3725] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.216474][ T3725] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.244372][T18036] loop8: detected capacity change from 0 to 512 [ 238.250683][ T3725] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.282648][T18036] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 238.312713][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5106'. [ 238.359097][T18042] loop7: detected capacity change from 0 to 2048 [ 238.385023][T18042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.436586][T18051] lo speed is unknown, defaulting to 1000 [ 238.464810][T18054] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5109: bg 0: block 345: padding at end of block bitmap is not set [ 238.536740][T18054] EXT4-fs (loop7): Remounting filesystem read-only [ 238.601476][T18060] loop8: detected capacity change from 0 to 1024 [ 238.608387][T13648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.610935][T18060] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.5116: bad orphan inode 134217728 [ 238.629641][T18060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.727227][T18051] lo speed is unknown, defaulting to 1000 [ 238.805020][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5117'. [ 239.023760][T18079] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5123'. [ 239.076971][T18084] netlink: 'syz.7.5125': attribute type 7 has an invalid length. [ 239.084939][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5125'. [ 239.149161][T18081] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5124'. [ 239.158306][T18081] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5124'. [ 239.182280][T18081] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5124'. [ 239.263559][T16555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.322586][T18098] syzkaller0: entered allmulticast mode [ 239.339066][T18098] syzkaller0: entered promiscuous mode [ 239.356352][T18098] syzkaller0 (unregistering): left promiscuous mode [ 239.363029][T18098] syzkaller0 (unregistering): left allmulticast mode [ 239.446731][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 239.446826][ T29] audit: type=1326 audit(239.425:18219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.476183][ T29] audit: type=1326 audit(239.425:18220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.502474][T18104] lo speed is unknown, defaulting to 1000 [ 239.532556][T18109] hub 9-0:1.0: USB hub found [ 239.539439][T18110] loop7: detected capacity change from 0 to 256 [ 239.542758][T18109] hub 9-0:1.0: 8 ports detected [ 239.559902][ T29] audit: type=1326 audit(239.485:18221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.574442][T18110] FAT-fs (loop7): bogus number of FAT sectors [ 239.583042][ T29] audit: type=1326 audit(239.485:18222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.589050][T18110] FAT-fs (loop7): Can't find a valid FAT filesystem [ 239.612121][ T29] audit: type=1326 audit(239.485:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.641555][ T29] audit: type=1326 audit(239.505:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5301ddf90 code=0x7ffc0000 [ 239.664598][ T29] audit: type=1326 audit(239.505:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.687650][ T29] audit: type=1326 audit(239.505:18226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.710676][ T29] audit: type=1326 audit(239.505:18227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.733668][ T29] audit: type=1326 audit(239.505:18228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18108 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 239.806983][T18104] lo speed is unknown, defaulting to 1000 [ 239.881983][T18118] loop2: detected capacity change from 0 to 512 [ 239.904307][T18118] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5135: error while reading EA inode 32 err=-116 [ 239.929852][T18118] EXT4-fs (loop2): Remounting filesystem read-only [ 239.982307][T18118] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 240.006867][T18121] netlink: 'syz.8.5136': attribute type 30 has an invalid length. [ 240.035465][T18118] EXT4-fs (loop2): 1 orphan inode deleted [ 240.059784][T18118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.132642][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.317404][T18137] loop8: detected capacity change from 0 to 2048 [ 240.384701][T18137] Alternate GPT is invalid, using primary GPT. [ 240.391099][T18137] loop8: p2 p3 p7 [ 240.469601][T18156] vlan2: entered allmulticast mode [ 240.545560][T18167] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.641935][T18167] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.739931][T18167] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.856700][T18167] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.083249][ T3759] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.133798][ T3759] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.197222][ T3759] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.271333][ T3747] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.383549][T18218] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 241.390180][T18218] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.397818][T18218] vhci_hcd vhci_hcd.0: Device attached [ 241.406510][T18218] lo: entered promiscuous mode [ 241.411527][T18218] lo: entered allmulticast mode [ 241.416810][T18218] lo: left allmulticast mode [ 241.421440][T18218] lo: left promiscuous mode [ 241.426741][T18219] vhci_hcd: connection closed [ 241.426833][ T3759] vhci_hcd vhci_hcd.8: stop threads [ 241.436774][ T3759] vhci_hcd vhci_hcd.8: release socket [ 241.442181][ T3759] vhci_hcd vhci_hcd.8: disconnect device [ 241.498512][T18224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.513516][T18224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.795815][T18241] net_ratelimit: 13 callbacks suppressed [ 241.795832][T18241] Set syz1 is full, maxelem 65536 reached [ 241.878624][T18254] batadv0: mtu less than device minimum [ 241.884804][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.896005][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.907076][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.918496][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.929379][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.940376][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.951515][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.962438][T18254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.163937][T18265] vlan0: entered allmulticast mode [ 242.281520][T18273] loop2: detected capacity change from 0 to 512 [ 242.303598][T18273] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.5200: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 242.322148][T18273] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.5200: Bad quota inode: 3, type: 0 [ 242.334290][T18273] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 242.354312][T18273] EXT4-fs (loop2): mount failed [ 242.429982][T18279] netlink: 'syz.7.5202': attribute type 13 has an invalid length. [ 242.778229][T18279] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.785559][T18279] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.940063][T12457] syb2: Port: 1 Link DOWN [ 242.944560][ T3716] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.977898][ T3716] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.992420][ T3716] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.011026][ T3716] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.121408][T18305] bridge0: port 4(macsec1) entered blocking state [ 243.129749][T18305] bridge0: port 4(macsec1) entered disabled state [ 243.140548][T18305] macsec1: entered allmulticast mode [ 243.146258][T18305] bridge0: entered allmulticast mode [ 243.155727][T18305] macsec1: left allmulticast mode [ 243.161026][T18305] bridge0: left allmulticast mode [ 243.245580][T18327] loop7: detected capacity change from 0 to 512 [ 243.256562][T18327] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.280673][T13648] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 243.325706][T18332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18332 comm=syz.7.5222 [ 243.342266][T18335] netlink: 'syz.6.5221': attribute type 13 has an invalid length. [ 243.508679][T18349] __nla_validate_parse: 14 callbacks suppressed [ 243.508738][T18349] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 243.546728][T18349] lo speed is unknown, defaulting to 1000 [ 243.587338][T18352] vlan2: entered allmulticast mode [ 243.598883][T18349] lo speed is unknown, defaulting to 1000 [ 243.734812][T18341] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 244.378325][T18390] lo speed is unknown, defaulting to 1000 [ 244.426106][T18390] lo speed is unknown, defaulting to 1000 [ 244.621282][ T29] kauditd_printk_skb: 704 callbacks suppressed [ 244.621296][ T29] audit: type=1326 audit(244.595:18933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="syz.2.5259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5301df749 code=0x0 [ 244.767809][T18409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=18409 comm=syz.7.5251 [ 245.044155][ T29] audit: type=1326 audit(245.025:18934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.072771][ T29] audit: type=1326 audit(245.045:18935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.096013][ T29] audit: type=1326 audit(245.045:18936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.119195][ T29] audit: type=1326 audit(245.045:18937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.142270][ T29] audit: type=1326 audit(245.045:18938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.165398][ T29] audit: type=1326 audit(245.045:18939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.188547][ T29] audit: type=1326 audit(245.045:18940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.211728][ T29] audit: type=1326 audit(245.045:18941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.234911][ T29] audit: type=1326 audit(245.045:18942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 245.358862][T18440] Process accounting resumed [ 245.385461][T18441] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.5263'. [ 245.394648][T18441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5263'. [ 246.227085][T18454] lo speed is unknown, defaulting to 1000 [ 246.271875][T18454] lo speed is unknown, defaulting to 1000 [ 246.410482][T18464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5273'. [ 246.496191][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5274'. [ 246.532678][T18467] netlink: 'syz.2.5274': attribute type 13 has an invalid length. [ 246.869834][T18467] batman_adv: batadv0: Interface deactivated: dummy0 [ 247.011257][T18475] lo speed is unknown, defaulting to 1000 [ 247.076599][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5279'. [ 247.085649][T18481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5279'. [ 247.131602][T18475] lo speed is unknown, defaulting to 1000 [ 247.317386][T18499] .`: (slave bridge0): Releasing backup interface [ 247.330386][T18499] batman_adv: batadv0: Removing interface: dummy0 [ 247.345449][T18499] bond0: (slave veth7): Releasing active interface [ 247.351996][T18499] bond0: (slave veth7): the permanent HWaddr of slave - da:27:a0:5b:51:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 247.368875][T18499] batadv1: entered promiscuous mode [ 247.410840][T18499] bond0: (slave batadv1): Releasing active interface [ 247.418222][T18499] batadv1: left promiscuous mode [ 247.546603][T18519] loop7: detected capacity change from 0 to 512 [ 247.570981][T18519] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 247.595906][T18524] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5296'. [ 247.605098][T18524] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5296'. [ 247.628425][T18519] EXT4-fs (loop7): failed to initialize system zone (-117) [ 247.658509][T18519] EXT4-fs (loop7): mount failed [ 247.767020][T18542] loop2: detected capacity change from 0 to 512 [ 247.774713][T18542] EXT4-fs: Ignoring removed orlov option [ 247.780727][T18542] EXT4-fs: Mount option(s) incompatible with ext2 [ 248.013763][T18550] netlink: 'syz.8.5308': attribute type 10 has an invalid length. [ 248.026098][T18550] netlink: 'syz.8.5308': attribute type 10 has an invalid length. [ 248.036605][T18550] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.551515][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5312'. [ 248.560730][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5312'. [ 248.572231][ T3368] page_pool_release_retry() stalled pool shutdown: id 157, 1 inflight 60 sec [ 248.764037][T18589] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5322'. [ 249.073714][T18601] bridge0: entered promiscuous mode [ 249.083443][T18601] macsec1: entered promiscuous mode [ 249.097209][T18601] bridge0: port 3(macsec1) entered blocking state [ 249.103751][T18601] bridge0: port 3(macsec1) entered disabled state [ 249.122227][T18601] macsec1: entered allmulticast mode [ 249.127596][T18601] bridge0: entered allmulticast mode [ 249.142017][T18601] macsec1: left allmulticast mode [ 249.147202][T18601] bridge0: left allmulticast mode [ 249.153108][T18601] bridge0: left promiscuous mode [ 249.254646][T18594] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5325'. [ 249.281816][T18610] loop2: detected capacity change from 0 to 2048 [ 249.343234][T18610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 249.566625][ T3778] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 249.606167][ T3778] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 214 with error 28 [ 249.618603][ T3778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 249.618603][ T3778] [ 249.628309][ T3778] EXT4-fs (loop2): Total free blocks count 0 [ 249.634355][ T3778] EXT4-fs (loop2): Free/Dirty block details [ 249.640383][ T3778] EXT4-fs (loop2): free_blocks=2415919104 [ 249.646139][ T3778] EXT4-fs (loop2): dirty_blocks=224 [ 249.651350][ T3778] EXT4-fs (loop2): Block reservation details [ 249.657366][ T3778] EXT4-fs (loop2): i_reserved_data_blocks=14 [ 249.692264][T18625] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 214 with max blocks 2 with error 28 [ 250.003210][T18643] lo speed is unknown, defaulting to 1000 [ 250.125029][T18654] geneve2: entered promiscuous mode [ 250.130327][T18654] geneve2: entered allmulticast mode [ 250.148769][T18653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18653 comm=syz.8.5345 [ 250.167228][T18643] lo speed is unknown, defaulting to 1000 [ 250.341426][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 250.341438][ T29] audit: type=1326 audit(250.315:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.417834][T18670] loop2: detected capacity change from 0 to 512 [ 250.438259][T18670] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 250.462867][ T29] audit: type=1326 audit(250.355:19029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.486067][ T29] audit: type=1326 audit(250.355:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.509092][ T29] audit: type=1326 audit(250.355:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.532159][ T29] audit: type=1326 audit(250.355:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.555170][ T29] audit: type=1326 audit(250.355:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.578207][ T29] audit: type=1326 audit(250.365:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.601224][ T29] audit: type=1326 audit(250.375:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.624357][ T29] audit: type=1326 audit(250.375:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 250.647404][ T29] audit: type=1326 audit(250.375:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18669 comm="syz.2.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5301df783 code=0x7ffc0000 [ 250.678874][T18672] loop7: detected capacity change from 0 to 512 [ 250.723408][T18676] loop2: detected capacity change from 0 to 1024 [ 250.738853][T18672] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.765673][T18676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 250.797236][T18672] EXT4-fs (loop7): orphan cleanup on readonly fs [ 250.806902][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5357'. [ 250.822612][T18672] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.5353: Allocating blocks 41-42 which overlap fs metadata [ 250.885682][T18672] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5353: Failed to acquire dquot type 1 [ 250.942801][T18672] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 250.980576][T18672] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5353: corrupted inode contents [ 251.004594][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 251.036553][T18672] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.5353: mark_inode_dirty error [ 251.067318][T18672] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5353: corrupted inode contents [ 251.080447][T18672] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.5353: mark_inode_dirty error [ 251.093961][T18672] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5353: corrupted inode contents [ 251.107706][T18672] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 251.116837][T18672] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5353: corrupted inode contents [ 251.129537][T18672] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.5353: mark_inode_dirty error [ 251.131931][T18699] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5364'. [ 251.147838][T18672] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 251.159005][T18672] EXT4-fs (loop7): 1 truncate cleaned up [ 251.172524][T18672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.199790][T18672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.213617][T18701] loop2: detected capacity change from 0 to 1764 [ 251.226379][T18701] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5366'. [ 251.235514][T18701] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5366'. [ 251.245108][T18701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5366'. [ 251.277294][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5370'. [ 251.342060][T18714] hsr_slave_0: left promiscuous mode [ 251.349485][T18714] hsr_slave_1: left promiscuous mode [ 252.216381][T18740] netlink: 'syz.2.5381': attribute type 13 has an invalid length. [ 252.304774][T18750] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 252.317607][T18749] loop2: detected capacity change from 0 to 512 [ 252.326237][T18750] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 252.334569][T18749] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 252.353740][T18749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.360764][T18749] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5385: Failed to acquire dquot type 1 [ 252.376322][T18749] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5385: bg 0: block 40: padding at end of block bitmap is not set [ 252.390868][T18749] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 252.400009][T18749] EXT4-fs (loop2): 1 truncate cleaned up [ 252.406376][T18749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.422292][T18749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.590273][T18765] netlink: 'syz.4.5393': attribute type 10 has an invalid length. [ 252.619213][T18765] dummy0: left allmulticast mode [ 252.630246][T18765] team0: Failed to send options change via netlink (err -105) [ 252.638033][T18765] team0: Port device dummy0 added [ 252.668692][T18771] netlink: 'syz.4.5393': attribute type 10 has an invalid length. [ 252.740650][T18771] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 252.768313][T18771] team0: Failed to send options change via netlink (err -105) [ 252.795448][T18771] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 252.817186][T18771] team0: Port device dummy0 removed [ 253.011677][T18779] lo speed is unknown, defaulting to 1000 [ 253.077292][T18779] lo speed is unknown, defaulting to 1000 [ 253.105053][T18792] loop7: detected capacity change from 0 to 512 [ 253.126191][T18792] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.141605][T18792] EXT4-fs (loop7): mount failed [ 253.276190][T18807] netlink: 'syz.8.5408': attribute type 10 has an invalid length. [ 253.286260][T18809] ipip0: entered promiscuous mode [ 253.294873][T18807] bond0: (slave dummy0): Releasing backup interface [ 253.309594][T18807] netlink: 'syz.8.5408': attribute type 10 has an invalid length. [ 253.319677][T18807] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.517979][T18833] lo speed is unknown, defaulting to 1000 [ 253.526598][T18835] ipip0: entered promiscuous mode [ 253.625246][T18833] lo speed is unknown, defaulting to 1000 [ 253.668532][T18851] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.698516][T18852] ref_ctr_offset mismatch. inode: 0x7c8 offset: 0x0 ref_ctr_offset(old): 0x2b700000000 ref_ctr_offset(new): 0x3b780000014 [ 253.744313][T18851] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.814368][T18851] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.865050][T18851] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.911174][ T3759] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.930868][ T3759] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.954839][ T3759] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.976438][ T3759] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.992876][T18864] netlink: 'syz.2.5432': attribute type 7 has an invalid length. [ 254.000654][T18864] __nla_validate_parse: 6 callbacks suppressed [ 254.000669][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5432'. [ 254.044227][T18868] loop8: detected capacity change from 0 to 512 [ 254.050890][T18868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.058744][T18868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.067607][T18868] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.084348][T18868] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5434: Failed to acquire dquot type 1 [ 254.096297][T18868] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 254.110899][T18868] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.5434: corrupted inode contents [ 254.123156][T18868] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.5434: mark_inode_dirty error [ 254.134808][T18868] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.5434: corrupted inode contents [ 254.147184][T18868] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.5434: mark_inode_dirty error [ 254.158947][T18868] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.5434: corrupted inode contents [ 254.171112][T18868] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 254.180111][T18868] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.5434: corrupted inode contents [ 254.192369][T18868] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.5434: mark_inode_dirty error [ 254.203795][T18868] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 254.213050][T18868] EXT4-fs (loop8): 1 truncate cleaned up [ 254.219368][T18868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.246397][T16555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.395672][T18872] loop2: detected capacity change from 0 to 128 [ 254.464802][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5443'. [ 254.471215][T18872] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 254.659582][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.726386][T18913] loop2: detected capacity change from 0 to 512 [ 254.756375][T18913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.788385][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.876261][T18927] loop2: detected capacity change from 0 to 8192 [ 254.947286][T18944] netlink: 'syz.4.5466': attribute type 83 has an invalid length. [ 254.998448][T18954] netlink: 'syz.6.5469': attribute type 3 has an invalid length. [ 255.007369][T18954] siw: device registration error -23 [ 255.044940][T18957] tipc: Started in network mode [ 255.049934][T18957] tipc: Node identity ac14140f, cluster identity 4711 [ 255.058503][T18957] tipc: New replicast peer: 255.255.255.255 [ 255.064726][T18957] tipc: Enabled bearer , priority 10 [ 255.072844][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5472'. [ 255.081915][T18957] tipc: Disabling bearer [ 255.112155][T18963] syz_tun: entered promiscuous mode [ 255.123190][T18963] syz_tun: left promiscuous mode [ 255.321423][T18978] lo speed is unknown, defaulting to 1000 [ 255.377734][T18978] lo speed is unknown, defaulting to 1000 [ 255.385895][T18983] SELinux: failed to load policy [ 255.442322][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 255.442339][ T29] audit: type=1326 audit(255.385:19259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.471625][ T29] audit: type=1326 audit(255.385:19260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.494638][ T29] audit: type=1326 audit(255.385:19261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.517717][ T29] audit: type=1326 audit(255.385:19262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.540710][ T29] audit: type=1326 audit(255.385:19263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.563711][ T29] audit: type=1326 audit(255.385:19264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.586694][ T29] audit: type=1326 audit(255.385:19265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.609674][ T29] audit: type=1326 audit(255.385:19266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.632681][ T29] audit: type=1326 audit(255.385:19267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.655748][ T29] audit: type=1326 audit(255.385:19268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18985 comm="syz.8.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58258f749 code=0x7ffc0000 [ 255.748376][ T36] hid_parser_main: 54 callbacks suppressed [ 255.748398][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.761712][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.769226][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.776787][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.784223][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.791622][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.799105][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.806535][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.813983][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.821416][ T36] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 255.857293][T18992] kernel profiling enabled (shift: 63) [ 255.862954][T18992] profiling shift: 63 too large [ 255.909636][ T36] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 255.962767][T18994] loop2: detected capacity change from 0 to 1024 [ 255.969142][T18996] lo speed is unknown, defaulting to 1000 [ 256.015217][T18994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.060459][T18996] lo speed is unknown, defaulting to 1000 [ 256.081427][T18994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5487'. [ 256.159766][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.867631][T19022] netlink: 'syz.6.5496': attribute type 1 has an invalid length. [ 256.932851][T19022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.988351][T19026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5496'. [ 257.087487][T19026] bond5: entered allmulticast mode [ 257.171327][T19029] wg2: entered promiscuous mode [ 257.176289][T19029] wg2: entered allmulticast mode [ 257.223260][T19031] netlink: 'syz.6.5499': attribute type 30 has an invalid length. [ 257.272516][T19037] vlan3: entered allmulticast mode [ 257.485624][T19049] lo speed is unknown, defaulting to 1000 [ 257.561997][T19056] ref_ctr_offset mismatch. inode: 0x809 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x72 [ 257.593251][T19049] lo speed is unknown, defaulting to 1000 [ 258.149970][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5530'. [ 258.247666][T19111] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5532'. [ 258.304466][T19115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.554349][T19143] netlink: 'syz.4.5547': attribute type 1 has an invalid length. [ 258.571494][T19143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.584250][T19143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5547'. [ 258.607698][T19143] bond2: entered allmulticast mode [ 258.618947][T19150] bridge: RTM_NEWNEIGH with invalid ether address [ 258.733739][T19163] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5549'. [ 258.779967][T19169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5557'. [ 259.292940][T19192] loop7: detected capacity change from 0 to 128 [ 259.315899][T19192] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 259.409687][T13648] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.509388][T19205] __nla_validate_parse: 1 callbacks suppressed [ 259.509480][T19205] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5582'. [ 259.527664][T19205] gtp0: entered promiscuous mode [ 259.823652][T19217] netlink: 'syz.8.5574': attribute type 1 has an invalid length. [ 259.858716][T19217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.882226][T19219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5574'. [ 259.938390][T19219] bond1: entered allmulticast mode [ 260.255996][T19231] loop8: detected capacity change from 0 to 128 [ 260.318096][T19231] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 260.659557][T16555] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.767509][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 260.767525][ T29] audit: type=1326 audit(260.745:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.848126][ T29] audit: type=1326 audit(260.775:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.871116][ T29] audit: type=1326 audit(260.775:19704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.894265][ T29] audit: type=1326 audit(260.775:19705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.917261][ T29] audit: type=1326 audit(260.775:19706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.940267][ T29] audit: type=1326 audit(260.775:19707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.963370][ T29] audit: type=1326 audit(260.775:19708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 260.986350][ T29] audit: type=1326 audit(260.775:19709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 261.009315][ T29] audit: type=1326 audit(260.775:19710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 261.032364][ T29] audit: type=1326 audit(260.775:19711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 261.555496][T19294] loop2: detected capacity change from 0 to 8192 [ 261.714990][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 261.722956][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 261.800253][T19311] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 261.819476][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5612'. [ 261.860760][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5615'. [ 261.899489][T19314] gtp0: entered promiscuous mode [ 262.130037][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5622'. [ 262.176744][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5622'. [ 262.359538][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5627'. [ 262.872315][T19322] net_ratelimit: 11 callbacks suppressed [ 262.872330][T19322] Set syz1 is full, maxelem 65536 reached [ 262.971153][T19373] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 263.008223][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5638'. [ 263.053849][T19380] netlink: 'syz.7.5641': attribute type 1 has an invalid length. [ 263.088299][T19380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.104668][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5641'. [ 263.149936][T19383] bond1 (unregistering): Released all slaves [ 263.558330][T19407] netlink: 'syz.8.5653': attribute type 1 has an invalid length. [ 263.598818][T19407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.612652][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5653'. [ 263.743834][T19407] bond2 (unregistering): Released all slaves [ 264.314281][T19397] Set syz1 is full, maxelem 65536 reached [ 264.438972][T19449] netlink: 'syz.6.5670': attribute type 1 has an invalid length. [ 264.468510][T19449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.484116][T19449] bond6 (unregistering): Released all slaves [ 264.595251][T19457] __nla_validate_parse: 2 callbacks suppressed [ 264.595268][T19457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5673'. [ 264.614565][T19457] gtp0: entered promiscuous mode [ 264.778032][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.786879][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.799215][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5680'. [ 264.896440][T19483] loop7: detected capacity change from 0 to 2048 [ 264.933248][T19483] GPT:first_usable_lbas don't match. [ 264.938590][T19483] GPT:34 != 290 [ 264.942753][T19483] GPT: Use GNU Parted to correct GPT errors. [ 264.948874][T19483] loop7: p1 p2 p3 [ 265.059291][T19491] loop7: detected capacity change from 0 to 512 [ 265.066234][T19491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.084444][T19491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.174839][T13648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.398791][T19514] loop7: detected capacity change from 0 to 512 [ 265.405902][T19514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 265.407665][T19516] netlink: 'syz.2.5696': attribute type 1 has an invalid length. [ 265.421386][T19514] EXT4-fs (loop7): 1 truncate cleaned up [ 265.430226][T19514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.440347][T19516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.457113][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5696'. [ 265.474172][T19516] bond1 (unregistering): Released all slaves [ 265.572909][T13648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.747917][T19538] loop2: detected capacity change from 0 to 1024 [ 265.754666][T19538] EXT4-fs: inline encryption not supported [ 265.760636][T19538] EXT4-fs: Ignoring removed bh option [ 265.773811][T19538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.786507][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 265.786516][ T29] audit: type=1326 audit(265.765:20035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.803787][T19538] veth0: left promiscuous mode [ 265.818275][ T29] audit: type=1326 audit(265.795:20036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.820445][T19538] veth0: left allmulticast mode [ 265.820739][T19538] team1: left promiscuous mode [ 265.853629][T19538] team1: left allmulticast mode [ 265.858939][T19538] team2: left promiscuous mode [ 265.863772][T19538] team2: left allmulticast mode [ 265.875949][ T29] audit: type=1326 audit(265.825:20037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.899042][ T29] audit: type=1326 audit(265.835:20038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.922089][ T29] audit: type=1326 audit(265.845:20039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.945163][ T29] audit: type=1326 audit(265.855:20040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.974004][ T29] audit: type=1326 audit(265.885:20041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 265.997096][ T29] audit: type=1326 audit(265.885:20042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 266.020887][ T29] audit: type=1326 audit(265.905:20043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 266.044634][ T29] audit: type=1326 audit(265.905:20044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.7.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 266.087280][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.179906][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5711'. [ 266.256010][T19567] loop8: detected capacity change from 0 to 512 [ 266.263443][T19567] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 266.275093][T19567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 266.283456][T19567] System zones: 1-12 [ 266.288125][T19567] EXT4-fs (loop8): 1 truncate cleaned up [ 266.294903][T19567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.322535][T16555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.692899][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5732'. [ 266.701923][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5732'. [ 266.731310][T19603] syz_tun: entered promiscuous mode [ 266.738021][T19603] syz_tun: left promiscuous mode [ 266.755714][T19606] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5733'. [ 266.918042][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5735'. [ 266.929460][T19616] ip6gre2: entered allmulticast mode [ 267.012476][T19624] loop7: detected capacity change from 0 to 128 [ 267.021704][T19624] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 267.035841][T19622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19622 comm=syz.4.5741 [ 267.168252][T19635] syzkaller0: entered allmulticast mode [ 267.184164][T19635] syzkaller0: entered promiscuous mode [ 267.211693][T19635] syzkaller0 (unregistering): left allmulticast mode [ 267.218555][T19635] syzkaller0 (unregistering): left promiscuous mode [ 267.871723][T19640] Set syz1 is full, maxelem 65536 reached [ 268.027720][T19664] ref_ctr_offset mismatch. inode: 0x1769 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 268.281158][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5762'. [ 268.305208][T19676] netlink: 'syz.6.5763': attribute type 1 has an invalid length. [ 268.319351][T19676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.333272][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5763'. [ 268.344336][T19676] bond6 (unregistering): Released all slaves [ 268.461961][T19686] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.514052][T19686] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.613577][T19686] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.653270][T19701] loop2: detected capacity change from 0 to 1024 [ 268.660042][T19701] EXT4-fs: Ignoring removed nobh option [ 268.666194][T19701] EXT4-fs: Ignoring removed bh option [ 268.685997][T19686] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.698415][T19701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.717687][T19701] EXT4-fs (loop2): pa ffff888107a273f0: logic 1, phys. 129, len 4 [ 268.726238][T19701] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 268.755643][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.782272][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.810776][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.827812][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.846499][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.867647][T19718] netlink: 'syz.2.5780': attribute type 1 has an invalid length. [ 268.875451][T19718] netlink: 'syz.2.5780': attribute type 4 has an invalid length. [ 268.885378][T19718] netlink: 'syz.2.5780': attribute type 1 has an invalid length. [ 268.893771][T19718] netlink: 'syz.2.5780': attribute type 4 has an invalid length. [ 268.997248][T19730] ip6gre1: entered allmulticast mode [ 269.531218][T19769] lo speed is unknown, defaulting to 1000 [ 269.638880][T19780] netlink: 'syz.7.5799': attribute type 1 has an invalid length. [ 269.659541][T19780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.674204][T19780] __nla_validate_parse: 4 callbacks suppressed [ 269.674256][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5799'. [ 269.756323][T19780] bond1 (unregistering): Released all slaves [ 269.779606][T19769] lo speed is unknown, defaulting to 1000 [ 269.858876][T19757] Set syz1 is full, maxelem 65536 reached [ 269.952897][T19800] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.5802'. [ 269.979708][T19800] netlink: zone id is out of range [ 269.984888][T19800] netlink: zone id is out of range [ 270.010428][T19800] netlink: zone id is out of range [ 270.015737][T19800] netlink: zone id is out of range [ 270.053222][T19800] netlink: zone id is out of range [ 270.058448][T19800] netlink: zone id is out of range [ 270.064220][T19800] netlink: zone id is out of range [ 270.069944][T19800] netlink: zone id is out of range [ 270.075167][T19800] netlink: zone id is out of range [ 270.175010][T19819] netlink: 'syz.2.5807': attribute type 3 has an invalid length. [ 270.215568][T19819] netlink: 'syz.2.5807': attribute type 3 has an invalid length. [ 270.347467][T19839] loop2: detected capacity change from 0 to 1024 [ 270.379449][T19839] EXT4-fs: Ignoring removed bh option [ 270.420510][T19839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.520171][T19839] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 270.569087][T19839] EXT4-fs (loop2): Remounting filesystem read-only [ 270.596384][T19839] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 270.687552][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.049807][T19909] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.5821'. [ 271.064396][T19907] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 271.647730][T19993] lo speed is unknown, defaulting to 1000 [ 271.685323][T19993] lo speed is unknown, defaulting to 1000 [ 272.113879][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 272.113937][ T29] audit: type=1326 audit(272.095:20101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.143957][ T29] audit: type=1326 audit(272.095:20102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.166996][ T29] audit: type=1326 audit(272.105:20103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.190026][ T29] audit: type=1326 audit(272.105:20104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.213606][ T29] audit: type=1326 audit(272.105:20105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.236602][ T29] audit: type=1326 audit(272.105:20106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.260227][ T29] audit: type=1326 audit(272.105:20107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.283796][ T29] audit: type=1326 audit(272.105:20108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.306857][ T29] audit: type=1326 audit(272.105:20109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.330498][ T29] audit: type=1326 audit(272.105:20110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.7.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 272.525779][T20024] netlink: 'syz.7.5846': attribute type 1 has an invalid length. [ 272.533598][T20024] netlink: 'syz.7.5846': attribute type 4 has an invalid length. [ 272.541343][T20024] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.5846'. [ 272.551959][T20024] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.5846'. [ 272.623179][T20020] lo speed is unknown, defaulting to 1000 [ 272.634887][ T31] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.679578][T20020] lo speed is unknown, defaulting to 1000 [ 272.690511][ T31] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.759921][T20034] lo speed is unknown, defaulting to 1000 [ 272.759932][T20027] lo speed is unknown, defaulting to 1000 [ 272.759981][T20027] lo speed is unknown, defaulting to 1000 [ 272.760451][T20027] lo speed is unknown, defaulting to 1000 [ 272.837486][ T31] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.938672][T20034] lo speed is unknown, defaulting to 1000 [ 273.001743][T20039] lo speed is unknown, defaulting to 1000 [ 273.009531][T20027] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 273.021972][ T31] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.052849][T20027] lo speed is unknown, defaulting to 1000 [ 273.066466][T20027] lo speed is unknown, defaulting to 1000 [ 273.084627][T20027] lo speed is unknown, defaulting to 1000 [ 273.101197][T20027] lo speed is unknown, defaulting to 1000 [ 273.101477][T20059] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5856'. [ 273.116765][T20027] lo speed is unknown, defaulting to 1000 [ 273.116770][T20039] lo speed is unknown, defaulting to 1000 [ 273.143368][T20027] lo speed is unknown, defaulting to 1000 [ 273.176482][ T31] bridge_slave_1: left allmulticast mode [ 273.182217][ T31] bridge_slave_1: left promiscuous mode [ 273.187871][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.228745][ T31] bridge_slave_0: left allmulticast mode [ 273.234493][ T31] bridge_slave_0: left promiscuous mode [ 273.240175][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.445958][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.456176][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.466701][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 273.476663][ T31] bond0 (unregistering): Released all slaves [ 273.485580][ T31] bond1 (unregistering): Released all slaves [ 273.493826][T20027] lo speed is unknown, defaulting to 1000 [ 273.510061][T20027] lo speed is unknown, defaulting to 1000 [ 273.517194][T20039] lo speed is unknown, defaulting to 1000 [ 273.528159][T20027] lo speed is unknown, defaulting to 1000 [ 273.528886][T20070] lo speed is unknown, defaulting to 1000 [ 273.550844][ T31] tipc: Left network mode [ 273.555548][T20027] lo speed is unknown, defaulting to 1000 [ 273.602746][T20070] lo speed is unknown, defaulting to 1000 [ 273.680151][ T3399] Process accounting resumed [ 273.703060][T20039] chnl_net:caif_netlink_parms(): no params data found [ 273.911825][ T31] hsr_slave_0: left promiscuous mode [ 273.936427][ T31] hsr_slave_1: left promiscuous mode [ 273.953552][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.960959][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.997200][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.004748][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.014407][ T31] veth1_macvtap: left promiscuous mode [ 274.026881][ T31] veth0_macvtap: left promiscuous mode [ 274.038043][ T31] veth1_vlan: left promiscuous mode [ 274.048853][ T31] veth0_vlan: left promiscuous mode [ 274.241879][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5870'. [ 274.262800][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.269953][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.292664][T20039] bridge_slave_0: entered allmulticast mode [ 274.299163][T20039] bridge_slave_0: entered promiscuous mode [ 274.314707][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.321810][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.330701][T20039] bridge_slave_1: entered allmulticast mode [ 274.337504][T20039] bridge_slave_1: entered promiscuous mode [ 274.347683][T20107] pim6reg: entered allmulticast mode [ 274.374518][T20107] pim6reg: left allmulticast mode [ 274.407562][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.419283][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.445920][T20039] team0: Port device team_slave_0 added [ 274.452769][T20039] team0: Port device team_slave_1 added [ 274.471827][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.478833][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.504838][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.517349][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.524466][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.550420][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.585387][T20039] hsr_slave_0: entered promiscuous mode [ 274.592642][T20039] hsr_slave_1: entered promiscuous mode [ 274.598563][T20039] debugfs: 'hsr0' already exists in 'hsr' [ 274.604362][T20039] Cannot create hsr debugfs directory [ 274.730440][T20039] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 274.740102][T20039] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 274.752496][T20039] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 274.807125][T20039] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 274.917355][T20153] loop2: detected capacity change from 0 to 512 [ 274.925513][T20153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.959337][T20153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.969101][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.986245][T20153] EXT4-fs (loop2): shut down requested (0) [ 275.018766][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.036060][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.043348][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.066120][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.101852][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.108992][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.273273][T20166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5891'. [ 275.357476][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.614755][T20039] veth0_vlan: entered promiscuous mode [ 275.633759][T20039] veth1_vlan: entered promiscuous mode [ 275.669325][T20039] veth0_macvtap: entered promiscuous mode [ 275.686274][T20039] veth1_macvtap: entered promiscuous mode [ 275.711502][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.734808][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.757672][ T3783] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.889945][ T3783] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.921290][ T3783] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.941687][ T3783] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.059479][T20204] netlink: 664 bytes leftover after parsing attributes in process `syz.7.5899'. [ 276.150249][T20216] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 276.317043][T20229] tipc: Started in network mode [ 276.322022][T20229] tipc: Node identity ac14140f, cluster identity 4711 [ 276.347007][T20229] tipc: New replicast peer: 255.255.255.255 [ 276.353891][T20229] tipc: Enabled bearer , priority 10 [ 276.401211][T20208] loop2: detected capacity change from 0 to 32768 [ 276.422535][T20208] loop2: p1 p2 p3 < p5 p6 > [ 276.434177][T20208] loop2: p2 size 16775168 extends beyond EOD, truncated [ 276.448601][T20233] lo speed is unknown, defaulting to 1000 [ 276.463186][T20208] loop2: p5 start 4294970168 is beyond EOD, truncated [ 276.520219][T20239] loop9: detected capacity change from 0 to 1024 [ 276.562535][T20233] lo speed is unknown, defaulting to 1000 [ 276.563132][T20239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.607271][T20233] lo speed is unknown, defaulting to 1000 [ 276.689586][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.723023][ T36] Process accounting resumed [ 276.810986][T20262] SET target dimension over the limit! [ 277.054959][T20274] program syz.2.5929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.069298][T20274] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.278817][ T29] kauditd_printk_skb: 1854 callbacks suppressed [ 277.278833][ T29] audit: type=1326 audit(277.255:21965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f245ae365e7 code=0x7ffc0000 [ 277.323111][ T29] audit: type=1326 audit(277.295:21966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245addb829 code=0x7ffc0000 [ 277.346117][ T29] audit: type=1326 audit(277.295:21967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f245ae365e7 code=0x7ffc0000 [ 277.369015][ T29] audit: type=1326 audit(277.295:21968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245addb829 code=0x7ffc0000 [ 277.391952][ T29] audit: type=1326 audit(277.295:21969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 277.414999][ T29] audit: type=1326 audit(277.295:21970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 277.438097][ T29] audit: type=1326 audit(277.295:21971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 277.461267][ T29] audit: type=1326 audit(277.295:21972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f245ae365e7 code=0x7ffc0000 [ 277.484267][ T29] audit: type=1326 audit(277.295:21973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245addb829 code=0x7ffc0000 [ 277.493657][ T36] tipc: Node number set to 2886997007 [ 277.507298][ T29] audit: type=1326 audit(277.295:21974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20281 comm="syz.6.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f245ae365e7 code=0x7ffc0000 [ 277.921152][T20317] SELinux: policydb version 0 does not match my version range 15-35 [ 277.931115][T20317] SELinux: failed to load policy [ 277.980354][T20323] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 278.036066][T20325] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 278.100452][T20327] veth16: entered promiscuous mode [ 278.105873][T20327] veth16: entered allmulticast mode [ 278.257995][T20337] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5952'. [ 278.456344][T20351] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 280.307147][T20384] net_ratelimit: 96 callbacks suppressed [ 280.307165][T20384] Set syz1 is full, maxelem 65536 reached [ 280.325883][T20401] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 280.395571][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5985'. [ 280.408031][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5985'. [ 280.433145][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5985'. [ 280.446041][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5985'. [ 280.539840][T20432] loop9: detected capacity change from 0 to 1024 [ 280.559002][T20432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.651438][T20449] validate_nla: 2 callbacks suppressed [ 280.651453][T20449] netlink: 'syz.7.5998': attribute type 1 has an invalid length. [ 280.664879][T20449] netlink: 'syz.7.5998': attribute type 2 has an invalid length. [ 280.681974][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5998'. [ 280.960505][T20477] ip6t_srh: unknown srh match flags 4000 [ 280.985091][T20479] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6011'. [ 280.995150][T20479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20479 comm=syz.7.6011 [ 281.007729][T20479] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6011'. [ 281.017391][T20479] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6011'. [ 281.096394][T20481] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 281.438013][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.626126][T20508] tipc: Started in network mode [ 281.631103][T20508] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 281.656681][T20508] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 281.665680][T20508] tipc: Enabled bearer , priority 10 [ 281.753792][T20511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6023'. [ 281.786514][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6023'. [ 281.796169][T20513] lo speed is unknown, defaulting to 1000 [ 281.841475][T20513] lo speed is unknown, defaulting to 1000 [ 281.933569][T20513] lo speed is unknown, defaulting to 1000 [ 282.662151][ T36] tipc: Node number set to 1 [ 282.743133][T20590] netlink: 'syz.7.6055': attribute type 7 has an invalid length. [ 283.686380][T20628] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 283.686380][T20628] program syz.9.6070 not setting count and/or reply_len properly [ 283.747748][ T29] kauditd_printk_skb: 1378 callbacks suppressed [ 283.747833][ T29] audit: type=1400 audit(283.725:23353): avc: denied { mount } for pid=20631 comm="syz.4.6073" name="/" dev="hugetlbfs" ino=65592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 283.924324][T12456] page_pool_release_retry() stalled pool shutdown: id 187, 1 inflight 60 sec [ 283.940615][T20647] lo speed is unknown, defaulting to 1000 [ 284.022390][T20652] netlink: 'syz.2.6079': attribute type 12 has an invalid length. [ 284.040349][T20647] lo speed is unknown, defaulting to 1000 [ 284.091078][T20647] lo speed is unknown, defaulting to 1000 [ 284.163535][ T29] audit: type=1400 audit(284.145:23354): avc: denied { watch } for pid=20655 comm="syz.2.6081" path="pipe:[65108]" dev="pipefs" ino=65108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 284.468054][ T29] audit: type=1400 audit(284.445:23355): avc: denied { setattr } for pid=20665 comm="syz.6.6085" name="secretmem" dev="secretmem" ino=65121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.609116][T20673] netlink: 'syz.6.6088': attribute type 13 has an invalid length. [ 284.651831][T20673] gretap0: refused to change device tx_queue_len [ 284.664143][T20673] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.180018][ T29] audit: type=1326 audit(285.155:23356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.203927][ T29] audit: type=1326 audit(285.155:23357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.227078][ T29] audit: type=1326 audit(285.155:23358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.250675][ T29] audit: type=1326 audit(285.155:23359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.273633][ T29] audit: type=1326 audit(285.155:23360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.297308][ T29] audit: type=1326 audit(285.155:23361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.393701][ T29] audit: type=1326 audit(285.235:23362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.7.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 285.545660][T20705] __nla_validate_parse: 12 callbacks suppressed [ 285.545675][T20705] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6102'. [ 285.554842][T20708] sctp: [Deprecated]: syz.9.6104 (pid 20708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.554842][T20708] Use struct sctp_sack_info instead [ 285.613659][T20714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.620925][T20714] IPv6: NLM_F_CREATE should be set when creating new route [ 285.721638][T20727] loop9: detected capacity change from 0 to 1024 [ 285.745555][T20727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.771657][T20734] netlink: 'syz.4.6115': attribute type 2 has an invalid length. [ 285.780180][T20734] netlink: 199776 bytes leftover after parsing attributes in process `syz.4.6115'. [ 285.803298][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.468228][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6143'. [ 286.592757][T20805] netlink: 'syz.2.6146': attribute type 13 has an invalid length. [ 286.641052][T20805] gretap0: refused to change device tx_queue_len [ 286.656412][T20805] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.928991][T20817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6152'. [ 287.035011][T20821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6154'. [ 287.607380][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6164'. [ 287.645228][T20845] team0: Port device team_slave_1 removed [ 287.691464][T20848] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6165'. [ 287.793199][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6171'. [ 288.048188][T20869] netlink: 664 bytes leftover after parsing attributes in process `syz.6.6173'. [ 288.081040][T20873] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6177'. [ 288.878232][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 288.878265][ T29] audit: type=1326 audit(288.855:23578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 288.908286][ T29] audit: type=1326 audit(288.855:23579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 288.932041][ T29] audit: type=1326 audit(288.905:23580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 288.955964][ T29] audit: type=1326 audit(288.905:23581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 288.979817][ T29] audit: type=1326 audit(288.905:23582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 289.003571][ T29] audit: type=1326 audit(288.905:23583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 289.004471][T20946] netlink: 'syz.7.6201': attribute type 3 has an invalid length. [ 289.026587][ T29] audit: type=1326 audit(288.905:23584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 289.026622][ T29] audit: type=1326 audit(288.905:23585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 289.081887][ T29] audit: type=1326 audit(288.905:23586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 289.105558][ T29] audit: type=1326 audit(288.905:23587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.4.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9190f749 code=0x7ffc0000 [ 290.025664][T20981] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.148231][T20981] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.193618][T20986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20986 comm=syz.4.6221 [ 290.209396][T20981] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.270893][T20981] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.321533][ T37] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.334778][T11845] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.351176][T11845] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.359971][T11845] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.378562][T20984] lo speed is unknown, defaulting to 1000 [ 290.438693][T20984] lo speed is unknown, defaulting to 1000 [ 290.476496][T20984] lo speed is unknown, defaulting to 1000 [ 290.585798][T20996] loop9: detected capacity change from 0 to 512 [ 290.678060][T21000] syzkaller0: entered allmulticast mode [ 290.683878][T21000] syzkaller0: entered promiscuous mode [ 290.694574][T21000] syzkaller0 (unregistering): left allmulticast mode [ 290.701278][T21000] syzkaller0 (unregistering): left promiscuous mode [ 290.775663][T21008] __nla_validate_parse: 1 callbacks suppressed [ 290.775680][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6229'. [ 290.782607][T21007] veth2: entered promiscuous mode [ 290.796482][T21007] veth2: entered allmulticast mode [ 290.987894][T21023] loop9: detected capacity change from 0 to 512 [ 291.077357][T21025] netlink: 'syz.6.6239': attribute type 4 has an invalid length. [ 291.085659][T21025] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6239'. [ 291.133555][T21025] .`: renamed from bond0 [ 291.155984][T21023] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.6238: invalid block [ 291.189617][T21023] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6238: invalid indirect mapped block 4294967295 (level 1) [ 291.205482][T21023] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6238: invalid indirect mapped block 4294967295 (level 1) [ 291.220589][T21023] EXT4-fs (loop9): 2 truncates cleaned up [ 291.231428][T21023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.248483][T21023] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.461315][T21037] SELinux: policydb version 0 does not match my version range 15-35 [ 291.482207][T21037] SELinux: failed to load policy [ 291.529610][T21048] loop2: detected capacity change from 0 to 1024 [ 291.544513][T21048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.568370][T21048] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 291.600038][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.613853][T21061] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.6252'. [ 291.812390][T21092] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 291.860668][T21101] netlink: 'syz.2.6270': attribute type 4 has an invalid length. [ 292.108806][T21144] loop9: detected capacity change from 0 to 1764 [ 292.176495][T21158] loop9: detected capacity change from 0 to 128 [ 292.203083][ T3737] Bluetooth: hci0: Frame reassembly failed (-84) [ 292.857228][T21272] loop2: detected capacity change from 0 to 164 [ 292.915126][T21282] bridge: RTM_NEWNEIGH with invalid ether address [ 293.019119][T21291] ªªªªª: renamed from vlan0 [ 293.489088][T21317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.500542][T21317] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 293.895817][T21331] all: renamed from team_slave_0 [ 293.976884][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 293.976898][ T29] audit: type=1326 audit(293.955:24050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.007125][ T29] audit: type=1326 audit(293.955:24051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.030480][ T29] audit: type=1326 audit(294.005:24052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.054303][ T29] audit: type=1326 audit(294.005:24053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.077409][ T29] audit: type=1326 audit(294.005:24054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.100944][ T29] audit: type=1326 audit(294.005:24055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.124705][ T29] audit: type=1326 audit(294.035:24056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.147725][ T29] audit: type=1326 audit(294.035:24057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.171575][ T29] audit: type=1326 audit(294.095:24058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.202373][ T29] audit: type=1326 audit(294.175:24059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21337 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 294.236000][T21343] netlink: 'syz.4.6319': attribute type 10 has an invalid length. [ 294.252769][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 294.258949][ T3621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.441590][T21351] loop2: detected capacity change from 0 to 1024 [ 294.452858][T21353] netlink: 'syz.6.6323': attribute type 1 has an invalid length. [ 294.453660][T21351] EXT4-fs: Ignoring removed orlov option [ 294.460652][T21353] netlink: 'syz.6.6323': attribute type 2 has an invalid length. [ 294.475038][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6323'. [ 294.493752][T21351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.844563][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.865986][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6329'. [ 295.173624][T21158] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 295.417015][T21380] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6333'. [ 295.469206][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6333'. [ 295.685328][T21390] netlink: 'syz.2.6337': attribute type 13 has an invalid length. [ 295.700017][T21390] gretap0: refused to change device tx_queue_len [ 295.717295][T21390] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.788225][T21392] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 295.924002][T21412] loop2: detected capacity change from 0 to 128 [ 295.944242][T21413] syzkaller0: entered allmulticast mode [ 295.954731][T21413] syzkaller0: entered promiscuous mode [ 295.963907][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6349'. [ 295.972986][T21415] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6349'. [ 295.982895][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6349'. [ 295.991919][T21415] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6349'. [ 296.001049][T21415] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6349'. [ 296.011871][T21413] syzkaller0 (unregistering): left allmulticast mode [ 296.018640][T21413] syzkaller0 (unregistering): left promiscuous mode [ 296.833548][T21524] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.935291][T21524] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.053606][T21524] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.134146][T21524] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.207251][T21551] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.6359'. [ 297.226598][T21541] Set syz1 is full, maxelem 65536 reached [ 297.243399][T21553] ip6gre3: entered allmulticast mode [ 297.270510][ T3742] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.300863][ T3742] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.332271][ T3742] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.371024][ T3742] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.454590][T21564] lo speed is unknown, defaulting to 1000 [ 297.466584][T21566] netlink: 'syz.9.6367': attribute type 13 has an invalid length. [ 297.505079][T21566] gretap0: refused to change device tx_queue_len [ 297.532788][T21566] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.565487][T21564] lo speed is unknown, defaulting to 1000 [ 297.636526][T21564] lo speed is unknown, defaulting to 1000 [ 297.756157][T21577] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.6371'. [ 298.666765][T21590] Set syz1 is full, maxelem 65536 reached [ 298.936324][T21618] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 298.986450][T21613] rdma_op ffff88813293e580 conn xmit_rdma 0000000000000000 [ 299.042933][T21627] sctp: [Deprecated]: syz.2.6392 (pid 21627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.042933][T21627] Use struct sctp_sack_info instead [ 299.408624][T21633] Set syz1 is full, maxelem 65536 reached [ 299.560960][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 299.593631][T21648] ip6gre3: entered allmulticast mode [ 299.696136][T21653] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 299.712538][T21655] Invalid argument reading file caps for ./file0 [ 299.755306][T21657] sctp: [Deprecated]: syz.6.6404 (pid 21657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.755306][T21657] Use struct sctp_sack_info instead [ 299.858074][T21667] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1453785108/1453785109 [ 299.868738][T21667] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1453785108/1453785109 [ 299.943478][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6410'. [ 299.988323][T21674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6410'. [ 300.441383][T21681] Set syz1 is full, maxelem 65536 reached [ 300.695723][ T29] kauditd_printk_skb: 1020 callbacks suppressed [ 300.695737][ T29] audit: type=1326 audit(300.675:25080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.731979][ T29] audit: type=1326 audit(300.675:25081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.756068][ T29] audit: type=1326 audit(300.675:25082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.779264][ T29] audit: type=1326 audit(300.705:25083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.802911][ T29] audit: type=1326 audit(300.705:25084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.825914][ T29] audit: type=1326 audit(300.705:25085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.849571][ T29] audit: type=1326 audit(300.705:25086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.873318][ T29] audit: type=1326 audit(300.705:25087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.896478][ T29] audit: type=1326 audit(300.705:25088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 300.920170][ T29] audit: type=1326 audit(300.705:25089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.7.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022d7f749 code=0x7ffc0000 [ 301.301699][T21726] Set syz1 is full, maxelem 65536 reached [ 301.427256][T21738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6437'. [ 301.441140][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6437'. [ 301.456517][T21738] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6437'. [ 301.585267][T21751] loop2: detected capacity change from 0 to 1024 [ 301.603784][T21751] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6439: bad orphan inode 134217728 [ 301.621991][T21751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.647509][T21761] netlink: 'syz.7.6445': attribute type 13 has an invalid length. [ 301.659808][T21761] gretap0: refused to change device tx_queue_len [ 301.666665][T21761] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.047520][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.067284][T21765] Set syz1 is full, maxelem 65536 reached [ 302.340394][T21787] loop2: detected capacity change from 0 to 2048 [ 302.360900][T21787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.401133][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.589294][T21809] netlink: 'syz.2.6465': attribute type 7 has an invalid length. [ 302.597217][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6465'. [ 302.611540][T21810] bridge: RTM_NEWNEIGH with invalid ether address [ 302.901106][T21826] tipc: New replicast peer: 255.255.255.255 [ 302.907871][T21826] tipc: Enabled bearer , priority 10 [ 303.408055][T21837] loop2: detected capacity change from 0 to 128 [ 303.515377][T21837] bio_check_eod: 102 callbacks suppressed [ 303.515393][T21837] syz.2.6476: attempt to access beyond end of device [ 303.515393][T21837] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 303.563825][T21837] syz.2.6476: attempt to access beyond end of device [ 303.563825][T21837] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 303.628322][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6481'. [ 303.637426][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6481'. [ 303.657533][T21837] syz.2.6476: attempt to access beyond end of device [ 303.657533][T21837] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 303.704570][T21837] syz.2.6476: attempt to access beyond end of device [ 303.704570][T21837] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 303.736980][T21837] syz.2.6476: attempt to access beyond end of device [ 303.736980][T21837] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 303.769926][T21837] syz.2.6476: attempt to access beyond end of device [ 303.769926][T21837] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 303.803478][T21837] syz.2.6476: attempt to access beyond end of device [ 303.803478][T21837] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 303.834688][T21837] syz.2.6476: attempt to access beyond end of device [ 303.834688][T21837] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 303.854953][T21837] syz.2.6476: attempt to access beyond end of device [ 303.854953][T21837] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 303.869435][T21837] syz.2.6476: attempt to access beyond end of device [ 303.869435][T21837] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 303.975833][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6486'. [ 304.013267][T21858] team1: entered promiscuous mode [ 304.018365][T21858] team1: entered allmulticast mode [ 304.047269][T21858] 8021q: adding VLAN 0 to HW filter on device team1 [ 304.085841][T21871] loop9: detected capacity change from 0 to 128 [ 304.473678][T21885] lo speed is unknown, defaulting to 1000 [ 304.514989][T21885] lo speed is unknown, defaulting to 1000 [ 304.569330][T21890] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 304.580481][T21885] lo speed is unknown, defaulting to 1000 [ 304.825821][T21888] Set syz1 is full, maxelem 65536 reached [ 304.957641][T21907] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6506'. [ 304.975144][T21906] loop2: detected capacity change from 0 to 1024 [ 305.001685][T21906] EXT4-fs: Ignoring removed orlov option [ 305.040602][T21906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.078555][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.263105][T21937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21937 comm=syz.6.6514 [ 305.294817][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6514'. [ 305.416745][T21943] 8021q: adding VLAN 0 to HW filter on device .` [ 305.435683][T21943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.110130][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6527'. [ 306.147821][ T3754] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.183071][ T3754] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.191543][ T3754] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.222108][ T3744] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.240414][ T29] kauditd_printk_skb: 2228 callbacks suppressed [ 306.240431][ T29] audit: type=1326 audit(306.215:27318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.269746][ T29] audit: type=1326 audit(306.215:27319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.292683][ T29] audit: type=1326 audit(306.215:27320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.315786][ T29] audit: type=1326 audit(306.215:27321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.352134][ T29] audit: type=1326 audit(306.275:27322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.375791][ T29] audit: type=1326 audit(306.275:27323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.398907][ T29] audit: type=1326 audit(306.275:27324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.422007][ T29] audit: type=1326 audit(306.275:27325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f245ae3df90 code=0x7ffc0000 [ 306.445839][ T29] audit: type=1326 audit(306.275:27326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f245ae3df90 code=0x7ffc0000 [ 306.469580][ T29] audit: type=1326 audit(306.275:27327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.6.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245ae3f749 code=0x7ffc0000 [ 306.569214][T21992] __nla_validate_parse: 3 callbacks suppressed [ 306.569246][T21992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6536'. [ 306.630585][T22002] netlink: 'syz.9.6541': attribute type 13 has an invalid length. [ 306.641328][T22002] gretap0: refused to change device tx_queue_len [ 306.649044][T22002] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.248115][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6545'. [ 307.257429][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6545'. [ 307.266519][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6545'. [ 307.467354][T22035] tipc: Enabling of bearer rejected, failed to enable media [ 307.530189][T22045] netlink: 'syz.4.6558': attribute type 7 has an invalid length. [ 307.570881][T22051] rdma_op ffff888194452180 conn xmit_rdma 0000000000000000 [ 307.650578][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6566'. [ 308.151925][T22093] netlink: 'syz.6.6577': attribute type 13 has an invalid length. [ 308.179490][T22093] gretap0: refused to change device tx_queue_len [ 308.186198][T22093] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 308.281457][T22102] bridge: RTM_NEWNEIGH with invalid ether address [ 308.335429][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6583'. [ 308.363916][T22106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6583'. [ 308.557362][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6588'. [ 308.757810][T22127] netlink: 'syz.4.6591': attribute type 30 has an invalid length. [ 308.819583][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6592'. [ 308.835340][T22129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.844506][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6592'. [ 308.855306][T22129] bond0 (unregistering): Released all slaves [ 308.888137][T22132] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 309.311549][T22161] team3: entered promiscuous mode [ 309.317357][T22161] team3: entered allmulticast mode [ 309.323245][T22161] 8021q: adding VLAN 0 to HW filter on device team3 [ 309.356427][T22164] netlink: 'syz.9.6606': attribute type 5 has an invalid length. [ 309.633890][T22177] loop9: detected capacity change from 0 to 2048 [ 309.671390][T22177] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.697618][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.815366][T22196] loop9: detected capacity change from 0 to 128 [ 309.824352][T22196] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.848941][T20039] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.080946][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.090613][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.101582][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.111118][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.120380][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.129618][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.139168][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.148406][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.157645][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.167133][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.179566][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.199523][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.209051][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.218741][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.228063][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.237406][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.247558][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.260767][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.274567][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.283961][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.293347][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.302718][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.311874][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.327519][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.337071][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.348198][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.358027][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.367699][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.376922][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.398114][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.414152][T22223] loop2: detected capacity change from 0 to 128 [ 310.420954][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.436407][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.447094][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.456821][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.467006][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.476752][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.486650][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.496802][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.507500][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.517226][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.526851][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.552109][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.565620][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.576214][T22226] netlink: 'syz.6.6627': attribute type 3 has an invalid length. [ 310.594640][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.614998][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.635293][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.655788][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.665417][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.675690][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.685302][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.712586][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.732903][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.742682][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.752756][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.762755][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.772544][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.781991][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.791866][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.801528][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.811339][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.821085][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.830776][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.840390][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.850079][T22213] 9pnet_fd: p9_fd_create_tcp (22213): problem connecting socket to 127.0.0.1 [ 310.908672][T22242] lo speed is unknown, defaulting to 1000 [ 310.950205][T22242] lo speed is unknown, defaulting to 1000 [ 311.027114][T22242] lo speed is unknown, defaulting to 1000 [ 311.242783][ T29] kauditd_printk_skb: 1608 callbacks suppressed [ 311.242799][ T29] audit: type=1326 audit(311.215:28936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa530212005 code=0x7ffc0000 [ 311.292952][ T29] audit: type=1326 audit(311.225:28937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa530212005 code=0x7ffc0000 [ 311.316543][ T29] audit: type=1326 audit(311.225:28938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa530212005 code=0x7ffc0000 [ 311.339577][ T29] audit: type=1326 audit(311.225:28939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa530212005 code=0x7ffc0000 [ 311.363248][ T29] audit: type=1326 audit(311.255:28940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5301d65e7 code=0x7ffc0000 [ 311.386309][ T29] audit: type=1326 audit(311.255:28941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa53017b829 code=0x7ffc0000 [ 311.409881][ T29] audit: type=1326 audit(311.255:28942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 311.433484][ T29] audit: type=1326 audit(311.255:28943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5301d65e7 code=0x7ffc0000 [ 311.456469][ T29] audit: type=1326 audit(311.255:28944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa53017b829 code=0x7ffc0000 [ 311.479993][ T29] audit: type=1326 audit(311.255:28945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.2.6626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 311.533880][T22259] loop9: detected capacity change from 0 to 1024 [ 311.581290][T22259] EXT4-fs: Ignoring removed orlov option [ 311.595505][T22259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.761041][T22283] __nla_validate_parse: 10 callbacks suppressed [ 311.761056][T22283] netlink: 56 bytes leftover after parsing attributes in process `'. [ 311.836953][T22285] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6650'. [ 311.865797][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.071734][T22297] lo speed is unknown, defaulting to 1000 [ 312.136688][T22297] lo speed is unknown, defaulting to 1000 [ 312.175644][T22297] lo speed is unknown, defaulting to 1000 [ 312.244181][T22300] lo speed is unknown, defaulting to 1000 [ 312.289063][T22300] lo speed is unknown, defaulting to 1000 [ 312.369070][T22300] lo speed is unknown, defaulting to 1000 [ 312.699266][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6662'. [ 312.744883][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6662'. [ 312.847143][T22324] netlink: 'syz.9.6667': attribute type 13 has an invalid length. [ 312.858445][T22322] loop2: detected capacity change from 0 to 4096 [ 312.865108][T22324] gretap0: refused to change device tx_queue_len [ 312.872550][T22324] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.896777][T22322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.934618][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.003331][T22333] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6672'. [ 313.022340][T22344] loop9: detected capacity change from 0 to 128 [ 313.239930][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6683'. [ 313.343400][T22369] loop2: detected capacity change from 0 to 128 [ 313.351575][T22369] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.391939][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.889590][T22391] loop9: detected capacity change from 0 to 1024 [ 313.904961][T22391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.934103][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.950529][T22395] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6692'. [ 314.435948][T22472] lo speed is unknown, defaulting to 1000 [ 314.482662][T22472] lo speed is unknown, defaulting to 1000 [ 314.535032][T22472] lo speed is unknown, defaulting to 1000 [ 314.786102][T22526] loop2: detected capacity change from 0 to 512 [ 314.817267][T22526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.905697][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.226924][T22617] loop2: detected capacity change from 0 to 1024 [ 316.235107][T22617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 316.244198][T22617] System zones: 0-1, 3-36 [ 316.249411][T22617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.302951][T22622] netlink: 'syz.6.6731': attribute type 39 has an invalid length. [ 316.394221][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.428503][ T29] kauditd_printk_skb: 2780 callbacks suppressed [ 316.428562][ T29] audit: type=1326 audit(316.405:31726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.490901][ T29] audit: type=1326 audit(316.405:31727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.514711][ T29] audit: type=1326 audit(316.405:31728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.537923][ T29] audit: type=1326 audit(316.405:31729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.561576][ T29] audit: type=1326 audit(316.405:31730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.585577][ T29] audit: type=1326 audit(316.405:31731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.608581][ T29] audit: type=1326 audit(316.405:31732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.632500][ T29] audit: type=1326 audit(316.405:31733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.655563][ T29] audit: type=1326 audit(316.405:31734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.679189][ T29] audit: type=1326 audit(316.415:31735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22633 comm="syz.2.6737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5301df749 code=0x7ffc0000 [ 316.725866][T22643] lo speed is unknown, defaulting to 1000 [ 316.741544][T22650] loop9: detected capacity change from 0 to 128 [ 316.803422][T22654] loop2: detected capacity change from 0 to 1024 [ 316.819831][T22643] lo speed is unknown, defaulting to 1000 [ 316.826321][T22654] EXT4-fs: Ignoring removed orlov option [ 316.836655][T22654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.897706][T22643] lo speed is unknown, defaulting to 1000 [ 317.226886][T22660] bridge0: port 4(gretap0) entered blocking state [ 317.233438][T22660] bridge0: port 4(gretap0) entered disabled state [ 317.244675][T22660] gretap0: entered allmulticast mode [ 317.271051][T22660] gretap0: entered promiscuous mode [ 317.286934][T22663] gretap0: left allmulticast mode [ 317.292055][T22663] gretap0: left promiscuous mode [ 317.297209][T22663] bridge0: port 4(gretap0) entered disabled state [ 317.335522][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.418122][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6750'. [ 317.614530][T22699] loop9: detected capacity change from 0 to 1024 [ 317.629138][T22699] EXT4-fs: Ignoring removed orlov option [ 317.651921][T22699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.670332][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6764'. [ 317.713359][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6764'. [ 317.839459][T22712] tipc: Started in network mode [ 317.844570][T22712] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 317.887956][T22712] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 317.896300][T22712] tipc: Enabled bearer , priority 10 [ 317.958289][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 317.968371][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 317.978411][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 317.994831][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 318.004494][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 318.216319][T20039] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.462194][T22727] ================================================================== [ 318.470312][T22727] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 318.477627][T22727] [ 318.479958][T22727] write to 0xffff88811b378c90 of 4 bytes by task 22728 on cpu 1: [ 318.487689][T22727] touch_atime+0x1e8/0x340 [ 318.492158][T22727] shmem_file_read_iter+0x477/0x540 [ 318.497392][T22727] copy_splice_read+0x442/0x660 [ 318.502383][T22727] splice_direct_to_actor+0x290/0x680 [ 318.507831][T22727] do_splice_direct+0xda/0x150 [ 318.512642][T22727] do_sendfile+0x380/0x650 [ 318.517101][T22727] __x64_sys_sendfile64+0x105/0x150 [ 318.522320][T22727] x64_sys_call+0x2db1/0x3000 [ 318.527016][T22727] do_syscall_64+0xca/0x2b0 [ 318.531565][T22727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.537480][T22727] [ 318.539811][T22727] read to 0xffff88811b378c90 of 4 bytes by task 22727 on cpu 0: [ 318.547448][T22727] atime_needs_update+0x25f/0x3e0 [ 318.552493][T22727] touch_atime+0x4a/0x340 [ 318.556866][T22727] shmem_file_read_iter+0x477/0x540 [ 318.562098][T22727] copy_splice_read+0x442/0x660 [ 318.566975][T22727] splice_direct_to_actor+0x290/0x680 [ 318.572373][T22727] do_splice_direct+0xda/0x150 [ 318.577171][T22727] do_sendfile+0x380/0x650 [ 318.581611][T22727] __x64_sys_sendfile64+0x105/0x150 [ 318.586829][T22727] x64_sys_call+0x2db1/0x3000 [ 318.591539][T22727] do_syscall_64+0xca/0x2b0 [ 318.596098][T22727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.602011][T22727] [ 318.604342][T22727] value changed: 0x19f5c120 -> 0x1a8e57a1 [ 318.610078][T22727] [ 318.612409][T22727] Reported by Kernel Concurrency Sanitizer on: [ 318.618602][T22727] CPU: 0 UID: 0 PID: 22727 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 318.627993][T22727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.638060][T22727] ================================================================== [ 318.922071][T12457] tipc: Node number set to 1