last executing test programs: 1m40.380815569s ago: executing program 3 (id=15): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) unshare(0x28000600) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={0x0}, 0x18) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 1m40.306438316s ago: executing program 3 (id=19): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m40.078610556s ago: executing program 3 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000540), 0x200, r0}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1m39.571446621s ago: executing program 3 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m39.48394659s ago: executing program 3 (id=29): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x43, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x44, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xce32}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff8000/0x3000)=nil) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1m37.867529594s ago: executing program 3 (id=54): r0 = syz_io_uring_setup(0x5c8, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x4, 0x95}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 1m37.827481368s ago: executing program 32 (id=54): r0 = syz_io_uring_setup(0x5c8, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x4, 0x95}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 1m2.089043109s ago: executing program 5 (id=682): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m2.066600981s ago: executing program 5 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYRES16, @ANYRES16=r0, @ANYRES16=r1], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, 0x0}, 0x80c1) 1m2.032211874s ago: executing program 5 (id=685): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m1.96394497s ago: executing program 5 (id=687): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 1m1.659922877s ago: executing program 5 (id=691): readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x8808) 1m1.293095301s ago: executing program 5 (id=696): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xa6\xb7Uu\xd3G\xbe\"\xbe\x87\xe7,]nW<:\xaa\xc9\xb8\x83C\x8c\xde$C4o~\xd7\xe5\xe9\xd2\xd9\x1bC)\xbf\xdf\xdb\xa6B\xe0x\xe5\xa3{\x82~\xd5(\xe7\x9c\xa2\xca\x8dnW\xf5\x16\"05\xf4\xadn\xcd\xa9\xe4\xe0/\x80>\xb9\xb3\xb4\xf5\xe2mN\xb4\xa3\x9e\x19{\xbe\xb8sj\xcb\xa4\x17(<\xbed\x17\xb0Dp\xce\xd8\xee0\xff\x98\x01Z8y*0\xfb\x9a\xbe\xb04\xbd\xecj\xad', &(0x7f0000000500)='\x00', 0x0) close(r0) 1m1.038733763s ago: executing program 33 (id=696): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xa6\xb7Uu\xd3G\xbe\"\xbe\x87\xe7,]nW<:\xaa\xc9\xb8\x83C\x8c\xde$C4o~\xd7\xe5\xe9\xd2\xd9\x1bC)\xbf\xdf\xdb\xa6B\xe0x\xe5\xa3{\x82~\xd5(\xe7\x9c\xa2\xca\x8dnW\xf5\x16\"05\xf4\xadn\xcd\xa9\xe4\xe0/\x80>\xb9\xb3\xb4\xf5\xe2mN\xb4\xa3\x9e\x19{\xbe\xb8sj\xcb\xa4\x17(<\xbed\x17\xb0Dp\xce\xd8\xee0\xff\x98\x01Z8y*0\xfb\x9a\xbe\xb04\xbd\xecj\xad', &(0x7f0000000500)='\x00', 0x0) close(r0) 45.687823288s ago: executing program 0 (id=966): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x848000000015, 0x805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r1}, 0x18) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) 45.605721555s ago: executing program 0 (id=968): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 45.4397454s ago: executing program 0 (id=970): openat$nvram(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xbe4, 0x10, 0x2, 0x2c2}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 45.198966842s ago: executing program 0 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 45.173109704s ago: executing program 0 (id=977): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) membarrier(0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 43.127627377s ago: executing program 0 (id=1012): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 43.084120991s ago: executing program 34 (id=1012): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.314129653s ago: executing program 6 (id=1777): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) epoll_pwait2(r0, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.112154091s ago: executing program 1 (id=1783): r0 = syz_io_uring_setup(0x6fb2, &(0x7f00000003c0)={0x0, 0x6527, 0x10100, 0x0, 0x287}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/45, 0x2d}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r4, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.062545746s ago: executing program 1 (id=1784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11, 0x1, 0x78, 0xfc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x60) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 1.999702551s ago: executing program 6 (id=1785): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.734246865s ago: executing program 1 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) 1.67561427s ago: executing program 1 (id=1790): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.580640859s ago: executing program 1 (id=1794): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.156407017s ago: executing program 4 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)=r1}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.146536158s ago: executing program 6 (id=1804): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.11617953s ago: executing program 6 (id=1805): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.032900588s ago: executing program 6 (id=1806): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) 830.354246ms ago: executing program 2 (id=1808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fstat(r4, 0x0) 782.29234ms ago: executing program 4 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r1, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) 687.057969ms ago: executing program 2 (id=1812): syz_socket_connect_nvme_tcp() unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) creat(&(0x7f00000003c0)='./file1\x00', 0x11) 673.77273ms ago: executing program 1 (id=1814): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 560.50457ms ago: executing program 7 (id=1815): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0x1, &(0x7f00000011c0)="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"}, 0x20) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 499.815106ms ago: executing program 4 (id=1816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 498.739116ms ago: executing program 7 (id=1817): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) epoll_pwait2(r0, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 477.100928ms ago: executing program 4 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x4c, &(0x7f0000000580)=""/76, 0x40f00, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2be70, r2, 0x5, &(0x7f0000000a40)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000a80)=[{0x4, 0x3, 0xa, 0xc}, {0x5, 0x4, 0x4, 0x3}, {0x4, 0x1, 0x0, 0x4}, {0x1, 0x2, 0x2, 0xb}, {0x4, 0x3, 0xe, 0xa}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 403.797354ms ago: executing program 2 (id=1819): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0xe03f) 264.830316ms ago: executing program 2 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)=r1}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 264.595567ms ago: executing program 4 (id=1821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 241.253929ms ago: executing program 4 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, 0x0, &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) 211.662302ms ago: executing program 7 (id=1823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf25010000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 181.852654ms ago: executing program 7 (id=1824): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x50db598a, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0xf3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 146.437837ms ago: executing program 6 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x30) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x4007) 145.968197ms ago: executing program 7 (id=1826): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 97.206832ms ago: executing program 2 (id=1827): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r1, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) 80.909763ms ago: executing program 7 (id=1828): rmdir(0x0) r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x28020480) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x200000000000000, 0x0) 0s ago: executing program 2 (id=1829): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): age: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5609 comm=syz.0.679 [ 66.256765][ T5601] Set syz1 is full, maxelem 65536 reached [ 66.463079][ T5629] loop5: detected capacity change from 0 to 512 [ 66.472808][ T5629] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.480511][ T5629] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.687: bad orphan inode 13 [ 66.499050][ T5629] ext4_test_bit(bit=12, block=18) = 1 [ 66.504481][ T5629] is_bad_inode(inode)=0 [ 66.508712][ T5629] NEXT_ORPHAN(inode)=2130706432 [ 66.513589][ T5629] max_ino=32 [ 66.516817][ T5629] i_nlink=1 [ 66.520758][ T5629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.540059][ T5629] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 66.569473][ T5629] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.687: bg 0: block 248: padding at end of block bitmap is not set [ 66.598700][ T5629] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.687: Failed to acquire dquot type 1 [ 66.633335][ T5632] loop0: detected capacity change from 0 to 128 [ 66.643086][ T5640] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.655029][ T5640] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 66.655536][ T5629] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.726361][ T5632] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.742154][ T3628] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 66.754309][ T3628] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 66.768493][ T5632] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.038560][ T42] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.113302][ T42] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.171868][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 67.191738][ T42] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.211726][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 67.279894][ T42] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.295974][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.422688][ T42] bridge_slave_1: left allmulticast mode [ 67.428419][ T42] bridge_slave_1: left promiscuous mode [ 67.434261][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.492368][ T5657] loop0: detected capacity change from 0 to 512 [ 67.563819][ T5657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.578634][ T42] bridge_slave_0: left allmulticast mode [ 67.584316][ T42] bridge_slave_0: left promiscuous mode [ 67.590134][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.861369][ T5657] EXT4-fs (loop0): too many log groups per flexible block group [ 67.875599][ T5657] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 67.911551][ T5657] EXT4-fs (loop0): mount failed [ 68.108318][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.130305][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.290238][ T42] bond0 (unregistering): Released all slaves [ 68.433464][ T42] tipc: Disabling bearer [ 68.438520][ T42] tipc: Left network mode [ 68.460325][ T42] hsr_slave_0: left promiscuous mode [ 68.514986][ T42] hsr_slave_1: left promiscuous mode [ 68.528444][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.535854][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.543885][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.551393][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.686763][ T42] veth1_macvtap: left promiscuous mode [ 68.692361][ T42] veth0_macvtap: left promiscuous mode [ 68.788267][ T42] veth1_vlan: left promiscuous mode [ 68.796144][ T42] veth0_vlan: left promiscuous mode [ 68.801549][ T5673] loop2: detected capacity change from 0 to 128 [ 68.865535][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 68.865551][ T29] audit: type=1400 audit(1767478816.850:4554): avc: denied { remount } for pid=5672 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.965234][ T29] audit: type=1326 audit(1767478816.950:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.045049][ T29] audit: type=1326 audit(1767478816.980:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.068604][ T29] audit: type=1326 audit(1767478816.980:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.092101][ T29] audit: type=1326 audit(1767478816.980:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.115637][ T29] audit: type=1326 audit(1767478816.980:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.139241][ T29] audit: type=1326 audit(1767478816.980:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.163030][ T29] audit: type=1326 audit(1767478816.980:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.186645][ T29] audit: type=1326 audit(1767478816.980:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.210160][ T29] audit: type=1326 audit(1767478816.980:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 69.246549][ T42] team0 (unregistering): Port device team_slave_1 removed [ 69.261760][ T42] team0 (unregistering): Port device team_slave_0 removed [ 69.333123][ T5670] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.413155][ T5670] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.446301][ T5658] chnl_net:caif_netlink_parms(): no params data found [ 69.494045][ T5670] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.525207][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.532471][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.541155][ T5658] bridge_slave_0: entered allmulticast mode [ 69.547757][ T5658] bridge_slave_0: entered promiscuous mode [ 69.556846][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.564089][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.571712][ T5658] bridge_slave_1: entered allmulticast mode [ 69.578600][ T5658] bridge_slave_1: entered promiscuous mode [ 69.613695][ T5670] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.628788][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.671884][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.713526][ T5694] __nla_validate_parse: 1 callbacks suppressed [ 69.713545][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 69.731804][ T5658] team0: Port device team_slave_0 added [ 69.768616][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 69.794389][ T5658] team0: Port device team_slave_1 added [ 69.801320][ T5694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 69.808270][ T4914] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.849847][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.856926][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.883058][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.946929][ T4914] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.956985][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.964041][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.990020][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.058306][ T4914] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.073832][ T4914] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.126872][ T5658] hsr_slave_0: entered promiscuous mode [ 70.138655][ T5658] hsr_slave_1: entered promiscuous mode [ 70.144713][ T5658] debugfs: 'hsr0' already exists in 'hsr' [ 70.150507][ T5658] Cannot create hsr debugfs directory [ 70.166371][ T5714] loop2: detected capacity change from 0 to 128 [ 70.299439][ T5722] loop0: detected capacity change from 0 to 2048 [ 70.308544][ T5658] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.317595][ T5658] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.334901][ T42] bio_check_eod: 102 callbacks suppressed [ 70.334917][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.334917][ T42] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 70.354564][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.354564][ T42] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 70.369151][ T5722] loop0: p1 < > p4 [ 70.369341][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.369341][ T42] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 70.373048][ T5658] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.386589][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.386589][ T42] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 70.395029][ T5722] loop0: p4 size 8388608 extends beyond EOD, truncated [ 70.406719][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.406719][ T42] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 70.440515][ T5658] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.450602][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.450602][ T42] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 70.464448][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.464448][ T42] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 70.491503][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.491503][ T42] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 70.505254][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.505254][ T42] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 70.515436][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 70.519407][ T42] kworker/u8:2: attempt to access beyond end of device [ 70.519407][ T42] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 70.532139][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 70.618304][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.632364][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.650952][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.658199][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.674401][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.681572][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.713240][ T5658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.803731][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.817785][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 70.842092][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 70.868723][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 70.891368][ T5755] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.949806][ T5755] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.968919][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 70.978694][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 70.985041][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 70.992824][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 71.017345][ T5755] hsr0 speed is unknown, defaulting to 1000 [ 71.073616][ T5658] veth0_vlan: entered promiscuous mode [ 71.103983][ T5658] veth1_vlan: entered promiscuous mode [ 71.123845][ T5790] ref_ctr_offset mismatch. inode: 0x2dd offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x72 [ 71.141153][ T5658] veth0_macvtap: entered promiscuous mode [ 71.153293][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 71.166183][ T5658] veth1_macvtap: entered promiscuous mode [ 71.178503][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.191302][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.207123][ T5794] vlan2: entered allmulticast mode [ 71.227010][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 71.244831][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 71.258840][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 71.290335][ T4914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.299098][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 71.310954][ T4914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.353149][ T4914] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.389540][ T4914] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.474893][ T5810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.549233][ T5818] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.629646][ T5810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.673388][ T5818] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.739190][ T5810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.790197][ T5818] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.839773][ T5818] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.888720][ T5837] loop4: detected capacity change from 0 to 512 [ 71.892038][ T5810] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.919345][ T5837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.937413][ T5837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.956021][ T5839] loop0: detected capacity change from 0 to 128 [ 71.965540][ T5837] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.967558][ T5839] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.998079][ T5839] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.000728][ T2492] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.022123][ T5837] EXT4-fs (loop4): shut down requested (0) [ 72.043983][ T2492] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056508][ T5003] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.097738][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.108232][ T4914] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.298092][ T2492] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.337063][ T2492] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.379709][ T2492] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.420405][ T2492] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.678047][ T5866] loop1: detected capacity change from 0 to 2048 [ 72.760610][ T3306] Alternate GPT is invalid, using primary GPT. [ 72.767159][ T3306] loop1: p2 p3 p7 [ 72.817757][ T5866] Alternate GPT is invalid, using primary GPT. [ 72.824287][ T5866] loop1: p2 p3 p7 [ 72.951471][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 72.965795][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 72.987753][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 73.092824][ T4090] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.721333][ T5908] loop2: detected capacity change from 0 to 512 [ 73.731192][ T5908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.783364][ T5908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.796486][ T5908] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.937390][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.030258][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 74.030286][ T29] audit: type=1326 audit(1767478822.020:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.109628][ T29] audit: type=1326 audit(1767478822.050:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.133081][ T29] audit: type=1326 audit(1767478822.050:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.156769][ T29] audit: type=1326 audit(1767478822.050:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.180269][ T29] audit: type=1326 audit(1767478822.050:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.203785][ T29] audit: type=1326 audit(1767478822.050:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.227263][ T29] audit: type=1326 audit(1767478822.050:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.250825][ T29] audit: type=1326 audit(1767478822.050:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.274217][ T29] audit: type=1326 audit(1767478822.050:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4dd7f749 code=0x7ffc0000 [ 74.498988][ T29] audit: type=1400 audit(1767478822.490:4664): avc: denied { write } for pid=5933 comm="syz.1.788" name="file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.326070][ T5987] __nla_validate_parse: 4 callbacks suppressed [ 75.326089][ T5987] netlink: 64 bytes leftover after parsing attributes in process `syz.0.810'. [ 75.421080][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.812'. [ 75.739504][ T6008] loop4: detected capacity change from 0 to 128 [ 75.813680][ T6008] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.841222][ T6008] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.850469][ T6018] hsr0 speed is unknown, defaulting to 1000 [ 76.107218][ T6029] loop0: detected capacity change from 0 to 764 [ 76.126022][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.346576][ T6048] loop4: detected capacity change from 0 to 1764 [ 76.383795][ T6048] netlink: 204 bytes leftover after parsing attributes in process `syz.4.833'. [ 76.392937][ T6048] netlink: 72 bytes leftover after parsing attributes in process `syz.4.833'. [ 76.402940][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.833'. [ 76.631650][ T6051] bridge0: port 4(macsec1) entered blocking state [ 76.647279][ T6051] bridge0: port 4(macsec1) entered disabled state [ 76.659023][ T6051] macsec1: entered allmulticast mode [ 76.665392][ T6051] bridge0: entered allmulticast mode [ 76.684033][ T6051] macsec1: left allmulticast mode [ 76.691456][ T6051] bridge0: left allmulticast mode [ 76.779534][ T6063] loop6: detected capacity change from 0 to 128 [ 76.886205][ T6063] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.919724][ T6063] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.973842][ T6076] netlink: 'syz.4.843': attribute type 13 has an invalid length. [ 77.089199][ T5658] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.137592][ T6088] netlink: 32 bytes leftover after parsing attributes in process `syz.6.848'. [ 77.177345][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.848'. [ 77.324692][ T6092] bridge0: entered promiscuous mode [ 77.356002][ T6092] bridge0: port 3(macsec1) entered blocking state [ 77.363805][ T6092] bridge0: port 3(macsec1) entered disabled state [ 77.376148][ T6092] macsec1: entered allmulticast mode [ 77.383170][ T6092] bridge0: entered allmulticast mode [ 77.414090][ T6092] macsec1: left allmulticast mode [ 77.419943][ T6092] bridge0: left allmulticast mode [ 77.453368][ T6092] bridge0: left promiscuous mode [ 77.667226][ T6104] loop2: detected capacity change from 0 to 1024 [ 77.718566][ T6104] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 77.728347][ T6104] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.740094][ T6104] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.752706][ T6104] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.768892][ T6104] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.853: Inode bitmap for bg 0 marked uninitialized [ 77.875160][ T6112] netlink: 'syz.6.856': attribute type 4 has an invalid length. [ 77.881784][ T6104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.941621][ T6104] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 77.965516][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.984538][ T6116] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.857'. [ 77.993694][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.857'. [ 78.321732][ T6122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6122 comm=syz.2.860 [ 78.384897][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.869'. [ 78.407381][ T6125] loop1: detected capacity change from 0 to 128 [ 78.467666][ T6132] loop4: detected capacity change from 0 to 256 [ 78.488071][ T6137] netlink: 'syz.0.864': attribute type 12 has an invalid length. [ 78.494221][ T6125] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 78.515427][ T6125] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.596817][ T6143] program syz.0.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.622200][ T6143] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 78.683191][ T6149] gretap0: entered promiscuous mode [ 78.782657][ T6157] netlink: 'syz.0.872': attribute type 83 has an invalid length. [ 78.840429][ T6163] tipc: Started in network mode [ 78.845368][ T6163] tipc: Node identity ac14140f, cluster identity 4711 [ 78.865920][ T6163] tipc: New replicast peer: 255.255.255.255 [ 78.872196][ T6163] tipc: Enabled bearer , priority 10 [ 78.893648][ T6164] geneve2: entered promiscuous mode [ 78.898997][ T6164] geneve2: entered allmulticast mode [ 78.914088][ T6165] tipc: Disabling bearer [ 79.048768][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 79.048810][ T29] audit: type=1400 audit(1767478827.040:4826): avc: denied { read } for pid=6168 comm="syz.0.877" path="socket:[16000]" dev="sockfs" ino=16000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.083761][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.146338][ T6176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6176 comm=syz.1.879 [ 79.467640][ T6190] syz_tun: entered allmulticast mode [ 79.680616][ T29] audit: type=1400 audit(1767478827.670:4827): avc: denied { nlmsg_read } for pid=6195 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 79.735849][ T6200] loop0: detected capacity change from 0 to 512 [ 79.770520][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.783293][ T6200] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.827674][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.851927][ T6207] vlan2: entered allmulticast mode [ 79.878912][ T29] audit: type=1326 audit(1767478827.860:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 79.902292][ T29] audit: type=1326 audit(1767478827.860:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 79.925969][ T29] audit: type=1326 audit(1767478827.870:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 79.949414][ T29] audit: type=1326 audit(1767478827.870:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 80.028938][ T29] audit: type=1326 audit(1767478827.870:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 80.052320][ T29] audit: type=1326 audit(1767478827.870:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 80.076125][ T29] audit: type=1326 audit(1767478827.870:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 80.099876][ T29] audit: type=1326 audit(1767478827.870:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 80.146248][ T6220] kernel profiling enabled (shift: 63) [ 80.151959][ T6220] profiling shift: 63 too large [ 80.252459][ T6234] loop1: detected capacity change from 0 to 1024 [ 80.313381][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.384498][ T6249] tipc: Started in network mode [ 80.389556][ T6249] tipc: Node identity 9a90d50015c1, cluster identity 4711 [ 80.396706][ T6249] tipc: Enabled bearer , priority 0 [ 80.406355][ T6248] tipc: Resetting bearer [ 80.417956][ T6234] __nla_validate_parse: 5 callbacks suppressed [ 80.418095][ T6234] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 80.448989][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.485707][ T6248] tipc: Disabling bearer [ 80.531835][ T6255] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.631688][ T6255] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.680863][ T6255] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.719697][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 80.729942][ T6279] netlink: 'syz.1.923': attribute type 13 has an invalid length. [ 80.763668][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.770858][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.807336][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.819892][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.864487][ T6255] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.880846][ T4611] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.889937][ T4611] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.903181][ T6287] all: renamed from team_slave_0 [ 80.911421][ T4611] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.932551][ T4611] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.961136][ T4611] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.991483][ T4611] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.017392][ T4611] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.052058][ T4611] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.414812][ T6309] hsr0 speed is unknown, defaulting to 1000 [ 81.519628][ T6313] loop1: detected capacity change from 0 to 256 [ 81.569346][ T6313] FAT-fs (loop1): bogus number of FAT sectors [ 81.575463][ T6313] FAT-fs (loop1): Can't find a valid FAT filesystem [ 81.781122][ T6328] loop6: detected capacity change from 0 to 512 [ 81.820169][ T6328] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.839205][ T6328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 81.900230][ T6328] System zones: 1-12 [ 81.945584][ T6328] EXT4-fs (loop6): 1 truncate cleaned up [ 81.959984][ T6328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.090520][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.124321][ T6341] loop1: detected capacity change from 0 to 512 [ 82.159655][ T6341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.196969][ T6341] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.251442][ T6341] C: renamed from team_slave_0 [ 82.261711][ T6341] netlink: 152 bytes leftover after parsing attributes in process `syz.1.948'. [ 82.289132][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.475937][ T6370] hsr0 speed is unknown, defaulting to 1000 [ 82.542038][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.960'. [ 82.562278][ T6376] ip6gre1: entered allmulticast mode [ 83.497982][ T6430] tipc: Failed to remove unknown binding: 66,1,1/0:3388028502/3388028504 [ 83.507156][ T6430] tipc: Failed to remove unknown binding: 66,1,1/0:3388028502/3388028504 [ 83.515707][ T6430] tipc: Failed to remove unknown binding: 66,1,1/0:3388028502/3388028504 [ 84.392438][ T6456] loop6: detected capacity change from 0 to 256 [ 84.399646][ T6455] hsr0 speed is unknown, defaulting to 1000 [ 84.406253][ T6456] FAT-fs (loop6): bogus number of FAT sectors [ 84.412486][ T6456] FAT-fs (loop6): Can't find a valid FAT filesystem [ 84.525723][ T6463] vlan2: entered allmulticast mode [ 84.601426][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 84.601440][ T29] audit: type=1400 audit(1767478832.590:5151): avc: denied { mounton } for pid=6470 comm="syz.6.999" path="/49/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 84.874758][ T6483] loop6: detected capacity change from 0 to 1024 [ 84.884638][ T6483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.891550][ T6483] EXT4-fs: Ignoring removed oldalloc option [ 84.898203][ T3570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.936015][ T6483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 84.944383][ T6483] System zones: 0-1, 3-36 [ 84.952868][ T6483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.975042][ T6483] EXT4-fs (loop6): shut down requested (0) [ 85.011951][ T6490] hsr0 speed is unknown, defaulting to 1000 [ 85.065268][ T6492] tipc: Started in network mode [ 85.070367][ T6492] tipc: Node identity aa5a4a8eaa7e, cluster identity 4711 [ 85.077557][ T6492] tipc: Enabled bearer , priority 0 [ 85.097365][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1006'. [ 85.124792][ T6488] tipc: Resetting bearer [ 85.131437][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.145267][ T6490] loop2: detected capacity change from 0 to 256 [ 85.150023][ T6488] tipc: Disabling bearer [ 85.151729][ T4090] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 85.173444][ T6490] FAT-fs (loop2): bogus number of FAT sectors [ 85.180548][ T6490] FAT-fs (loop2): Can't find a valid FAT filesystem [ 85.261126][ T4102] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.393995][ T4102] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.432999][ T6504] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.432999][ T6504] program syz.2.1014 not setting count and/or reply_len properly [ 85.532549][ T4102] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.590603][ T4102] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.697287][ T4102] bridge_slave_1: left allmulticast mode [ 85.703236][ T4102] bridge_slave_1: left promiscuous mode [ 85.709007][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.739049][ T4102] bridge_slave_0: left allmulticast mode [ 85.744822][ T4102] bridge_slave_0: left promiscuous mode [ 85.750672][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.000544][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.016519][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.036015][ T4102] bond0 (unregistering): Released all slaves [ 86.067033][ T4102] bond1 (unregistering): (slave veth7): Releasing active interface [ 86.076119][ T4102] bond1 (unregistering): Released all slaves [ 86.180300][ T6507] hsr0 speed is unknown, defaulting to 1000 [ 86.304663][ T4102] hsr_slave_0: left promiscuous mode [ 86.323774][ T4102] hsr_slave_1: left promiscuous mode [ 86.329796][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.337264][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.346116][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.353995][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.364906][ T4102] veth1_macvtap: left promiscuous mode [ 86.370481][ T4102] veth0_macvtap: left promiscuous mode [ 86.376232][ T4102] veth1_vlan: left promiscuous mode [ 86.381891][ T4102] veth0_vlan: left promiscuous mode [ 86.433845][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 86.540157][ T6540] team1: entered promiscuous mode [ 86.545251][ T6540] team1: entered allmulticast mode [ 86.556324][ T6540] 8021q: adding VLAN 0 to HW filter on device team1 [ 86.618944][ T6507] chnl_net:caif_netlink_parms(): no params data found [ 86.680245][ T6546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.738508][ T29] audit: type=1326 audit(1767478834.720:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.810229][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.817431][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.825211][ T29] audit: type=1326 audit(1767478834.750:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.848769][ T29] audit: type=1326 audit(1767478834.750:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.872414][ T29] audit: type=1326 audit(1767478834.750:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.879314][ T6507] bridge_slave_0: entered allmulticast mode [ 86.896314][ T29] audit: type=1326 audit(1767478834.750:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.903924][ T6554] loop2: detected capacity change from 0 to 4096 [ 86.925638][ T29] audit: type=1326 audit(1767478834.750:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.955608][ T29] audit: type=1326 audit(1767478834.750:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 86.979123][ T29] audit: type=1326 audit(1767478834.750:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 87.040138][ T6554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.053422][ T6507] bridge_slave_0: entered promiscuous mode [ 87.060301][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.197954][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.205259][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.212806][ T6507] bridge_slave_1: entered allmulticast mode [ 87.220289][ T6507] bridge_slave_1: entered promiscuous mode [ 87.247440][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.263180][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.321125][ T6507] team0: Port device team_slave_0 added [ 87.329040][ T6507] team0: Port device team_slave_1 added [ 87.414159][ T6567] netlink: 'syz.6.1034': attribute type 10 has an invalid length. [ 87.423364][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.430493][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.457011][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.474314][ T6567] team0: Failed to send options change via netlink (err -105) [ 87.481966][ T6567] team0: Port device dummy0 added [ 87.489827][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.496793][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.523038][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.533775][ T6567] netlink: 'syz.6.1034': attribute type 10 has an invalid length. [ 87.557674][ T6567] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 87.572094][ T6567] team0: Failed to send options change via netlink (err -105) [ 87.579805][ T6567] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 87.589050][ T6567] team0: Port device dummy0 removed [ 87.595636][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.596755][ T6567] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.690417][ T6507] hsr_slave_0: entered promiscuous mode [ 87.696916][ T6507] hsr_slave_1: entered promiscuous mode [ 87.702201][ T6571] loop2: detected capacity change from 0 to 512 [ 87.710017][ T6571] EXT4-fs: inline encryption not supported [ 87.734051][ T6575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.742109][ T6571] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 87.794711][ T6577] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.826075][ T6583] loop4: detected capacity change from 0 to 512 [ 87.841538][ T6583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.862778][ T6583] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.885653][ T6577] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.898355][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'. [ 87.940955][ T6507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 87.955267][ T6577] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.967310][ T6507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 87.983165][ T6507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 87.992175][ T6507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 88.005639][ T6577] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.044584][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.057441][ T6507] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.066743][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.073872][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.085811][ T4785] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.096264][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.103476][ T4919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.115990][ T4919] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.137567][ T4919] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.159135][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.179492][ T4919] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.261493][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.445100][ T6633] syz.2.1054 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.525048][ T6644] netem: change failed [ 88.547127][ T6507] veth0_vlan: entered promiscuous mode [ 88.576999][ T6507] veth1_vlan: entered promiscuous mode [ 88.607568][ T6507] veth0_macvtap: entered promiscuous mode [ 88.630075][ T6507] veth1_macvtap: entered promiscuous mode [ 88.665622][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.672048][ T6665] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1058'. [ 88.679549][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.692065][ T6663] loop1: detected capacity change from 0 to 2048 [ 88.710153][ T4914] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.734743][ T4914] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773877][ T4914] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.780611][ T6663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.783436][ T4914] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.804884][ T6671] loop2: detected capacity change from 0 to 1024 [ 88.832506][ T6671] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1060: bad orphan inode 134217728 [ 88.860850][ T6671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.885700][ T6679] loop6: detected capacity change from 0 to 512 [ 88.896103][ T6652] rdma_op ffff8881054e7180 conn xmit_rdma 0000000000000000 [ 88.914979][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.925376][ T6679] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 88.958962][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.999014][ T6679] EXT4-fs (loop6): 1 truncate cleaned up [ 89.009057][ T6679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.037566][ T6686] SELinux: policydb version 0 does not match my version range 15-35 [ 89.045985][ T6686] SELinux: failed to load policy [ 89.110466][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.617864][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 89.617883][ T29] audit: type=1326 audit(1767478837.600:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.679433][ T6726] netlink: 'syz.7.1080': attribute type 7 has an invalid length. [ 89.687267][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1080'. [ 89.736842][ T29] audit: type=1326 audit(1767478837.600:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.760505][ T29] audit: type=1326 audit(1767478837.640:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.784325][ T29] audit: type=1326 audit(1767478837.640:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.808099][ T29] audit: type=1326 audit(1767478837.650:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.831850][ T29] audit: type=1326 audit(1767478837.650:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.855401][ T29] audit: type=1326 audit(1767478837.650:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.879109][ T29] audit: type=1326 audit(1767478837.650:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.902667][ T29] audit: type=1326 audit(1767478837.650:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.926348][ T29] audit: type=1326 audit(1767478837.650:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 89.981290][ T6732] loop2: detected capacity change from 0 to 512 [ 90.040621][ T6732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.133571][ T6732] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.203729][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.210464][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.216843][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.268421][ T6750] loop1: detected capacity change from 0 to 2048 [ 90.269394][ T6732] infiniband syz1: set active [ 90.279812][ T6732] infiniband syz1: added vcan0 [ 90.284892][ T3406] vcan0 speed is unknown, defaulting to 1000 [ 90.303042][ T6750] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.320915][ T6750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.337659][ T6732] RDS/IB: syz1: added [ 90.348169][ T6732] smc: adding ib device syz1 with port count 1 [ 90.354363][ T6732] smc: ib device syz1 port 1 has no pnetid [ 90.360755][ T3406] vcan0 speed is unknown, defaulting to 1000 [ 90.367097][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.418657][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.431502][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.524753][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.531329][ T6760] loop7: detected capacity change from 0 to 2048 [ 90.570466][ T6760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.622837][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.652943][ T6770] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.667968][ T6770] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 90.678726][ T6732] vcan0 speed is unknown, defaulting to 1000 [ 90.680207][ T6770] EXT4-fs (loop7): This should not happen!! Data will be lost [ 90.680207][ T6770] [ 90.696073][ T6770] EXT4-fs (loop7): Total free blocks count 0 [ 90.702087][ T6770] EXT4-fs (loop7): Free/Dirty block details [ 90.708052][ T6770] EXT4-fs (loop7): free_blocks=2415919104 [ 90.713813][ T6770] EXT4-fs (loop7): dirty_blocks=32 [ 90.718960][ T6770] EXT4-fs (loop7): Block reservation details [ 90.724962][ T6770] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 90.731290][ T6770] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 1 with error 28 [ 90.825237][ T6780] netlink: 'syz.1.1102': attribute type 13 has an invalid length. [ 90.825639][ T6778] loop4: detected capacity change from 0 to 512 [ 90.841776][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.844810][ T6776] EXT4-fs: Ignoring removed orlov option [ 90.858681][ T6780] gretap0: refused to change device tx_queue_len [ 90.865719][ T6780] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.889966][ T6778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1101: bg 0: block 248: padding at end of block bitmap is not set [ 90.905936][ T6776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.919438][ T6778] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1101: Failed to acquire dquot type 1 [ 90.947314][ T6778] EXT4-fs (loop4): 1 truncate cleaned up [ 90.962915][ T6778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.976609][ T6778] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.029833][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.380192][ T6791] rdma_op ffff888117212580 conn xmit_rdma 0000000000000000 [ 91.459298][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.489615][ T6805] syzkaller0: entered promiscuous mode [ 91.495370][ T6805] syzkaller0: entered allmulticast mode [ 91.502399][ T6811] bridge: RTM_NEWNEIGH with invalid ether address [ 91.671130][ T6816] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.679036][ T6816] vhci_hcd vhci_hcd.2: invalid port number 96 [ 91.685162][ T6816] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 91.700514][ T6819] netlink: 'syz.4.1118': attribute type 10 has an invalid length. [ 91.736725][ T6819] dummy0: entered promiscuous mode [ 91.759703][ T6819] dummy0: entered allmulticast mode [ 91.775354][ T6826] netlink: 'syz.4.1118': attribute type 10 has an invalid length. [ 91.816263][ T6819] team0: Failed to send options change via netlink (err -105) [ 91.824043][ T6819] team0: Port device dummy0 added [ 91.831696][ T6830] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.842622][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1120'. [ 91.872423][ T6826] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 91.913838][ T6832] bio_check_eod: 65 callbacks suppressed [ 91.913857][ T6832] syz.7.1121: attempt to access beyond end of device [ 91.913857][ T6832] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 91.934838][ T6832] syz.7.1121: attempt to access beyond end of device [ 91.934838][ T6832] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 91.948630][ T6832] syz.7.1121: attempt to access beyond end of device [ 91.948630][ T6832] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 91.962758][ T6832] syz.7.1121: attempt to access beyond end of device [ 91.962758][ T6832] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 91.977445][ T6832] syz.7.1121: attempt to access beyond end of device [ 91.977445][ T6832] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 91.992959][ T6826] dummy0: left promiscuous mode [ 91.997954][ T6826] dummy0: left allmulticast mode [ 92.011438][ T6826] team0: Failed to send options change via netlink (err -105) [ 92.028034][ T6826] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 92.053167][ T6835] SELinux: policydb version 0 does not match my version range 15-35 [ 92.058743][ T6832] syz.7.1121: attempt to access beyond end of device [ 92.058743][ T6832] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 92.075331][ T6826] team0: Port device dummy0 removed [ 92.082986][ T6826] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.085896][ T6835] SELinux: failed to load policy [ 92.100181][ T6832] syz.7.1121: attempt to access beyond end of device [ 92.100181][ T6832] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 92.114428][ T6832] syz.7.1121: attempt to access beyond end of device [ 92.114428][ T6832] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 92.130153][ T6832] syz.7.1121: attempt to access beyond end of device [ 92.130153][ T6832] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 92.190427][ T6832] syz.7.1121: attempt to access beyond end of device [ 92.190427][ T6832] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 92.363510][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1132'. [ 92.555807][ T6860] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.651776][ T6860] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.801937][ T6860] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.824530][ T6869] syzkaller0: entered allmulticast mode [ 92.831669][ T6869] syzkaller0: entered promiscuous mode [ 92.839203][ T6869] syzkaller0 (unregistering): left allmulticast mode [ 92.845960][ T6869] syzkaller0 (unregistering): left promiscuous mode [ 92.908017][ T6860] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.997700][ T5003] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.021108][ T5003] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.039677][ T5003] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.048401][ T5003] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.265013][ T6888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6888 comm=syz.4.1145 [ 93.307469][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.326171][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1148'. [ 93.335476][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.343092][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.348915][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.361510][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.369325][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.372502][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 93.396058][ T6896] pim6reg: entered allmulticast mode [ 93.407512][ T6896] pim6reg: left allmulticast mode [ 93.602262][ T6908] set_capacity_and_notify: 3 callbacks suppressed [ 93.602280][ T6908] loop7: detected capacity change from 0 to 512 [ 93.643304][ T6908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.689273][ T6908] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.780370][ T6908] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1155'. [ 93.809573][ T6507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.984016][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.991572][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.999199][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.006768][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.204653][ T6933] loop1: detected capacity change from 0 to 2048 [ 94.234980][ T6921] Set syz1 is full, maxelem 65536 reached [ 94.250247][ T3306] loop1: p1 < > p3 p4 < > [ 94.255291][ T3306] loop1: p3 start 4284289 is beyond EOD, truncated [ 94.266022][ T6933] loop1: p1 < > p3 p4 < > [ 94.282073][ T6933] loop1: p3 start 4284289 is beyond EOD, truncated [ 94.340852][ T6943] bridge0: entered promiscuous mode [ 94.352560][ T6943] bridge0: left promiscuous mode [ 94.387176][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 94.399265][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 94.517064][ T6949] hsr0 speed is unknown, defaulting to 1000 [ 94.533984][ T6949] vcan0 speed is unknown, defaulting to 1000 [ 94.666002][ T6959] loop1: detected capacity change from 0 to 512 [ 94.684829][ T6947] loop4: detected capacity change from 0 to 32768 [ 94.702047][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.716443][ T6959] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.730479][ T6947] loop4: p1 p2 p3 < p5 p6 > [ 94.742214][ T6947] loop4: p2 size 16775168 extends beyond EOD, truncated [ 94.751542][ T6959] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1177'. [ 94.763813][ T6947] loop4: p5 start 4294970168 is beyond EOD, truncated [ 94.839194][ T6968] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 94.846996][ T6968] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1180'. [ 94.909439][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.961804][ T6976] pim6reg: entered allmulticast mode [ 94.979590][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.995661][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 95.001502][ T5654] udevd[5654]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 95.030642][ T3650] udevd[3650]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 95.070135][ T6976] pim6reg: left allmulticast mode [ 95.112570][ T6978] hsr0 speed is unknown, defaulting to 1000 [ 95.121880][ T6978] vcan0 speed is unknown, defaulting to 1000 [ 95.547922][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 95.547939][ T29] audit: type=1400 audit(1767478843.530:5776): avc: denied { ioctl } for pid=6999 comm="syz.6.1191" path="socket:[20982]" dev="sockfs" ino=20982 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.587899][ T29] audit: type=1400 audit(1767478843.570:5777): avc: denied { ioctl } for pid=6999 comm="syz.6.1191" path="socket:[20987]" dev="sockfs" ino=20987 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 95.613685][ T29] audit: type=1400 audit(1767478843.570:5778): avc: denied { write } for pid=6999 comm="syz.6.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.636758][ T7002] loop1: detected capacity change from 0 to 1024 [ 95.683663][ T7002] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.698398][ T7002] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.726816][ T7010] serio: Serial port ptm0 [ 95.732078][ T7002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.739451][ T7002] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 95.749569][ T7002] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 95.759682][ T7002] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1193: Failed to acquire dquot type 0 [ 95.771562][ T7002] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 95.781636][ T7002] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 95.792509][ T7002] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1193: Failed to acquire dquot type 0 [ 95.804127][ T7002] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1193: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.818896][ T7002] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 95.849155][ T7002] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 95.863918][ T7002] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1193: Failed to acquire dquot type 0 [ 95.883776][ T7010] serio: Serial port ptm0 [ 95.884491][ T29] audit: type=1326 audit(1767478843.860:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.6.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 95.894568][ T7014] loop6: detected capacity change from 0 to 2048 [ 95.924203][ T7002] EXT4-fs (loop1): 1 orphan inode deleted [ 95.932156][ T7002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.951230][ T7002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.981746][ T7014] loop6: p1 < > p3 p4 < > [ 95.996423][ T7014] loop6: p3 start 4284289 is beyond EOD, truncated [ 96.075455][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 96.093214][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 96.156103][ T7028] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.221029][ T7028] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.290829][ T7028] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.340335][ T7028] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.425893][ T4101] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.453072][ T4101] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.471837][ T4101] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.488483][ T4101] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727788][ T7042] loop4: detected capacity change from 0 to 1024 [ 96.759030][ T7042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.816101][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.926063][ T7052] loop4: detected capacity change from 0 to 2048 [ 96.972882][ T7052] loop4: p1 < > p3 p4 < > [ 96.978453][ T7052] loop4: p3 start 4284289 is beyond EOD, truncated [ 97.051917][ T7061] hsr0 speed is unknown, defaulting to 1000 [ 97.059309][ T7061] vcan0 speed is unknown, defaulting to 1000 [ 97.626234][ T7082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1223'. [ 97.758903][ T7086] loop4: detected capacity change from 0 to 1024 [ 97.814770][ T7086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.838105][ T7086] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.856246][ T7086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1226: bg 0: block 112: padding at end of block bitmap is not set [ 97.922634][ T7102] batman_adv: batadv0: Adding interface: dummy0 [ 97.929614][ T7102] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 97.982741][ T7104] veth1_macvtap: left promiscuous mode [ 97.989561][ T7104] macsec0: entered promiscuous mode [ 97.995867][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.226884][ T7120] netlink: 'syz.7.1240': attribute type 1 has an invalid length. [ 98.254224][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1240'. [ 98.489050][ T7132] syzkaller0: entered allmulticast mode [ 98.532889][ T7132] syzkaller0: entered promiscuous mode [ 98.571192][ T7132] syzkaller0 (unregistering): left allmulticast mode [ 98.577941][ T7132] syzkaller0 (unregistering): left promiscuous mode [ 98.594898][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 98.617151][ T7144] loop7: detected capacity change from 0 to 128 [ 98.639496][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1250'. [ 98.691842][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1252'. [ 98.772111][ T7150] hsr0 speed is unknown, defaulting to 1000 [ 98.781103][ T7150] vcan0 speed is unknown, defaulting to 1000 [ 99.022196][ T7157] loop6: detected capacity change from 0 to 764 [ 99.038026][ T7157] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 99.235627][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 99.267422][ T7167] hsr0 speed is unknown, defaulting to 1000 [ 99.285040][ T7167] vcan0 speed is unknown, defaulting to 1000 [ 99.292390][ T7166] team0: Port device team_slave_1 removed [ 99.528646][ T5804] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 99.794884][ T7182] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.830375][ T7182] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.880028][ T7182] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.950701][ T7182] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.972859][ T3406] Process accounting resumed [ 100.026050][ T4999] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.042926][ T4999] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.071853][ T4999] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.118471][ T4999] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.208301][ T7200] netlink: 'syz.7.1273': attribute type 7 has an invalid length. [ 100.216277][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1273'. [ 100.239033][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 100.327547][ T7204] loop6: detected capacity change from 0 to 2048 [ 100.350330][ T7204] EXT4-fs: inline encryption not supported [ 100.445163][ T7204] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c028, mo2=0002] [ 100.493596][ T7204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.511614][ T7204] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1274: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 100.529254][ T7204] EXT4-fs (loop6): Remounting filesystem read-only [ 100.559338][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.630997][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 100.631014][ T29] audit: type=1326 audit(1767478848.620:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.690514][ T29] audit: type=1326 audit(1767478848.660:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.714526][ T29] audit: type=1326 audit(1767478848.660:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.738639][ T29] audit: type=1326 audit(1767478848.660:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.762701][ T29] audit: type=1326 audit(1767478848.660:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.786215][ T29] audit: type=1326 audit(1767478848.660:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.809812][ T29] audit: type=1326 audit(1767478848.660:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.833390][ T29] audit: type=1326 audit(1767478848.660:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.857044][ T29] audit: type=1326 audit(1767478848.660:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.880687][ T29] audit: type=1326 audit(1767478848.660:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 100.957681][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1292'. [ 100.969686][ T7251] ip6gre2: entered allmulticast mode [ 101.155853][ T7264] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 101.165757][ T7262] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.320030][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 101.505566][ T7288] netlink: 'syz.6.1309': attribute type 2 has an invalid length. [ 101.642970][ T7301] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 101.652496][ T7301] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 102.030161][ T7321] hsr0 speed is unknown, defaulting to 1000 [ 102.069387][ T7321] vcan0 speed is unknown, defaulting to 1000 [ 102.343356][ T7345] netlink: 'syz.4.1330': attribute type 13 has an invalid length. [ 102.667539][ T7369] capability: warning: `syz.2.1342' uses deprecated v2 capabilities in a way that may be insecure [ 102.714147][ T7373] tipc: Enabled bearer , priority 0 [ 102.734320][ T7373] tipc: Disabling bearer [ 102.799977][ T7387] __nla_validate_parse: 4 callbacks suppressed [ 102.800038][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'. [ 102.821492][ T7387] team1: entered promiscuous mode [ 102.826663][ T7387] team1: entered allmulticast mode [ 102.833540][ T7387] 8021q: adding VLAN 0 to HW filter on device team1 [ 102.954383][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 102.974265][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 103.117038][ T7421] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 103.126813][ T7421] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 103.136050][ T7421] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1365'. [ 103.145931][ T7421] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 103.180364][ T7428] loop2: detected capacity change from 0 to 1024 [ 103.304574][ T7440] hsr0 speed is unknown, defaulting to 1000 [ 103.311109][ T7440] vcan0 speed is unknown, defaulting to 1000 [ 103.559115][ T7448] hsr0 speed is unknown, defaulting to 1000 [ 103.613998][ T7448] vcan0 speed is unknown, defaulting to 1000 [ 104.172685][ T7467] loop4: detected capacity change from 0 to 128 [ 104.197172][ T7467] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.218657][ T7467] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.237169][ T7466] hsr0 speed is unknown, defaulting to 1000 [ 104.245070][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.305873][ T7476] bridge5: entered promiscuous mode [ 104.311234][ T7476] bridge5: entered allmulticast mode [ 104.333027][ T7476] team0: Port device bridge5 added [ 104.338259][ T7466] vcan0 speed is unknown, defaulting to 1000 [ 104.452643][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 104.462473][ T7489] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 104.463043][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 104.469010][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.469162][ T7489] vhci_hcd vhci_hcd.0: Device attached [ 104.517850][ T7492] vhci_hcd: connection closed [ 104.518001][ T4610] vhci_hcd vhci_hcd.4: stop threads [ 104.527991][ T4610] vhci_hcd vhci_hcd.4: release socket [ 104.533493][ T4610] vhci_hcd vhci_hcd.4: disconnect device [ 105.091046][ T7530] loop7: detected capacity change from 0 to 256 [ 105.107959][ T7530] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 105.122666][ T7532] loop6: detected capacity change from 0 to 1024 [ 105.150937][ T7532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.170365][ T7532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.662098][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 105.662116][ T29] audit: type=1400 audit(1767478853.650:6124): avc: denied { read } for pid=7531 comm="syz.6.1404" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.294140][ T7532] syz.6.1404 (7532) used greatest stack depth: 7256 bytes left [ 106.303236][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.356072][ T29] audit: type=1400 audit(1767478854.340:6125): avc: denied { read } for pid=7557 comm="syz.6.1412" name="file2" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.381494][ T7558] block device autoloading is deprecated and will be removed. [ 106.394635][ T7558] syz_tun: entered allmulticast mode [ 106.400563][ T7558] syz_tun: left allmulticast mode [ 106.432773][ T7562] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1414'. [ 106.477352][ T7562] 0{X: renamed from gretap0 (while UP) [ 106.490058][ T7562] 0{X: entered allmulticast mode [ 106.496596][ T7562] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 106.646155][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 106.852061][ T29] audit: type=1400 audit(1767478854.840:6126): avc: denied { read } for pid=7583 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.533075][ T29] audit: type=1400 audit(1767478855.520:6127): avc: denied { getopt } for pid=7595 comm="syz.6.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.617127][ T7602] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1430'. [ 107.630588][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.640014][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.654276][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.680818][ T7608] loop6: detected capacity change from 0 to 1024 [ 107.687867][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.697264][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.706857][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.716428][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.725604][ T7608] EXT4-fs: Ignoring removed orlov option [ 107.731725][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.743263][ T7608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.756036][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.796195][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 107.806807][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.816880][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 107.820458][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 107.835808][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.844945][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.855172][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.864922][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.874762][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.885011][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.897404][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.907020][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.917801][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.928828][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.939824][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.949547][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.978741][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 107.990547][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.021121][ T29] audit: type=1400 audit(1767478856.010:6128): avc: denied { nlmsg_read } for pid=7619 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.065802][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.075686][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.085914][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.095264][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.104745][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.115569][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.125346][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.134931][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.144406][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.145230][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.154667][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.173677][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.205001][ T29] audit: type=1326 audit(1767478856.190:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.6.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 108.207694][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.238901][ T29] audit: type=1326 audit(1767478856.230:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.6.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 108.263469][ T29] audit: type=1326 audit(1767478856.230:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.6.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 108.287329][ T29] audit: type=1326 audit(1767478856.230:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.6.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 108.292170][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.311505][ T29] audit: type=1326 audit(1767478856.250:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.6.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 108.346411][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.356053][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.366105][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.385221][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.406594][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.416994][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.469361][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.492513][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.525339][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.551632][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.564323][ T7605] 9pnet_fd: p9_fd_create_tcp (7605): problem connecting socket to 127.0.0.1 [ 108.711860][ T7647] loop4: detected capacity change from 0 to 256 [ 108.962480][ T7667] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1455'. [ 109.050804][ T7670] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 109.152481][ T7677] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1459'. [ 109.161680][ T7677] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1459'. [ 109.215960][ T7677] loop6: detected capacity change from 0 to 512 [ 109.264358][ T7677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.307349][ T7677] EXT4-fs (loop6): 1 truncate cleaned up [ 109.332522][ T7677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.385511][ T7692] loop7: detected capacity change from 0 to 512 [ 109.391408][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.402059][ T7692] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 109.411638][ T7692] EXT4-fs (loop7): 1 truncate cleaned up [ 109.419323][ T7692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.579712][ T6507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.579793][ T7697] hsr0 speed is unknown, defaulting to 1000 [ 109.595961][ T7697] vcan0 speed is unknown, defaulting to 1000 [ 109.717495][ T7705] loop7: detected capacity change from 0 to 1024 [ 109.731179][ T7705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.745151][ T7710] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 109.771325][ T6507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.843605][ T7715] hsr0 speed is unknown, defaulting to 1000 [ 109.856207][ T7715] vcan0 speed is unknown, defaulting to 1000 [ 110.311902][ T7731] loop4: detected capacity change from 0 to 1024 [ 110.319865][ T7731] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.346090][ T7731] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 110.380035][ T7731] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.387375][ T7731] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1478: Failed to acquire dquot type 0 [ 110.399800][ T7731] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1478: Failed to acquire dquot type 0 [ 110.403346][ T7734] hsr0 speed is unknown, defaulting to 1000 [ 110.419329][ T7734] vcan0 speed is unknown, defaulting to 1000 [ 110.427709][ T7731] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1478: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.448476][ T7731] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1478: Failed to acquire dquot type 0 [ 110.463361][ T7731] EXT4-fs (loop4): 1 orphan inode deleted [ 110.470675][ T7731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.500115][ T7731] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.133326][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 111.133344][ T29] audit: type=1326 audit(1767478859.120:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 111.175850][ T29] audit: type=1326 audit(1767478859.150:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 111.200774][ T29] audit: type=1326 audit(1767478859.150:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 111.224440][ T29] audit: type=1326 audit(1767478859.150:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 111.249571][ T29] audit: type=1326 audit(1767478859.150:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 111.274198][ T29] audit: type=1326 audit(1767478859.150:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e0cf749 code=0x7ffc0000 [ 111.449904][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.461630][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.483632][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.509074][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.525872][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.535704][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.545853][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.556645][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.574652][ T7773] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1494'. [ 111.584737][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.594582][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.610227][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.627949][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.645117][ T7776] loop7: detected capacity change from 0 to 1024 [ 111.652088][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.662436][ T7776] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.674990][ T7776] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 111.683362][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.692905][ T7776] EXT4-fs (loop7): orphan cleanup on readonly fs [ 111.699769][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.708978][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.719466][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.721680][ T7776] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 111.728592][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.747500][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.758675][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.767872][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.776939][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.783168][ T7776] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 111.786698][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.805095][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.822087][ T7776] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1495: Failed to acquire dquot type 0 [ 111.833847][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.843795][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.853271][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.857207][ T7776] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 111.862491][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.882183][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.891510][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.912499][ T7776] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 111.950862][ T7776] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1495: Failed to acquire dquot type 0 [ 111.956712][ T7763] 9pnet_fd: p9_fd_create_tcp (7763): problem connecting socket to 127.0.0.1 [ 111.979090][ T7776] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.1495: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.033668][ T7776] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1495: Failed to acquire dquot type 0 [ 112.065942][ T7776] EXT4-fs (loop7): 1 orphan inode deleted [ 112.097154][ T7776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.221628][ T7776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.235641][ T7786] loop2: detected capacity change from 0 to 1024 [ 112.243809][ T7786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.290060][ T7786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.372209][ T7797] hsr0 speed is unknown, defaulting to 1000 [ 112.378905][ T7797] vcan0 speed is unknown, defaulting to 1000 [ 112.621853][ T7811] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 112.635598][ T7811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.651767][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 112.742553][ T7811] bond1 (unregistering): Released all slaves [ 112.852017][ T7819] hsr0 speed is unknown, defaulting to 1000 [ 112.869233][ T7819] vcan0 speed is unknown, defaulting to 1000 [ 112.876894][ T7821] hsr0 speed is unknown, defaulting to 1000 [ 112.973742][ T7821] vcan0 speed is unknown, defaulting to 1000 [ 113.652310][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.678033][ T7837] hsr0 speed is unknown, defaulting to 1000 [ 113.684785][ T7837] vcan0 speed is unknown, defaulting to 1000 [ 113.792309][ T7853] loop6: detected capacity change from 0 to 128 [ 113.862636][ T7853] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.918893][ T7853] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.119797][ T5658] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.250663][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 114.259882][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 114.289900][ T7873] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.328783][ T7867] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.380023][ T7880] loop2: detected capacity change from 0 to 764 [ 114.399414][ T7880] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 114.425595][ T7885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.571775][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 114.615726][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 114.634295][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1549'. [ 114.684941][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1549'. [ 114.698879][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1551'. [ 114.774772][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1551'. [ 115.096126][ T7940] tipc: Enabled bearer , priority 0 [ 115.105008][ T7940] tipc: Disabling bearer [ 115.175873][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1569'. [ 115.231333][ T7954] hsr0 speed is unknown, defaulting to 1000 [ 115.237958][ T7954] vcan0 speed is unknown, defaulting to 1000 [ 115.249215][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1570'. [ 115.783269][ T7989] tipc: Enabling of bearer rejected, failed to enable media [ 115.836625][ T7993] loop6: detected capacity change from 0 to 764 [ 115.847970][ T7993] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 116.526053][ T8011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.549959][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 116.549979][ T29] audit: type=1326 audit(1767478864.540:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.6.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.602558][ T29] audit: type=1326 audit(1767478864.540:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.6.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.626219][ T29] audit: type=1326 audit(1767478864.540:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.6.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.649994][ T29] audit: type=1326 audit(1767478864.580:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.6.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.763034][ T29] audit: type=1326 audit(1767478864.750:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.786684][ T29] audit: type=1326 audit(1767478864.750:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.810522][ T29] audit: type=1326 audit(1767478864.750:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.834017][ T29] audit: type=1326 audit(1767478864.750:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.857640][ T29] audit: type=1326 audit(1767478864.750:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.881593][ T29] audit: type=1326 audit(1767478864.750:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 116.917783][ T8024] hsr0 speed is unknown, defaulting to 1000 [ 116.945573][ T8024] vcan0 speed is unknown, defaulting to 1000 [ 117.500018][ T8061] loop2: detected capacity change from 0 to 512 [ 117.521609][ T8061] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.535917][ T8061] EXT4-fs (loop2): 1 truncate cleaned up [ 117.565515][ T8061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.884324][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.889130][ T8103] hsr0 speed is unknown, defaulting to 1000 [ 117.899865][ T8103] vcan0 speed is unknown, defaulting to 1000 [ 118.016168][ T8116] netlink: 'syz.2.1630': attribute type 13 has an invalid length. [ 118.350646][ T10] vcan0 speed is unknown, defaulting to 1000 [ 118.418209][ T4610] bond0: (slave bridge4): link status up again after 0 ms [ 118.438242][ T4610] bond0: (slave bridge4): link status up again after 0 ms [ 118.445497][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 118.625698][ T8134] tipc: Enabled bearer , priority 0 [ 118.664778][ T4104] bond0: (slave bridge4): failed to get link speed/duplex [ 118.778447][ T2492] bond0: (slave bridge4): failed to get link speed/duplex [ 118.978333][ T8132] tipc: Resetting bearer [ 119.035687][ T8132] tipc: Disabling bearer [ 119.121341][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 119.151290][ T8140] netlink: 'syz.6.1651': attribute type 13 has an invalid length. [ 119.390385][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 119.498157][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 119.616672][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 119.730373][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 119.926085][ T8175] SET target dimension over the limit! [ 119.978469][ T8180] tipc: Enabling of bearer rejected, failed to enable media [ 120.005397][ T8181] loop2: detected capacity change from 0 to 128 [ 120.030767][ T8181] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.049301][ T8181] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.139154][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.243975][ T8193] __nla_validate_parse: 9 callbacks suppressed [ 120.244010][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 120.366133][ T8205] netlink: 'syz.1.1661': attribute type 13 has an invalid length. [ 120.484452][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 120.556223][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 120.566219][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 120.782451][ T8234] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1677'. [ 120.796896][ T8236] bridge4: entered promiscuous mode [ 120.802516][ T8236] bridge4: entered allmulticast mode [ 120.830599][ T8236] team0: Port device bridge4 added [ 120.836537][ T8241] loop9: detected capacity change from 0 to 7 [ 120.855750][ T8236] bridge0: port 3(team0) entered blocking state [ 120.856955][ T8241] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.862317][ T8236] bridge0: port 3(team0) entered disabled state [ 120.878316][ T8236] team0: entered allmulticast mode [ 120.883862][ T8236] C: entered allmulticast mode [ 120.892447][ T8236] team0: entered promiscuous mode [ 120.897893][ T8236] C: entered promiscuous mode [ 120.904853][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 120.911558][ T8241] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.915469][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.922365][ T8241] loop9: unable to read partition table [ 120.935613][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.993201][ T8241] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 120.993201][ T8241] ) failed (rc=-5) [ 120.995215][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.038856][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.047075][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.055984][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.115016][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.186010][ T8265] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 121.413119][ T8288] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1699'. [ 121.431060][ T8290] netlink: 'syz.6.1702': attribute type 30 has an invalid length. [ 121.456791][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1701'. [ 121.604568][ T8304] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1703'. [ 121.657875][ T8310] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.711548][ T8310] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.770651][ T8310] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.829948][ T8310] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.860648][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 121.860666][ T29] audit: type=1326 audit(1767478869.850:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 121.898247][ T29] audit: type=1326 audit(1767478869.850:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 121.922052][ T29] audit: type=1326 audit(1767478869.850:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 121.945809][ T29] audit: type=1326 audit(1767478869.850:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 121.969444][ T29] audit: type=1326 audit(1767478869.850:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 121.993416][ T29] audit: type=1326 audit(1767478869.850:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 122.017124][ T29] audit: type=1326 audit(1767478869.850:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 122.040884][ T29] audit: type=1326 audit(1767478869.850:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 122.065232][ T29] audit: type=1326 audit(1767478869.850:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 122.088967][ T29] audit: type=1326 audit(1767478869.850:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.6.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0136f749 code=0x7ffc0000 [ 122.120677][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.133088][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.144771][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.157099][ T4610] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.194376][ T8324] bridge: RTM_NEWNEIGH with invalid ether address [ 122.240401][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 122.382669][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.396298][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.404969][ T8344] batman_adv: batadv0: Removing interface: dummy0 [ 122.414927][ T8347] netlink: 'syz.7.1732': attribute type 4 has an invalid length. [ 122.465559][ T8330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8330 comm=syz.2.1717 [ 122.534920][ T8357] loop2: detected capacity change from 0 to 128 [ 122.552166][ T8357] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.564839][ T8357] ext4 filesystem being mounted at /syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.780416][ T8371] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.851624][ T8371] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.890902][ T8371] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.930102][ T8371] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.996880][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.017399][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.031609][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.050223][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.528201][ T12] net_ratelimit: 31 callbacks suppressed [ 123.528217][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 123.610815][ T8380] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 123.636812][ T8384] bridge10: entered promiscuous mode [ 123.642333][ T8384] bridge10: entered allmulticast mode [ 123.676916][ T8380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.688978][ T8390] netlink: 'syz.7.1735': attribute type 13 has an invalid length. [ 123.721287][ T8391] bond1: (slave veth5): Enslaving as an active interface with a down link [ 123.834887][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.851505][ T8380] bond1: (slave batadv0): making interface the new active one [ 123.864400][ T8380] batadv0: entered promiscuous mode [ 123.870251][ T8380] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 123.927863][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 124.041767][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 124.119205][ T8414] netlink: 'syz.7.1749': attribute type 1 has an invalid length. [ 124.150187][ T8414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.163264][ T8414] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 124.173486][ T8414] bond1: entered allmulticast mode [ 124.197138][ T8414] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 124.218315][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 124.368272][ T4108] bond0: (slave bridge4): failed to get link speed/duplex [ 124.450234][ T8429] ip6gre1: entered allmulticast mode [ 124.498199][ T4108] bond0: (slave bridge4): failed to get link speed/duplex [ 124.608423][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 124.655364][ T8399] syz.2.1742 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 124.666543][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.2.1742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.666576][ T8399] Tainted: [W]=WARN [ 124.666583][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.666595][ T8399] Call Trace: [ 124.666620][ T8399] [ 124.666630][ T8399] __dump_stack+0x1d/0x30 [ 124.666658][ T8399] dump_stack_lvl+0x95/0xd0 [ 124.666678][ T8399] dump_stack+0x15/0x1b [ 124.666760][ T8399] dump_header+0x81/0x240 [ 124.666784][ T8399] oom_kill_process+0x295/0x350 [ 124.666807][ T8399] out_of_memory+0x97b/0xb80 [ 124.666831][ T8399] try_charge_memcg+0x610/0xa10 [ 124.666902][ T8399] charge_memcg+0x51/0xc0 [ 124.666935][ T8399] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 124.666971][ T8399] __read_swap_cache_async+0x17b/0x2d0 [ 124.667101][ T8399] swap_cluster_readahead+0x362/0x3c0 [ 124.667192][ T8399] swapin_readahead+0xde/0x820 [ 124.667219][ T8399] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 124.667317][ T8399] ? __rcu_read_unlock+0x34/0x70 [ 124.667338][ T8399] ? __rcu_read_unlock+0x4f/0x70 [ 124.667359][ T8399] ? swap_cache_get_folio+0x277/0x280 [ 124.667389][ T8399] do_swap_page+0x2b4/0x21e0 [ 124.667442][ T8399] ? __pfx_default_wake_function+0x10/0x10 [ 124.667483][ T8399] handle_mm_fault+0x9d8/0x2c60 [ 124.667608][ T8399] do_user_addr_fault+0x630/0x1080 [ 124.667645][ T8399] exc_page_fault+0x62/0xa0 [ 124.667704][ T8399] asm_exc_page_fault+0x26/0x30 [ 124.667727][ T8399] RIP: 0033:0x7faa4dda74e0 [ 124.667804][ T8399] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 124.667827][ T8399] RSP: 002b:00007ffe75f0f0a8 EFLAGS: 00010202 [ 124.667847][ T8399] RAX: 00000000fffffffa RBX: 00007faa4dfd5fa0 RCX: 0000000000000000 [ 124.667863][ T8399] RDX: 00007ffe75f0f0f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.667875][ T8399] RBP: 00007faa4dfd7da0 R08: 0000000020bf7640 R09: 7fffffffffffffff [ 124.667887][ T8399] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e729 [ 124.667900][ T8399] R13: 00007ffe75f0f210 R14: ffffffffffffffff R15: 00007ffe75f0f230 [ 124.667922][ T8399] [ 124.668005][ T8399] memory: usage 307200kB, limit 307200kB, failcnt 1916 [ 124.718196][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 124.718639][ T8399] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 124.828134][ T4108] bond0: (slave bridge4): failed to get link speed/duplex [ 124.836573][ T8399] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 124.924050][ T8399] Memory cgroup stats for /syz2: [ 124.925181][ T8399] cache 20480 [ 124.933511][ T8399] rss 4096 [ 124.936544][ T8399] shmem 0 [ 124.939536][ T8399] mapped_file 0 [ 124.943003][ T8399] dirty 0 [ 124.945995][ T8399] writeback 0 [ 124.948497][ T5003] bond0: (slave bridge4): failed to get link speed/duplex [ 124.949394][ T8399] workingset_refault_anon 2225 [ 124.961377][ T8399] workingset_refault_file 1696 [ 124.966154][ T8399] swap 266240 [ 124.969843][ T8399] swapcached 0 [ 124.973224][ T8399] pgpgin 152638 [ 124.976710][ T8399] pgpgout 152632 [ 124.980368][ T8399] pgfault 153093 [ 124.984282][ T8399] pgmajfault 404 [ 124.988403][ T8399] inactive_anon 0 [ 124.992236][ T8399] active_anon 0 [ 124.995793][ T8399] inactive_file 24576 [ 124.999913][ T8399] active_file 0 [ 125.003476][ T8399] unevictable 0 [ 125.006943][ T8399] hierarchical_memory_limit 314572800 [ 125.012384][ T8399] hierarchical_memsw_limit 9223372036854771712 [ 125.018835][ T8399] total_cache 20480 [ 125.022682][ T8399] total_rss 4096 [ 125.026470][ T8399] total_shmem 0 [ 125.030065][ T8399] total_mapped_file 0 [ 125.034097][ T8399] total_dirty 0 [ 125.037566][ T8399] total_writeback 0 [ 125.041659][ T8399] total_workingset_refault_anon 2225 [ 125.047120][ T8399] total_workingset_refault_file 1696 [ 125.052663][ T8399] total_swap 266240 [ 125.056683][ T8399] total_swapcached 0 [ 125.060700][ T8399] total_pgpgin 152638 [ 125.064815][ T8399] total_pgpgout 152632 [ 125.069056][ T8399] total_pgfault 153093 [ 125.073378][ T8399] total_pgmajfault 404 [ 125.077636][ T8399] total_inactive_anon 0 [ 125.082120][ T8399] total_active_anon 0 [ 125.086133][ T8399] total_inactive_file 24576 [ 125.090787][ T8399] total_active_file 0 [ 125.094967][ T8399] total_unevictable 0 [ 125.099080][ T8399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1742,pid=8399,uid=0 [ 125.113845][ T8399] Memory cgroup out of memory: Killed process 8399 (syz.2.1742) total-vm:95884kB, anon-rss:1140kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 125.266187][ T8400] syz.2.1742 (8400) used greatest stack depth: 7216 bytes left [ 125.723424][ T8472] __nla_validate_parse: 6 callbacks suppressed [ 125.723439][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 126.164000][ T8492] xt_connbytes: Forcing CT accounting to be enabled [ 126.171348][ T8490] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1778'. [ 126.254548][ T8497] hsr0 speed is unknown, defaulting to 1000 [ 126.261371][ T8497] vcan0 speed is unknown, defaulting to 1000 [ 126.344815][ T8507] xt_ecn: cannot match TCP bits for non-tcp packets [ 126.482600][ T8511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8511 comm=syz.6.1785 [ 126.631565][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 126.751212][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1790'. [ 126.798030][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1790'. [ 126.858063][ T8534] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1795'. [ 126.869183][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 126.869200][ T29] audit: type=1326 audit(1767478874.860:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 126.916936][ T29] audit: type=1326 audit(1767478874.890:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 126.940843][ T29] audit: type=1326 audit(1767478874.890:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 126.964465][ T29] audit: type=1326 audit(1767478874.890:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 126.988365][ T29] audit: type=1326 audit(1767478874.890:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 127.012816][ T29] audit: type=1326 audit(1767478874.890:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 127.036651][ T29] audit: type=1326 audit(1767478874.890:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 127.060483][ T29] audit: type=1326 audit(1767478874.890:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbea81df749 code=0x7ffc0000 [ 127.085302][ T29] audit: type=1326 audit(1767478874.890:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbea81d65e7 code=0x7ffc0000 [ 127.110314][ T29] audit: type=1326 audit(1767478874.890:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbea817b829 code=0x7ffc0000 [ 127.207308][ T8550] xt_connbytes: Forcing CT accounting to be enabled [ 127.759354][ T8587] hsr0 speed is unknown, defaulting to 1000 [ 127.766192][ T8587] vcan0 speed is unknown, defaulting to 1000 [ 127.935809][ T8598] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1818'. [ 127.957312][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.968188][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.979106][ T8598] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 127.994746][ T8598] bond0 (unregistering): Released all slaves [ 128.408549][ C0] ================================================================== [ 128.416937][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rx_register [ 128.424692][ C0] [ 128.427184][ C0] read-write to 0xffff88810507e020 of 4 bytes by task 8625 on cpu 1: [ 128.435418][ C0] can_rx_register+0x46c/0x4d0 [ 128.440182][ C0] bcm_rx_setup+0xb0d/0xe10 [ 128.444688][ C0] bcm_sendmsg+0x1b2/0x480 [ 128.449111][ C0] __sock_sendmsg+0x145/0x180 [ 128.453991][ C0] ____sys_sendmsg+0x31e/0x4a0 [ 128.458857][ C0] ___sys_sendmsg+0x17b/0x1d0 [ 128.463555][ C0] __x64_sys_sendmsg+0xd4/0x160 [ 128.468522][ C0] x64_sys_call+0x17ba/0x3000 [ 128.473304][ C0] do_syscall_64+0xca/0x2b0 [ 128.478181][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.484183][ C0] [ 128.487113][ C0] read to 0xffff88810507e020 of 4 bytes by interrupt on cpu 0: [ 128.494654][ C0] can_rcv_filter+0x40/0x4f0 [ 128.499263][ C0] can_receive+0xfb/0x1c0 [ 128.503620][ C0] canfd_rcv+0xed/0x190 [ 128.508617][ C0] __netif_receive_skb+0x120/0x270 [ 128.513956][ C0] process_backlog+0x228/0x420 [ 128.518745][ C0] __napi_poll+0x5f/0x300 [ 128.523102][ C0] net_rx_action+0x425/0x8c0 [ 128.527699][ C0] handle_softirqs+0xba/0x290 [ 128.532524][ C0] run_ksoftirqd+0x1c/0x30 [ 128.536985][ C0] smpboot_thread_fn+0x32b/0x530 [ 128.542037][ C0] kthread+0x489/0x510 [ 128.546143][ C0] ret_from_fork+0x149/0x290 [ 128.550754][ C0] ret_from_fork_asm+0x1a/0x30 [ 128.555529][ C0] [ 128.557907][ C0] value changed: 0x00000000 -> 0x00000001 [ 128.563624][ C0] [ 128.565962][ C0] Reported by Kernel Concurrency Sanitizer on: [ 128.572297][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.583610][ C0] Tainted: [W]=WARN [ 128.587423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.597917][ C0] ================================================================== [ 128.608347][ T12] net_ratelimit: 39 callbacks suppressed [ 128.608380][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 128.728228][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 128.838148][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 128.958181][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 129.068164][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 129.178166][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 129.288252][ T4610] bond0: (slave bridge4): failed to get link speed/duplex [ 129.398168][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 129.508329][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 129.618213][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 133.718191][ T5003] net_ratelimit: 36 callbacks suppressed [ 133.718209][ T5003] bond0: (slave bridge4): failed to get link speed/duplex [ 133.838215][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 133.948242][ T5003] bond0: (slave bridge4): failed to get link speed/duplex [ 134.058274][ T4999] bond0: (slave bridge4): failed to get link speed/duplex [ 134.168185][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 134.278221][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 134.398226][ T4999] bond0: (slave bridge4): failed to get link speed/duplex [ 134.508261][ T4613] bond0: (slave bridge4): failed to get link speed/duplex [ 134.618186][ T12] bond0: (slave bridge4): failed to get link speed/duplex [ 134.728214][ T5003] bond0: (slave bridge4): failed to get link speed/duplex [ 135.078191][ T5003] batadv0: left promiscuous mode