last executing test programs: 2m8.154686286s ago: executing program 2 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2m8.108984056s ago: executing program 2 (id=232): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000040)=0xe68, 0x4) ftruncate(0xffffffffffffffff, 0x51a9497) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2m7.910278437s ago: executing program 2 (id=234): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r2, &(0x7f00000011c0)=[{&(0x7f0000000040)="7996", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r2, 0x0) fchdir(r1) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x24) lseek(r3, 0x1, 0x1) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 2m7.867702738s ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 2m7.40469529s ago: executing program 2 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}}, 0x0) 2m7.156433192s ago: executing program 2 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xa, 0x74000000, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 2m6.957329633s ago: executing program 32 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xa, 0x74000000, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 51.087973704s ago: executing program 4 (id=1783): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 50.878191146s ago: executing program 4 (id=1788): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") unlink(&(0x7f0000000180)='./file1\x00') 50.619283057s ago: executing program 4 (id=1794): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r1, r2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x922000000001, 0x106) 50.14458782s ago: executing program 4 (id=1799): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081c, &(0x7f00000005c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x1, 0x502, &(0x7f0000002a00)="$eJzs3c9vVFsdAPDvTDvttJTXvudbqNH38D0UDWHaDtAQFoorYwyJkaUmUNuhaTrtNJ0WaWVR1m5NJHGlS/8A16zcuzG6c4MLE380GmrCYsy9cweGMkMbWmaazueT3Nxz7rnM93uAew5zyswJYGBdiIjdiBiJiHsRMZldz2VH3GoeyX3P9x4t7O89WshFo3HnX7m0PbkWbb8mcS57zWJE/Oh7ET/NvRm3vr2zMl+tVjay+vRwVlhenV+qLFXWyuW52bmZG1evl0+sr5+ujmSlrz774+63fp6kNZFdSfvxotFonFi0pmbXCy/jJJKu/uCE4/TLUNafkX4nwjvJR8RHEfFZ+vxPxlAM9zslAOA9azQmozHZXgcAzrp8ugaWy5eytYCJyOdLpeYa3scxnq/W6puX79e21haba2VTUcjfX65WZrK1wqko5JL6bFp+VS8fqF+NiA8j4pejY2m9tFCrLvbzHz4AMMDOHZj//zvanP8BgDOu2O8EAICeM/8DwOAx/wPA4DH/A8Dgac7/Y/1OAwDoIe//AWDwmP8BYKD88Pbt5GjsZ9/jvfhge2ul9uDKYqW+UlrdWigt1DbWS0u12lL6nT2rh71etVZbn70WWw+nvr1e35yub+/cXa1trW3eTb/X+26lkN6124OeAQDdfPjp07/kkhn55lh6RNteDoW+Zga8b/l+JwD0zVC/EwD6xm5fMLiO8R7f8gCcER226H1NsdMHhBonv18u0DuXvmT9HwZV2/q//wUMA8b6Pwwu6/8wuBqN3FH3/I+j3ggAnG7W+IEuP///KDv/LvvhwE8WD97x5H1mBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKdba//fUrYX+ETk86VSxPmImIpC7v5ytTITER9ExJ9HC6NJfbbPOQMAx5X/ey7b/+vS5MWJ15o+OfeyOBIRP/v1nV89nN/c3PhTxEju36Ot65tPsuvl3mcPAByuNU+n57Y38s/3Hi20jl7m84/vRkSxGX9/byT2X8YfjuH0XIxCRIz/J5fVm3JtaxfHsfs4Ir7Yqf+5mEjXQJo7nx6Mn8Q+39P4+dfi59O25jn5vfjCCeQCg+ZpMv7c6vT85eNCeu78/BfTEer4svEveamF/XQMfBW/Nf4NdRn/Lhw1xrU/fL9ZGnuz7XHEl4cjWrH328afVvxcl/gXjxj/r1/55LNubY3fRFyKzvHbY01vrq5P17d3riyvzi9Vlipr5fLc7NzMjavXy9PpGvV099ngnzcvf9CtLen/eJf4xUP6//Uj9v+3L+79+Gtvif/NzzvFz8fHb4mfzInfOGL8+fHfF7u1JfEXu/T/sD//y0eM/+xvO29sGw4A9E99e2dlvlqtbNS3z7cKOwoKp7OQ/JU9BWl0LHzn5F4w3nrPSHRu+sXnzWf6QFOj8U5pdBsxTmLVDTgNXg05Ef/rdzIAAAAAAAAAAAAAAEBHvfh0VL/7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNn1/wAAAP//6KbPLA==") syz_open_procfs(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 49.867099262s ago: executing program 4 (id=1804): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x134c, &(0x7f00000007c0)={0x0, 0xc8a0, 0xc000, 0xb, 0x100000c1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x1, 0x1, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) memfd_secret(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 49.550828364s ago: executing program 4 (id=1816): socket$inet6(0xa, 0x3, 0x5) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 49.505101544s ago: executing program 33 (id=1816): socket$inet6(0xa, 0x3, 0x5) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 18.874677917s ago: executing program 1 (id=2434): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 18.848824047s ago: executing program 1 (id=2436): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 18.776069628s ago: executing program 1 (id=2438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 18.716444908s ago: executing program 1 (id=2439): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x3a9, 0x6, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 18.577797198s ago: executing program 1 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000580)="88b6", 0x2, 0x400c000, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 17.691456734s ago: executing program 1 (id=2462): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x4) socket(0x23, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.82195333s ago: executing program 6 (id=2642): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = mq_open(&(0x7f0000000000)=']\x00', 0x40, 0x28, 0x0) r2 = dup2(r0, r1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x5d, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0) write$selinux_access(r2, &(0x7f00000005c0)={'system_u:object_r:hwclock_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xd}, 0x5e) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), r0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r4, 0x6e89120e9a8e3b9e, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.539495618s ago: executing program 6 (id=2656): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff6000/0x2000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.659747783s ago: executing program 34 (id=2462): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x4) socket(0x23, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.291024076s ago: executing program 6 (id=2669): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62492542}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r1}, 0x18) getcwd(0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") utimes(&(0x7f0000000380)='./file0\x00', 0x0) 2.080462957s ago: executing program 6 (id=2672): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400"], 0x48) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={0x3, 0x6, 0x5, 0x8, 0xff, 0xbb}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x11, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 2.015295557s ago: executing program 6 (id=2674): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.830540389s ago: executing program 5 (id=2675): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x41100, 0xec, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.770439839s ago: executing program 5 (id=2676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) 1.485972471s ago: executing program 3 (id=2678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ecdac547792d1b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 1.315251572s ago: executing program 0 (id=2680): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r4, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 1.267625222s ago: executing program 5 (id=2681): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x701) 1.222152792s ago: executing program 5 (id=2682): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81, 0x80, 0x80}}, 0x1c}}, 0x0) 991.435964ms ago: executing program 6 (id=2683): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@nodioread_nolock}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) 923.071144ms ago: executing program 0 (id=2684): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a80)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@directio}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}, {@access_user}, {@version_9p2000}, {@version_9p2000}, {@version_u}, {@access_client}, {@cache_none}, {@version_u}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@seclabel}]}}) 806.903495ms ago: executing program 0 (id=2685): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0, 0x0, 0x3}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 631.569966ms ago: executing program 3 (id=2686): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000300)=0x17ff, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) 613.053696ms ago: executing program 0 (id=2687): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresgid(0xee00, 0xee01, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000280)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') fchdir(r3) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") 595.897546ms ago: executing program 5 (id=2688): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r1 = dup3(0xffffffffffffffff, r0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x24, 0x0, 0x0) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 582.426066ms ago: executing program 3 (id=2689): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x80) r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 564.388516ms ago: executing program 0 (id=2690): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 540.294076ms ago: executing program 3 (id=2691): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 392.359627ms ago: executing program 7 (id=2665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 373.809587ms ago: executing program 3 (id=2692): r0 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 301.945937ms ago: executing program 5 (id=2693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='sched_switch\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) close(r4) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 299.030277ms ago: executing program 7 (id=2694): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getrlimit(0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd3, 0x4, 0x0, 0x0) shutdown(r1, 0x1) 288.564808ms ago: executing program 3 (id=2695): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff6000/0x2000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 219.172588ms ago: executing program 7 (id=2696): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 142.762899ms ago: executing program 7 (id=2697): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0, 0x0, 0x3}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 108.072209ms ago: executing program 7 (id=2698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x20000010}, 0x810) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000895}, 0x44094) write$P9_RWALK(r0, 0x0, 0x30) 0s ago: executing program 0 (id=2699): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000001000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.5.1275'. [ 95.660618][ T6886] lo speed is unknown, defaulting to 1000 [ 95.670123][ T6886] wg1 speed is unknown, defaulting to 1000 [ 95.867684][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 95.867706][ T29] audit: type=1326 audit(95.846:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 95.963451][ T29] audit: type=1326 audit(95.846:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 95.986399][ T29] audit: type=1326 audit(95.846:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.009297][ T29] audit: type=1326 audit(95.846:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.032086][ T29] audit: type=1326 audit(95.846:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.054915][ T29] audit: type=1326 audit(95.846:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.077640][ T29] audit: type=1326 audit(95.846:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.100436][ T29] audit: type=1326 audit(95.846:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.123207][ T29] audit: type=1326 audit(95.846:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.145954][ T29] audit: type=1326 audit(95.886:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c31f6c9 code=0x7ffc0000 [ 96.615600][ T6922] loop5: detected capacity change from 0 to 1024 [ 96.661278][ T6922] EXT4-fs: Ignoring removed orlov option [ 96.667022][ T6922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.712054][ T6922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.763867][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.927953][ T6937] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 96.944533][ T6937] bond0: (slave dummy0): Releasing backup interface [ 96.959168][ T6937] team0: Failed to send options change via netlink (err -105) [ 96.966823][ T6937] team0: Port device dummy0 added [ 96.981494][ T6941] lo speed is unknown, defaulting to 1000 [ 96.989633][ T6937] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 97.000151][ T6941] wg1 speed is unknown, defaulting to 1000 [ 97.007173][ T6937] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.017367][ T6937] team0: Failed to send options change via netlink (err -105) [ 97.025128][ T6937] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.034714][ T6937] team0: Port device dummy0 removed [ 97.042462][ T6937] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.108529][ T6952] : renamed from bond_slave_0 [ 97.212119][ T6957] bridge: RTM_NEWNEIGH with invalid ether address [ 97.444679][ T6959] lo speed is unknown, defaulting to 1000 [ 97.453322][ T6959] wg1 speed is unknown, defaulting to 1000 [ 97.649423][ T6967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.755748][ T6993] lo speed is unknown, defaulting to 1000 [ 97.771655][ T6993] wg1 speed is unknown, defaulting to 1000 [ 97.800304][ T6995] bridge: RTM_NEWNEIGH with invalid ether address [ 97.841091][ T6998] loop0: detected capacity change from 0 to 164 [ 97.857870][ T6998] bio_check_eod: 34 callbacks suppressed [ 97.857889][ T6998] syz.0.1321: attempt to access beyond end of device [ 97.857889][ T6998] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.878793][ T6998] syz.0.1321: attempt to access beyond end of device [ 97.878793][ T6998] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.902811][ T7002] veth4: entered promiscuous mode [ 97.907913][ T7002] veth4: entered allmulticast mode [ 98.149459][ T7018] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 98.270237][ T7021] __nla_validate_parse: 1 callbacks suppressed [ 98.270262][ T7021] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1330'. [ 98.308945][ T7004] lo speed is unknown, defaulting to 1000 [ 98.320596][ T7004] wg1 speed is unknown, defaulting to 1000 [ 98.634280][ T7045] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 98.677374][ T7045] bond3: entered promiscuous mode [ 98.682991][ T7045] bond3: entered allmulticast mode [ 98.724919][ T7045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.763833][ T7050] netlink: 'syz.1.1340': attribute type 4 has an invalid length. [ 98.771824][ T7050] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1340'. [ 98.795889][ T7048] bridge5: entered promiscuous mode [ 98.801510][ T7048] bridge5: entered allmulticast mode [ 98.818042][ T7048] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 98.855253][ T7050] .`: renamed from bond0 [ 98.890606][ T4605] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.037134][ T7065] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1347'. [ 99.046275][ T4625] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.066657][ T7065] 0ªî{X¹¦: renamed from gretap0 [ 99.079598][ T7065] 0ªî{X¹¦: entered allmulticast mode [ 99.088826][ T7065] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.332102][ T7078] loop0: detected capacity change from 0 to 256 [ 99.340541][ T7077] lo speed is unknown, defaulting to 1000 [ 99.347104][ T7077] wg1 speed is unknown, defaulting to 1000 [ 99.353199][ T7062] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 99.360984][ T7062] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1345'. [ 99.402901][ T7081] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 99.410802][ T7081] netlink: 'syz.1.1353': attribute type 4 has an invalid length. [ 99.418559][ T7081] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1353'. [ 99.454479][ T7082] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 99.462356][ T7082] netlink: 'syz.1.1353': attribute type 4 has an invalid length. [ 99.470111][ T7082] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1353'. [ 99.625585][ T7088] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 99.682582][ T7098] bond0: entered promiscuous mode [ 99.687688][ T7098] bond0: entered allmulticast mode [ 99.693585][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.714063][ T7088] bridge0: entered promiscuous mode [ 99.719406][ T7088] bridge0: entered allmulticast mode [ 99.725610][ T7088] bond0: (slave bridge0): Enslaving as a backup interface with an up link [ 99.733573][ T7100] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1360'. [ 99.752878][ T7100] 0ªî{X¹¦: renamed from gretap0 [ 99.760307][ T7100] 0ªî{X¹¦: entered allmulticast mode [ 99.771853][ T7102] xt_hashlimit: size too large, truncated to 1048576 [ 99.790479][ T4605] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.806184][ T7100] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.910447][ T4605] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.263621][ T7127] lo speed is unknown, defaulting to 1000 [ 100.270246][ T7127] wg1 speed is unknown, defaulting to 1000 [ 100.671640][ T7144] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1377'. [ 100.683150][ T7144] 0ªî{X¹¦: renamed from gretap0 [ 100.697651][ T7144] 0ªî{X¹¦: entered allmulticast mode [ 100.736284][ T7144] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 100.990391][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 100.990409][ T29] audit: type=1326 audit(100.966:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.019504][ T29] audit: type=1326 audit(100.966:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.042456][ T29] audit: type=1326 audit(100.966:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa1d6df703 code=0x7ffc0000 [ 101.065123][ T29] audit: type=1326 audit(100.966:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa1d6df703 code=0x7ffc0000 [ 101.087854][ T29] audit: type=1326 audit(100.966:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.110670][ T29] audit: type=1326 audit(100.966:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.133606][ T29] audit: type=1326 audit(100.966:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.156464][ T29] audit: type=1326 audit(100.966:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.301730][ T29] audit: type=1326 audit(100.986:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.324639][ T29] audit: type=1326 audit(100.986:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 101.753191][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 101.772083][ T7198] team0: entered promiscuous mode [ 101.777194][ T7198] team0: entered allmulticast mode [ 101.785883][ T7198] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.795386][ T7202] team0: Port device dummy0 added [ 101.818325][ T7202] team0: Port device dummy0 removed [ 101.849343][ T7202] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.492837][ T7242] validate_nla: 2 callbacks suppressed [ 102.492857][ T7242] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 102.525259][ T7242] bond1: left promiscuous mode [ 102.530122][ T7242] bridge1: left promiscuous mode [ 102.535450][ T7242] bond1: left allmulticast mode [ 102.540324][ T7242] bridge1: left allmulticast mode [ 102.576827][ T7242] veth8: left promiscuous mode [ 102.581783][ T7242] veth8: left allmulticast mode [ 102.658828][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.667427][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.678795][ T7243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.694638][ T3414] lo speed is unknown, defaulting to 1000 [ 102.700466][ T3414] syz0: Port: 1 Link ACTIVE [ 103.583216][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 103.608459][ T7274] team1: entered promiscuous mode [ 103.613589][ T7274] team1: entered allmulticast mode [ 103.619407][ T7274] 8021q: adding VLAN 0 to HW filter on device team1 [ 103.636965][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 103.801901][ T7286] lo speed is unknown, defaulting to 1000 [ 103.808292][ T7286] wg1 speed is unknown, defaulting to 1000 [ 103.897542][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 103.958626][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'. [ 104.054878][ T7298] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 104.064007][ T7298] bond0: (slave dummy0): Releasing backup interface [ 104.078557][ T7298] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 104.093331][ T7298] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.138702][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 104.215597][ T7331] netlink: 123 bytes leftover after parsing attributes in process `syz.4.1450'. [ 104.287743][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 104.331990][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1454'. [ 104.439012][ T7353] ip6t_srh: unknown srh match flags 4000 [ 104.493190][ T7357] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 104.517321][ T7357] .`: (slave dummy0): Releasing backup interface [ 104.546272][ T7364] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 104.550530][ T7357] team0: Port device dummy0 added [ 104.595455][ T7364] team0: Port device dummy0 removed [ 104.604897][ T7368] netlink: 123 bytes leftover after parsing attributes in process `syz.5.1464'. [ 104.621868][ T7364] .`: (slave dummy0): Enslaving as an active interface with an up link [ 104.755456][ T7386] loop4: detected capacity change from 0 to 1024 [ 104.771527][ T7386] EXT4-fs: Ignoring removed nobh option [ 104.781381][ T7386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.834690][ T7386] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 104.963970][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.104881][ T7407] netlink: 'syz.4.1477': attribute type 12 has an invalid length. [ 105.224621][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 105.318237][ T7423] ip6t_srh: unknown srh match flags 4000 [ 105.416228][ T7429] xt_connbytes: Forcing CT accounting to be enabled [ 105.533095][ T7448] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 105.542791][ T7448] 0ªî{X¹¦: left allmulticast mode [ 105.575404][ T7448] bond3: left promiscuous mode [ 105.580433][ T7448] bridge5: left promiscuous mode [ 105.585538][ T7448] bond3: left allmulticast mode [ 105.590530][ T7448] bridge5: left allmulticast mode [ 105.590573][ T7446] loop5: detected capacity change from 0 to 512 [ 105.646274][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.653331][ T7446] EXT4-fs: test_dummy_encryption option not supported [ 105.689684][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.716621][ T7449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.838316][ T7460] ip6t_srh: unknown srh match flags 4000 [ 106.230146][ T7470] loop0: detected capacity change from 0 to 128 [ 106.265233][ T7470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 106.285773][ T7470] System zones: 1-3, 19-19, 35-36 [ 106.316876][ T7470] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.353696][ T7480] loop5: detected capacity change from 0 to 512 [ 106.379606][ T7480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.414756][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 106.414771][ T29] audit: type=1400 audit(106.396:7498): avc: denied { create } for pid=7479 comm="syz.5.1509" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 106.443567][ T7480] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1509: corrupted inode contents [ 106.456423][ T7480] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1509: mark_inode_dirty error [ 106.477437][ T7480] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1509: corrupted inode contents [ 106.491935][ T7480] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1509: mark_inode_dirty error [ 106.505681][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.522248][ T29] audit: type=1400 audit(106.506:7499): avc: denied { mounton } for pid=7479 comm="syz.5.1509" path="/222/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.581824][ T29] audit: type=1400 audit(106.566:7500): avc: denied { unlink } for pid=4097 comm="syz-executor" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.604252][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.721526][ T29] audit: type=1326 audit(106.706:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.750338][ T7504] xt_connbytes: Forcing CT accounting to be enabled [ 106.780482][ T29] audit: type=1326 audit(106.726:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.803425][ T29] audit: type=1326 audit(106.726:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.826372][ T29] audit: type=1326 audit(106.726:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.849313][ T29] audit: type=1326 audit(106.726:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.872203][ T29] audit: type=1326 audit(106.726:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.895204][ T29] audit: type=1326 audit(106.726:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.0.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 106.943689][ T7511] lo speed is unknown, defaulting to 1000 [ 106.950303][ T7511] wg1 speed is unknown, defaulting to 1000 [ 107.278611][ T7532] loop4: detected capacity change from 0 to 128 [ 107.295148][ T7532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 107.323857][ T7532] System zones: 1-3, 19-19, 35-36 [ 107.336052][ T7532] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.368946][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.567132][ T4613] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.647186][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.788986][ T7556] loop0: detected capacity change from 0 to 1024 [ 107.798630][ T7556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.856487][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.919227][ T7566] netlink: 'syz.3.1543': attribute type 7 has an invalid length. [ 107.994833][ T7576] loop0: detected capacity change from 0 to 512 [ 108.002316][ T7576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.015174][ T7576] EXT4-fs (loop0): 1 truncate cleaned up [ 108.021524][ T7576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.335466][ T7595] loop5: detected capacity change from 0 to 2048 [ 108.352168][ T7595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.379992][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.519496][ T7605] pim6reg1: entered promiscuous mode [ 108.524881][ T7605] pim6reg1: entered allmulticast mode [ 108.919638][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.020763][ T7607] batadv_slave_0: entered promiscuous mode [ 109.381527][ T7622] pim6reg1: entered promiscuous mode [ 109.386920][ T7622] pim6reg1: entered allmulticast mode [ 109.468338][ T7625] __nla_validate_parse: 8 callbacks suppressed [ 109.468354][ T7625] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1575'. [ 109.523236][ T7630] loop0: detected capacity change from 0 to 1024 [ 109.530200][ T7630] EXT4-fs: Ignoring removed nobh option [ 109.544747][ T7630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.575924][ T7630] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 109.616042][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.620491][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.748083][ T7650] lo speed is unknown, defaulting to 1000 [ 109.755913][ T7650] wg1 speed is unknown, defaulting to 1000 [ 109.883077][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 109.955713][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1583'. [ 110.098474][ T7681] syzkaller0: entered allmulticast mode [ 110.104755][ T7681] syzkaller0: entered promiscuous mode [ 110.112095][ T7681] syzkaller0 (unregistering): left allmulticast mode [ 110.118863][ T7681] syzkaller0 (unregistering): left promiscuous mode [ 110.167962][ T7684] loop4: detected capacity change from 0 to 128 [ 110.176630][ T7684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.219069][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.612883][ T7711] veth12: entered promiscuous mode [ 110.618170][ T7711] veth12: entered allmulticast mode [ 110.942015][ T7730] geneve2: entered promiscuous mode [ 110.947293][ T7730] geneve2: entered allmulticast mode [ 110.977092][ T4631] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.997277][ T4631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.038586][ T4631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.058539][ T4631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.125482][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'. [ 111.146580][ T7744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7744 comm=syz.1.1614 [ 111.495344][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 111.495361][ T29] audit: type=1400 audit(111.476:7660): avc: denied { setcurrent } for pid=7778 comm="syz.4.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 111.517290][ T7777] serio: Serial port ptm0 [ 111.527493][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1628'. [ 111.539219][ T7775] IPVS: Error connecting to the multicast addr [ 111.580155][ T7785] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1632'. [ 111.683770][ T7792] xt_hashlimit: max too large, truncated to 1048576 [ 111.989519][ T7803] tipc: New replicast peer: 255.255.255.255 [ 111.995696][ T7803] tipc: Enabled bearer , priority 10 [ 112.174882][ T7807] loop0: detected capacity change from 0 to 2048 [ 112.222213][ T7809] lo speed is unknown, defaulting to 1000 [ 112.250149][ T7807] loop0: p2 p3 p7 [ 112.251028][ T7809] wg1 speed is unknown, defaulting to 1000 [ 112.540006][ T29] audit: type=1400 audit(112.516:7661): avc: denied { read } for pid=7817 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.592443][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1644'. [ 112.633796][ T29] audit: type=1400 audit(112.596:7662): avc: denied { module_request } for pid=7817 comm="syz.5.1644" kmod="tcp_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 112.990435][ T5312] tipc: Node number set to 1663597095 [ 113.070282][ T7829] lo speed is unknown, defaulting to 1000 [ 113.108930][ T7829] wg1 speed is unknown, defaulting to 1000 [ 113.460296][ T7836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.530236][ T7838] loop4: detected capacity change from 0 to 512 [ 113.561902][ T7838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.610666][ T7838] EXT4-fs (loop4): 1 truncate cleaned up [ 113.647903][ T7838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.769763][ T29] audit: type=1400 audit(113.746:7663): avc: denied { watch watch_reads } for pid=7837 comm="syz.4.1651" path="/337/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.834815][ T7846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7846 comm=syz.5.1653 [ 113.835749][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.987535][ T7852] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.023893][ T7851] loop0: detected capacity change from 0 to 2048 [ 114.062489][ T7851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.081664][ T7852] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.204379][ T7852] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.293410][ T29] audit: type=1326 audit(114.276:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 114.316360][ T29] audit: type=1326 audit(114.276:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 114.361996][ T7852] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.419082][ T4631] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 114.432973][ T4631] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 114.464028][ T4631] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 114.488526][ T29] audit: type=1326 audit(114.276:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 114.509919][ T4631] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 114.511382][ T29] audit: type=1326 audit(114.276:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 114.542380][ T29] audit: type=1326 audit(114.276:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 114.565286][ T29] audit: type=1326 audit(114.276:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 114.614300][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.635228][ T7868] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1661'. [ 114.829793][ T7896] loop0: detected capacity change from 0 to 128 [ 114.864398][ T7896] team_slave_0 (unregistering): left allmulticast mode [ 114.885633][ T7896] team0: Port device team_slave_0 removed [ 114.923594][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 114.985906][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1678'. [ 115.046709][ T7909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7909 comm=syz.1.1678 [ 115.232120][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 115.830186][ T7950] loop4: detected capacity change from 0 to 512 [ 115.847125][ T7950] EXT4-fs: Ignoring removed bh option [ 115.905736][ T7950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 115.972208][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 115.982248][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 116.015832][ T7965] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 116.032613][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1705'. [ 116.065405][ T7970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7970 comm=syz.5.1705 [ 116.691357][ T8011] lo speed is unknown, defaulting to 1000 [ 116.697701][ T8011] wg1 speed is unknown, defaulting to 1000 [ 116.831562][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 116.831577][ T29] audit: type=1400 audit(116.816:7739): avc: denied { bind } for pid=8016 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.860027][ T8020] loop4: detected capacity change from 0 to 1024 [ 116.860998][ T8017] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1724'. [ 116.894027][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.926525][ T29] audit: type=1400 audit(116.836:7740): avc: denied { setopt } for pid=8016 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.931919][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 116.960322][ T8027] kernel profiling enabled (shift: 9) [ 116.989924][ T8031] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 117.095889][ T8037] capability: warning: `syz.1.1729' uses 32-bit capabilities (legacy support in use) [ 117.403371][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'. [ 117.412975][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.421962][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.449544][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.095494][ T29] audit: type=1326 audit(119.076:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.121329][ T29] audit: type=1326 audit(119.076:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.144469][ T29] audit: type=1326 audit(119.076:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.167620][ T29] audit: type=1326 audit(119.076:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.190729][ T29] audit: type=1326 audit(119.076:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.213591][ T29] audit: type=1326 audit(119.076:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.236490][ T29] audit: type=1326 audit(119.076:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.259429][ T29] audit: type=1326 audit(119.076:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x7ffc0000 [ 119.354189][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1749'. [ 119.999461][ T8108] lo speed is unknown, defaulting to 1000 [ 120.006285][ T8108] wg1 speed is unknown, defaulting to 1000 [ 120.425368][ T8143] loop0: detected capacity change from 0 to 2048 [ 120.507291][ T8143] loop0: p2 p3 p7 [ 120.611239][ T8155] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 120.629406][ T8155] bond0: (slave dummy0): Releasing backup interface [ 120.642263][ T8155] dummy0: entered allmulticast mode [ 120.647823][ T8155] team0: Port device dummy0 added [ 121.090980][ T8176] batadv_slave_0: left promiscuous mode [ 121.111199][ T8176] veth12: left promiscuous mode [ 121.116193][ T8176] veth12: left allmulticast mode [ 121.449087][ T8192] team0: Port device team_slave_0 removed [ 121.783584][ T8207] loop4: detected capacity change from 0 to 2048 [ 121.872407][ T8207] loop4: p2 p3 p7 [ 121.967892][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 121.967908][ T29] audit: type=1326 audit(121.946:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.028332][ T29] audit: type=1326 audit(121.946:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.051315][ T29] audit: type=1326 audit(121.946:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.074370][ T29] audit: type=1326 audit(121.976:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.097527][ T29] audit: type=1326 audit(121.976:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.120618][ T29] audit: type=1326 audit(121.976:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.143470][ T29] audit: type=1326 audit(121.976:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.166365][ T29] audit: type=1326 audit(121.976:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.189264][ T29] audit: type=1326 audit(121.976:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.212083][ T29] audit: type=1326 audit(121.976:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 122.291187][ T8222] .`: (slave dummy0): Releasing backup interface [ 122.362415][ T8222] .`: (slave 30): Releasing backup interface [ 122.420470][ T8222] .`: (slave bond_slave_1): Releasing backup interface [ 122.450948][ T8234] loop4: detected capacity change from 0 to 512 [ 122.457678][ T8222] team0: Port device team_slave_1 removed [ 122.469097][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.479300][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.490687][ T8222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.508965][ T8234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.544518][ T8238] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.662724][ T8238] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.684103][ T3315] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 122.742532][ T8238] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.752751][ T3315] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 122.802610][ T8238] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.897300][ T4631] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.918051][ T4631] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.933141][ T8244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.944854][ T4631] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.953377][ T4631] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.974275][ T8266] netlink: 'syz.0.1813': attribute type 7 has an invalid length. [ 122.982087][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 123.010276][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1815'. [ 123.144294][ T8286] Falling back ldisc for ttyS3. [ 123.174551][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 123.224012][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 123.330717][ T8287] lo speed is unknown, defaulting to 1000 [ 123.337133][ T8287] wg1 speed is unknown, defaulting to 1000 [ 123.481735][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 123.496166][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1830'. [ 123.545091][ T8287] chnl_net:caif_netlink_parms(): no params data found [ 123.711346][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.718481][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.741064][ T8287] bridge_slave_0: entered allmulticast mode [ 123.757717][ T8287] bridge_slave_0: entered promiscuous mode [ 123.777404][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.784550][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.810532][ T8287] bridge_slave_1: entered allmulticast mode [ 123.831885][ T8287] bridge_slave_1: entered promiscuous mode [ 123.863852][ T8287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.884190][ T8287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.952717][ T8287] team0: Port device team_slave_0 added [ 123.986151][ T8287] team0: Port device team_slave_1 added [ 124.044174][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.051246][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.077182][ T8287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.191008][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.197997][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.224046][ T8287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.271306][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 124.321883][ T8287] hsr_slave_0: entered promiscuous mode [ 124.327932][ T8287] hsr_slave_1: entered promiscuous mode [ 124.531741][ T8287] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.550643][ T8287] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.570800][ T8287] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.579883][ T8287] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.681756][ T8287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.698911][ T8287] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.719012][ T4601] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.726189][ T4601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.763386][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.770511][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.917003][ T8287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.072985][ T8382] lo speed is unknown, defaulting to 1000 [ 125.088725][ T8382] wg1 speed is unknown, defaulting to 1000 [ 125.117227][ T8287] veth0_vlan: entered promiscuous mode [ 125.132988][ T8287] veth1_vlan: entered promiscuous mode [ 125.193147][ T8287] veth0_macvtap: entered promiscuous mode [ 125.218711][ T8287] veth1_macvtap: entered promiscuous mode [ 125.234339][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.252106][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.272017][ T4631] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.297784][ T4631] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.317743][ T4631] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.338772][ T4631] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.372809][ T8396] lo speed is unknown, defaulting to 1000 [ 125.379338][ T8396] wg1 speed is unknown, defaulting to 1000 [ 125.522982][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 125.585632][ T8408] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 125.619548][ T8408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.637883][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 125.655926][ T8408] vlan0: entered promiscuous mode [ 125.661224][ T8408] bond2: entered promiscuous mode [ 125.678965][ T8408] dummy0: entered promiscuous mode [ 125.691792][ T8408] bond2: (slave dummy0): making interface the new active one [ 125.700881][ T8408] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 125.827951][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1858'. [ 125.852287][ T8425] bond0: (slave dummy0): Releasing backup interface [ 125.872537][ T8425] bridge_slave_0: left allmulticast mode [ 125.878247][ T8425] bridge_slave_0: left promiscuous mode [ 125.884001][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.914458][ T8425] bridge_slave_1: left allmulticast mode [ 125.920151][ T8425] bridge_slave_1: left promiscuous mode [ 125.925849][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.935927][ T8425] bond0: (slave 30): Releasing backup interface [ 125.955846][ T8425] bond0: (slave bond_slave_1): Releasing backup interface [ 125.977008][ T8425] team0: Port device team_slave_0 removed [ 125.984405][ T8425] team0: Port device team_slave_1 removed [ 125.991190][ T8425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.031799][ T8421] IPVS: Error connecting to the multicast addr [ 126.120751][ T8439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.136542][ T8443] loop5: detected capacity change from 0 to 2048 [ 126.153159][ T8443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.155254][ T8437] lo speed is unknown, defaulting to 1000 [ 126.174390][ T8437] wg1 speed is unknown, defaulting to 1000 [ 126.192985][ T8439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.193694][ T4097] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 126.218237][ T4097] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 126.237693][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.254950][ T8439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.329544][ T8455] loop5: detected capacity change from 0 to 8192 [ 126.414126][ T8467] Falling back ldisc for ttyS3. [ 126.821839][ T8477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.829113][ T8477] IPv6: NLM_F_CREATE should be set when creating new route [ 126.836353][ T8477] IPv6: NLM_F_CREATE should be set when creating new route [ 126.845032][ T8477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.845739][ T8482] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 126.868045][ T8481] IPVS: Unknown mcast interface: ipvlan1 [ 126.884516][ T8479] lo speed is unknown, defaulting to 1000 [ 126.892185][ T8479] wg1 speed is unknown, defaulting to 1000 [ 126.902142][ T8485] bond2: (slave dummy0): Releasing active interface [ 126.911687][ T8485] bridge_slave_0: left allmulticast mode [ 126.917483][ T8485] bridge_slave_0: left promiscuous mode [ 126.923194][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.939682][ T8485] bridge_slave_1: left allmulticast mode [ 126.945510][ T8485] bridge_slave_1: left promiscuous mode [ 126.951264][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.961674][ T8485] .`: (slave bond_slave_0): Releasing backup interface [ 126.975088][ T8485] .`: (slave bond_slave_1): Releasing backup interface [ 126.984303][ T8485] team0: Port device team_slave_0 removed [ 126.991272][ T8485] team0: Port device team_slave_1 removed [ 126.997404][ T8485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.005184][ T8485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.024508][ T8482] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.081917][ T8482] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.113005][ T8439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.162397][ T8482] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.266465][ T7318] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.278004][ T7318] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.289591][ T4614] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.299561][ T8502] dummy0: left promiscuous mode [ 127.311662][ T8502] vlan0: left promiscuous mode [ 127.316504][ T8502] bond2: left promiscuous mode [ 127.324823][ T4614] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.378030][ T8508] netlink: 'syz.0.1882': attribute type 4 has an invalid length. [ 127.391737][ T8508] netlink: 'syz.0.1882': attribute type 4 has an invalid length. [ 128.174475][ T265] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.216610][ T265] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.293118][ T265] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.361794][ T8526] __nla_validate_parse: 6 callbacks suppressed [ 128.361815][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1892'. [ 128.380129][ T265] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.430929][ T8529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8529 comm=syz.0.1892 [ 128.608170][ T8532] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.622261][ T8535] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 128.635314][ T8535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.647489][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 128.659989][ T8535] vlan2: entered promiscuous mode [ 128.665206][ T8535] bond4: entered promiscuous mode [ 128.672466][ T8532] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.684397][ T8535] dummy0: entered promiscuous mode [ 128.689846][ T8535] dummy0: left allmulticast mode [ 128.695388][ T8535] team0: Port device dummy0 removed [ 128.703546][ T8535] bond4: (slave dummy0): making interface the new active one [ 128.712157][ T8535] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 128.732066][ T8532] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.766421][ T8540] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1898'. [ 128.792404][ T8532] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.034027][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 129.043075][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 129.351261][ T8573] 0ªî{X¹¦: left allmulticast mode [ 129.362454][ T8573] veth4: left promiscuous mode [ 129.367346][ T8573] veth4: left allmulticast mode [ 129.374288][ T8573] bond0: left promiscuous mode [ 129.379058][ T8573] bridge0: left promiscuous mode [ 129.384262][ T8573] bond0: left allmulticast mode [ 129.389116][ T8573] bridge0: left allmulticast mode [ 129.395510][ T8573] team1: left promiscuous mode [ 129.400284][ T8573] team1: left allmulticast mode [ 129.857237][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 129.857255][ T29] audit: type=1400 audit(129.836:8067): avc: denied { unmount } for pid=8575 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 129.882961][ T29] audit: type=1326 audit(129.846:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 129.906028][ T29] audit: type=1326 audit(129.846:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 129.928981][ T29] audit: type=1326 audit(129.846:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 129.952213][ T29] audit: type=1326 audit(129.846:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 129.975069][ T29] audit: type=1326 audit(129.846:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 129.997992][ T29] audit: type=1326 audit(129.846:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 130.021017][ T29] audit: type=1326 audit(129.846:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 130.044082][ T29] audit: type=1326 audit(129.856:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 130.067001][ T29] audit: type=1326 audit(129.856:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 130.710257][ T8602] bond4: (slave dummy0): Releasing active interface [ 130.745516][ T8602] bond0: (slave bond_slave_0): Releasing backup interface [ 130.753785][ T8602] bond0: (slave bond_slave_1): Releasing backup interface [ 130.761975][ T8602] team_slave_1: left allmulticast mode [ 130.767998][ T8602] team0: Port device team_slave_1 removed [ 130.773990][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.781553][ T8602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.837734][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 130.874508][ T8615] loop5: detected capacity change from 0 to 512 [ 130.881421][ T8615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.892905][ T8615] EXT4-fs (loop5): 1 truncate cleaned up [ 130.899036][ T8615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.174985][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.227403][ T8641] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1938'. [ 131.247331][ T8641] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 131.259087][ T8641] 1ªî{X¹¦: entered allmulticast mode [ 131.266105][ T8641] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 131.410768][ T8662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.418068][ T8662] IPv6: NLM_F_CREATE should be set when creating new route [ 131.425336][ T8662] IPv6: NLM_F_CREATE should be set when creating new route [ 131.433761][ T8662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.626683][ T8676] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1955'. [ 131.859125][ T7318] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.889873][ T7318] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.904460][ T8702] pimreg: entered allmulticast mode [ 131.924266][ T7318] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.935994][ T7318] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.945227][ T8702] pimreg: left allmulticast mode [ 132.104363][ T8711] syzkaller0: entered promiscuous mode [ 132.109960][ T8711] syzkaller0: entered allmulticast mode [ 132.146444][ T8713] netlink: 'syz.5.1969': attribute type 3 has an invalid length. [ 132.835584][ T8727] tipc: New replicast peer: 255.255.255.83 [ 132.841581][ T8727] tipc: Enabled bearer , priority 10 [ 132.892310][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1978'. [ 132.914715][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.921953][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.950558][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1978'. [ 132.978981][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.989506][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.034123][ T8739] tipc: Enabling of bearer rejected, failed to enable media [ 133.050673][ T7318] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.065363][ T7318] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.074336][ T7318] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.083338][ T7318] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.194897][ T8753] syzkaller0: entered promiscuous mode [ 133.200547][ T8753] syzkaller0: entered allmulticast mode [ 133.258701][ T8760] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 133.454514][ T8771] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 133.531493][ T8771] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 133.592931][ T8771] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 133.643069][ T8771] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 133.690212][ T4614] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.702716][ T4614] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.715242][ T4614] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.727953][ T4614] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.840475][ T3414] tipc: Node number set to 309073188 [ 133.892438][ T8788] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 133.914794][ T8791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8791 comm=syz.0.1998 [ 133.943584][ T8788] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.031890][ T8788] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.111697][ T8788] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.396568][ T8800] pimreg: entered allmulticast mode [ 134.403912][ T8800] pimreg: left allmulticast mode [ 135.605693][ T7318] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.617185][ T7318] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.629060][ T7318] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.640747][ T7318] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.672340][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 135.672359][ T29] audit: type=1326 audit(135.656:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.2007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d6df6c9 code=0x0 [ 135.721793][ T29] audit: type=1326 audit(135.696:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.744736][ T29] audit: type=1326 audit(135.696:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.767578][ T29] audit: type=1326 audit(135.696:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.790648][ T29] audit: type=1326 audit(135.696:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.813473][ T29] audit: type=1326 audit(135.696:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.836394][ T29] audit: type=1326 audit(135.696:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.859358][ T29] audit: type=1326 audit(135.696:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.882257][ T29] audit: type=1326 audit(135.696:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.891167][ T8809] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 135.905113][ T29] audit: type=1326 audit(135.696:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 135.951358][ T8812] geneve2: left promiscuous mode [ 135.956336][ T8812] geneve2: left allmulticast mode [ 136.023172][ T10] lo speed is unknown, defaulting to 1000 [ 136.023184][ T4601] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.029059][ T10] syz0: Port: 1 Link DOWN [ 136.102602][ T4601] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.118376][ T8831] __nla_validate_parse: 1 callbacks suppressed [ 136.118418][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2012'. [ 136.137794][ T4601] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.169368][ T4601] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.402331][ T8850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8850 comm=syz.3.2021 [ 136.423307][ T8850] lo speed is unknown, defaulting to 1000 [ 136.429242][ T8850] lo speed is unknown, defaulting to 1000 [ 136.435679][ T8850] lo speed is unknown, defaulting to 1000 [ 136.442616][ T8850] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.450843][ T8852] netlink: 'syz.6.2023': attribute type 4 has an invalid length. [ 136.475643][ T8850] lo speed is unknown, defaulting to 1000 [ 136.482840][ T8850] lo speed is unknown, defaulting to 1000 [ 136.490163][ T8850] lo speed is unknown, defaulting to 1000 [ 136.500729][ T8850] lo speed is unknown, defaulting to 1000 [ 136.507095][ T8850] lo speed is unknown, defaulting to 1000 [ 136.513511][ T8850] lo speed is unknown, defaulting to 1000 [ 136.573268][ T8861] loop6: detected capacity change from 0 to 4096 [ 136.594988][ T8861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.867347][ T8287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.983495][ T8889] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2034'. [ 136.994090][ T8889] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2034'. [ 137.549306][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 137.785808][ T8926] syzkaller0: entered allmulticast mode [ 137.810031][ T8926] syzkaller0: entered promiscuous mode [ 137.823848][ T8926] syzkaller0 (unregistering): left allmulticast mode [ 137.830635][ T8926] syzkaller0 (unregistering): left promiscuous mode [ 138.289559][ T8945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8945 comm=syz.5.2059 [ 138.618771][ T8960] lo speed is unknown, defaulting to 1000 [ 138.625347][ T8960] wg1 speed is unknown, defaulting to 1000 [ 138.631679][ T8960] lo speed is unknown, defaulting to 1000 [ 138.805887][ T8964] geneve2: entered promiscuous mode [ 138.811203][ T8964] geneve2: entered allmulticast mode [ 138.817559][ T8966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8966 comm=syz.3.2067 [ 138.954367][ T8982] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2075'. [ 138.986451][ T8987] loop6: detected capacity change from 0 to 512 [ 139.008366][ T8987] EXT4-fs (loop6): orphan cleanup on readonly fs [ 139.016609][ T8987] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2077: bad orphan inode 13 [ 139.027436][ T8987] ext4_test_bit(bit=12, block=18) = 1 [ 139.032861][ T8987] is_bad_inode(inode)=0 [ 139.037027][ T8987] NEXT_ORPHAN(inode)=2130706432 [ 139.042056][ T8987] max_ino=32 [ 139.045264][ T8987] i_nlink=1 [ 139.048944][ T8987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.074441][ T8987] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 139.102607][ T8987] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2077: bg 0: block 248: padding at end of block bitmap is not set [ 139.148693][ T8987] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2077: Failed to acquire dquot type 1 [ 139.178128][ T8987] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.241750][ T8287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.494014][ T9015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'. [ 139.971613][ T9026] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2100'. [ 140.038420][ T9030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9030 comm=syz.0.2091 [ 140.108519][ T9037] loop5: detected capacity change from 0 to 2048 [ 140.166742][ T9037] Alternate GPT is invalid, using primary GPT. [ 140.173238][ T9037] loop5: p2 p3 p7 [ 140.244969][ T9027] Set syz1 is full, maxelem 65536 reached [ 140.288245][ T9039] geneve2: entered promiscuous mode [ 140.294695][ T9039] geneve2: entered allmulticast mode [ 140.376942][ T9046] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 140.385024][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2108'. [ 140.401310][ T9045] loop5: detected capacity change from 0 to 1024 [ 140.413305][ T9045] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.440536][ T9045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.481341][ T9060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.541517][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.908159][ T9095] loop6: detected capacity change from 0 to 1024 [ 140.914877][ T9095] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.931958][ T9095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.961007][ T8287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.501446][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 141.520515][ T9106] hsr_slave_0: left promiscuous mode [ 141.526467][ T9106] hsr_slave_1: left promiscuous mode [ 141.537848][ T9108] loop5: detected capacity change from 0 to 4096 [ 141.550077][ T9108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.613316][ T9113] tipc: Enabled bearer , priority 0 [ 141.743019][ T9113] tipc: Disabling bearer [ 141.777553][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 141.777572][ T29] audit: type=1326 audit(141.756:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.828633][ T29] audit: type=1326 audit(141.756:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.851616][ T29] audit: type=1326 audit(141.756:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.874446][ T29] audit: type=1326 audit(141.756:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.897306][ T29] audit: type=1326 audit(141.766:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.920125][ T29] audit: type=1326 audit(141.766:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.943056][ T29] audit: type=1326 audit(141.766:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.965994][ T29] audit: type=1326 audit(141.766:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 141.988826][ T29] audit: type=1326 audit(141.766:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 142.011689][ T29] audit: type=1326 audit(141.766:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa980bd15e7 code=0x7ffc0000 [ 142.089365][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.107580][ T9118] syzkaller1: entered promiscuous mode [ 142.113136][ T9118] syzkaller1: entered allmulticast mode [ 142.152908][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'. [ 142.196425][ T9124] lo speed is unknown, defaulting to 1000 [ 142.203629][ T9124] wg1 speed is unknown, defaulting to 1000 [ 142.210102][ T9124] lo speed is unknown, defaulting to 1000 [ 142.277886][ T9132] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2133'. [ 142.325408][ T9141] loop5: detected capacity change from 0 to 1024 [ 142.337671][ T9141] EXT4-fs: Ignoring removed orlov option [ 142.353390][ T9139] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 142.363746][ T9141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.388964][ T9145] vlan2: entered promiscuous mode [ 142.394187][ T9145] vlan2: entered allmulticast mode [ 142.399323][ T9145] hsr_slave_1: entered allmulticast mode [ 142.425833][ T9150] bond3: (slave bridge7): making interface the new active one [ 142.434721][ T9150] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 142.514411][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.542832][ T9155] netlink: 'syz.5.2142': attribute type 12 has an invalid length. [ 142.783873][ T9172] netlink: 'syz.5.2149': attribute type 10 has an invalid length. [ 142.791959][ T9172] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2149'. [ 142.801424][ T9172] dummy0: entered promiscuous mode [ 142.852303][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2155'. [ 142.861831][ T9189] hsr_slave_0: left promiscuous mode [ 142.868341][ T9189] hsr_slave_1: left promiscuous mode [ 143.149507][ T9201] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2159'. [ 143.160703][ T9201] loop5: detected capacity change from 0 to 164 [ 143.170241][ T9201] syz.5.2159: attempt to access beyond end of device [ 143.170241][ T9201] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 143.184372][ T9201] syz.5.2159: attempt to access beyond end of device [ 143.184372][ T9201] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.643251][ T9230] loop6: detected capacity change from 0 to 2048 [ 143.726024][ T9218] Set syz1 is full, maxelem 65536 reached [ 143.742753][ T9236] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2172'. [ 143.755972][ T9230] Alternate GPT is invalid, using primary GPT. [ 143.762394][ T9230] loop6: p2 p3 p7 [ 143.880805][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2175'. [ 143.900173][ T9243] team0: Port device team_slave_1 removed [ 144.022561][ T9254] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2181'. [ 144.087075][ T9256] SELinux: failed to load policy [ 144.227584][ T9270] @ÿ: renamed from veth0_vlan [ 144.570093][ T9289] SELinux: failed to load policy [ 144.821034][ T9313] loop5: detected capacity change from 0 to 1024 [ 144.844514][ T9313] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.860792][ T9313] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #11: comm syz.5.2203: iget: bogus i_mode (1) [ 144.872661][ T9313] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2203: couldn't read orphan inode 11 (err -117) [ 144.886808][ T9313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.017874][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.038704][ T9322] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 145.107261][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2206'. [ 145.370984][ T9340] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 145.679686][ T9359] loop6: detected capacity change from 0 to 1024 [ 145.692630][ T9359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.925837][ T8287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.988976][ T9375] bridge_slave_0: left allmulticast mode [ 145.994767][ T9375] bridge_slave_0: left promiscuous mode [ 146.000701][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.008792][ T9375] bridge_slave_1: left allmulticast mode [ 146.014503][ T9375] bridge_slave_1: left promiscuous mode [ 146.020265][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.029601][ T9375] bond0: (slave bond_slave_0): Releasing backup interface [ 146.037859][ T9375] bond0: (slave bond_slave_1): Releasing backup interface [ 146.047036][ T9375] team0: Port device team_slave_0 removed [ 146.053346][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.061132][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.068940][ T9375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.469811][ T9410] loop5: detected capacity change from 0 to 1024 [ 146.477408][ T9410] EXT4-fs: inline encryption not supported [ 146.483365][ T9410] EXT4-fs: Ignoring removed orlov option [ 146.489850][ T9410] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 146.501639][ T9410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 146.509885][ T9410] System zones: 0-1, 3-12 [ 146.514963][ T9410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.535314][ T9410] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 146.547844][ T9410] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.547844][ T9410] [ 146.557521][ T9410] EXT4-fs (loop5): Total free blocks count 0 [ 146.563571][ T9410] EXT4-fs (loop5): Free/Dirty block details [ 146.569508][ T9410] EXT4-fs (loop5): free_blocks=0 [ 146.574523][ T9410] EXT4-fs (loop5): dirty_blocks=0 [ 146.579566][ T9410] EXT4-fs (loop5): Block reservation details [ 146.585587][ T9410] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 146.606757][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.702463][ T9418] __nla_validate_parse: 5 callbacks suppressed [ 146.702526][ T9418] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.2245'. [ 146.718203][ T9418] netlink: zone id is out of range [ 146.723471][ T9418] netlink: zone id is out of range [ 146.728989][ T9418] netlink: zone id is out of range [ 146.734411][ T9418] netlink: zone id is out of range [ 146.740027][ T9418] netlink: del zone limit has 8 unknown bytes [ 146.780833][ T29] kauditd_printk_skb: 814 callbacks suppressed [ 146.780853][ T29] audit: type=1326 audit(146.766:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b762bf6c9 code=0x7ffc0000 [ 146.810139][ T29] audit: type=1326 audit(146.766:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.837125][ T29] audit: type=1326 audit(146.766:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.860099][ T29] audit: type=1326 audit(146.766:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.882945][ T29] audit: type=1326 audit(146.766:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.905794][ T29] audit: type=1326 audit(146.766:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.928670][ T29] audit: type=1326 audit(146.766:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.951502][ T29] audit: type=1326 audit(146.766:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.974541][ T29] audit: type=1326 audit(146.766:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 146.997559][ T29] audit: type=1326 audit(146.766:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa980c01f85 code=0x7ffc0000 [ 147.177195][ T9443] bond1: (slave bridge1): Removing an active aggregator [ 147.197684][ T9443] bond1: (slave bridge1): Releasing backup interface [ 147.299778][ T9448] loop5: detected capacity change from 0 to 2048 [ 147.324333][ T9448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.412527][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.575942][ T9467] loop5: detected capacity change from 0 to 512 [ 147.698320][ T9471] netlink: 'syz.6.2265': attribute type 30 has an invalid length. [ 147.731804][ T9467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.744823][ T9467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.793926][ T9476] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 147.891255][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2268'. [ 147.915925][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2268'. [ 147.967860][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2270'. [ 148.188921][ T9497] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.2275'. [ 148.278548][ T9497] netlink: zone id is out of range [ 148.283771][ T9497] netlink: zone id is out of range [ 148.370915][ T9497] netlink: zone id is out of range [ 148.418543][ T9497] netlink: zone id is out of range [ 148.435018][ T9504] loop6: detected capacity change from 0 to 1024 [ 148.491855][ T9504] EXT4-fs: Ignoring removed nobh option [ 148.497504][ T9504] EXT4-fs: Ignoring removed bh option [ 148.595109][ T9504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.772631][ T9535] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2288'. [ 148.867828][ T9544] vlan3: entered allmulticast mode [ 148.873054][ T9544] bridge_slave_0: entered allmulticast mode [ 149.016013][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 149.050607][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 149.068196][ T9565] vlan1: entered allmulticast mode [ 149.073417][ T9565] bridge_slave_0: entered allmulticast mode [ 149.107711][ T9567] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.107711][ T9567] The task syz.5.2297 (9567) triggered the difference, watch for misbehavior. [ 149.208640][ T9503] delete_channel: no stack [ 149.227679][ T8287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.765986][ T9604] lo speed is unknown, defaulting to 1000 [ 149.772727][ T9604] wg1 speed is unknown, defaulting to 1000 [ 149.778889][ T9604] lo speed is unknown, defaulting to 1000 [ 150.083929][ T9630] netlink: 'syz.3.2330': attribute type 4 has an invalid length. [ 150.108380][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.118227][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.238540][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2334'. [ 150.278676][ T9642] veth7: entered promiscuous mode [ 150.284296][ T9642] veth7: entered allmulticast mode [ 150.311878][ T9645] netlink: 'syz.3.2335': attribute type 7 has an invalid length. [ 150.319667][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 150.350828][ T9647] ref_ctr increment failed for inode: 0x9fe offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810b5f8000 [ 150.654538][ T9671] lo speed is unknown, defaulting to 1000 [ 150.661868][ T9671] wg1 speed is unknown, defaulting to 1000 [ 150.668767][ T9671] lo speed is unknown, defaulting to 1000 [ 151.317202][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.343945][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.911113][ T9763] pim6reg1: entered promiscuous mode [ 151.916475][ T9763] pim6reg1: entered allmulticast mode [ 151.926021][ T9765] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 151.949832][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 151.949852][ T29] audit: type=1326 audit(151.926:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 151.981126][ T29] audit: type=1326 audit(151.926:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.004069][ T29] audit: type=1326 audit(151.926:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.026912][ T29] audit: type=1326 audit(151.926:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.049914][ T29] audit: type=1326 audit(151.926:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.073014][ T29] audit: type=1326 audit(151.926:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd0d315e7 code=0x7ffc0000 [ 152.095930][ T29] audit: type=1326 audit(151.926:10030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.118915][ T29] audit: type=1326 audit(151.926:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.141985][ T29] audit: type=1326 audit(151.926:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.164951][ T29] audit: type=1326 audit(151.926:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 152.198012][ T9773] veth10: entered promiscuous mode [ 152.203453][ T9773] veth10: entered allmulticast mode [ 152.252969][ T9778] __nla_validate_parse: 7 callbacks suppressed [ 152.252988][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 152.323731][ T9785] sit0: entered promiscuous mode [ 152.328801][ T9785] sit0: entered allmulticast mode [ 152.366595][ T9786] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 152.375364][ T7334] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 152.384237][ T7334] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 152.414087][ T9778] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 152.472552][ T9778] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 152.528750][ T1458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 152.577726][ T1458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 152.591134][ T1458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 152.624936][ T1458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 152.698883][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9811 comm=syz.0.2407 [ 152.768415][ T9826] bridge: RTM_NEWNEIGH with invalid ether address [ 152.812689][ T9832] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2415'. [ 152.895204][ T9837] net_ratelimit: 2 callbacks suppressed [ 152.895220][ T9837] bond_slave_1: mtu less than device minimum [ 153.405091][ T9864] bridge: RTM_NEWNEIGH with invalid ether address [ 153.449913][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.458764][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.565378][ T9870] bridge: RTM_NEWNEIGH with invalid ether address [ 153.592086][ T9872] netlink: 'syz.5.2433': attribute type 10 has an invalid length. [ 153.600208][ T9872] dummy0: left promiscuous mode [ 153.623693][ T9872] team0: Port device dummy0 added [ 153.631267][ T9872] netlink: 'syz.5.2433': attribute type 10 has an invalid length. [ 153.639894][ T9872] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.650500][ T9872] team0: Failed to send options change via netlink (err -105) [ 153.658138][ T9872] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.668051][ T9872] team0: Port device dummy0 removed [ 153.675214][ T9872] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.723690][ T9876] wg2: entered promiscuous mode [ 153.728810][ T9876] wg2: entered allmulticast mode [ 153.758048][ T9880] pim6reg1: entered promiscuous mode [ 153.763493][ T9880] pim6reg1: entered allmulticast mode [ 153.963070][ T9892] IPv6: sit1: Disabled Multicast RS [ 154.015202][ T9898] ip6gre1: entered allmulticast mode [ 154.039138][ T9900] loop6: detected capacity change from 0 to 512 [ 154.046314][ T9900] EXT4-fs: Mount option(s) incompatible with ext2 [ 154.091792][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2449'. [ 154.120461][ T9909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.128687][ T9909] bond1: (slave bond2): Enslaving as an active interface with an up link [ 154.143967][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2449'. [ 154.171689][ T9909] bond1 (unregistering): (slave bond2): Releasing backup interface [ 154.181609][ T9909] bond1 (unregistering): Released all slaves [ 154.258285][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 154.281466][ T9924] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 154.570210][ T9940] netlink: 'syz.3.2460': attribute type 7 has an invalid length. [ 154.578075][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'. [ 155.186183][ T9946] syzkaller0: entered promiscuous mode [ 155.191871][ T9946] syzkaller0: entered allmulticast mode [ 155.286145][ T9955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=9955 comm=syz.6.2467 [ 156.232341][ T9988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2480'. [ 156.365935][ T9994] netlink: 'syz.0.2483': attribute type 4 has an invalid length. [ 156.501826][ T9969] delete_channel: no stack [ 157.858174][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2496'. [ 157.936720][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2499'. [ 158.119187][T10035] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 158.128052][ T4605] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.132526][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 158.132546][ T29] audit: type=1400 audit(158.116:10276): avc: denied { create } for pid=10046 comm="syz.0.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 158.161407][ T4605] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.173322][ T29] audit: type=1326 audit(158.156:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.190498][ T4605] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.198982][ T29] audit: type=1326 audit(158.176:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.227607][ T29] audit: type=1326 audit(158.176:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.250641][ T29] audit: type=1326 audit(158.176:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.273675][ T29] audit: type=1326 audit(158.176:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.296703][ T29] audit: type=1326 audit(158.176:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.319703][ T29] audit: type=1326 audit(158.176:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.342843][ T29] audit: type=1326 audit(158.176:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.365939][ T29] audit: type=1326 audit(158.176:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 158.392165][T10041] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 158.441692][T10041] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 158.506361][T10041] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 158.523144][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2504'. [ 158.584736][ T4605] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.600249][ T4605] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.616386][ T1458] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.629354][ T1458] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.648576][T10056] loop5: detected capacity change from 0 to 512 [ 158.662835][T10056] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.693470][T10056] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm gtp: Invalid block bitmap block 0 in block_group 0 [ 158.714157][T10061] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 158.723598][T10061] team0: Port device dummy0 added [ 158.731156][T10061] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 158.739479][T10061] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.750106][T10061] team0: Failed to send options change via netlink (err -105) [ 158.757818][T10061] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.767564][T10061] team0: Port device dummy0 removed [ 158.775015][T10061] .`: (slave dummy0): Enslaving as an active interface with an up link [ 158.784342][T10056] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 158.808077][T10056] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm gtp: attempt to clear invalid blocks 983261 len 1 [ 158.821933][T10056] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 158.899383][T10056] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 158.911071][T10056] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 158.920095][T10056] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 158.933223][T10056] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 158.943148][T10056] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm gtp: mark_inode_dirty error [ 158.954053][T10056] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 158.963466][T10056] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 158.976570][T10056] EXT4-fs (loop5): 1 truncate cleaned up [ 158.993011][T10063] ref_ctr increment failed for inode: 0x235 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811fdf9700 [ 159.031505][T10056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.071538][T10073] wg2: entered promiscuous mode [ 159.076470][T10073] wg2: entered allmulticast mode [ 159.154508][T10085] vlan1: entered allmulticast mode [ 159.163386][ T4097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.773946][T10108] syz.3.2526: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 159.788656][T10108] CPU: 0 UID: 0 PID: 10108 Comm: syz.3.2526 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.788703][T10108] Tainted: [W]=WARN [ 159.788712][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.788731][T10108] Call Trace: [ 159.788740][T10108] [ 159.788750][T10108] __dump_stack+0x1d/0x30 [ 159.788840][T10108] dump_stack_lvl+0xe8/0x140 [ 159.788870][T10108] dump_stack+0x15/0x1b [ 159.788896][T10108] warn_alloc+0x12b/0x1a0 [ 159.788947][T10108] ? __rcu_read_unlock+0x4f/0x70 [ 159.789044][T10108] __vmalloc_node_range_noprof+0x9d/0xed0 [ 159.789093][T10108] ? __futex_wait+0x1fa/0x260 [ 159.789125][T10108] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.789148][T10108] ? __rcu_read_unlock+0x4f/0x70 [ 159.789257][T10108] ? avc_has_perm_noaudit+0x1b1/0x200 [ 159.789364][T10108] ? should_fail_ex+0x30/0x280 [ 159.789390][T10108] ? xskq_create+0x36/0xe0 [ 159.789426][T10108] vmalloc_user_noprof+0x7d/0xb0 [ 159.789472][T10108] ? xskq_create+0x80/0xe0 [ 159.789537][T10108] xskq_create+0x80/0xe0 [ 159.789570][T10108] xsk_init_queue+0x95/0xf0 [ 159.789602][T10108] xsk_setsockopt+0x477/0x640 [ 159.789630][T10108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.789714][T10108] __sys_setsockopt+0x184/0x200 [ 159.789787][T10108] __x64_sys_setsockopt+0x64/0x80 [ 159.789821][T10108] x64_sys_call+0x20ec/0x3000 [ 159.789888][T10108] do_syscall_64+0xd2/0x200 [ 159.789910][T10108] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.789939][T10108] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.790027][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.790057][T10108] RIP: 0033:0x7fccd0d2f6c9 [ 159.790091][T10108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.790154][T10108] RSP: 002b:00007fcccf78f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.790250][T10108] RAX: ffffffffffffffda RBX: 00007fccd0f85fa0 RCX: 00007fccd0d2f6c9 [ 159.790268][T10108] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 159.790286][T10108] RBP: 00007fccd0db1f91 R08: 0000000000000004 R09: 0000000000000000 [ 159.790304][T10108] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 159.790320][T10108] R13: 00007fccd0f86038 R14: 00007fccd0f85fa0 R15: 00007ffea17de058 [ 159.790397][T10108] [ 160.019790][T10108] Mem-Info: [ 160.023019][T10108] active_anon:21161 inactive_anon:5352 isolated_anon:0 [ 160.023019][T10108] active_file:16515 inactive_file:13073 isolated_file:0 [ 160.023019][T10108] unevictable:16906 dirty:163 writeback:2 [ 160.023019][T10108] slab_reclaimable:3630 slab_unreclaimable:20036 [ 160.023019][T10108] mapped:28875 shmem:22014 pagetables:1402 [ 160.023019][T10108] sec_pagetables:0 bounce:0 [ 160.023019][T10108] kernel_misc_reclaimable:0 [ 160.023019][T10108] free:1787496 free_pcp:51683 free_cma:0 [ 160.069135][T10108] Node 0 active_anon:84644kB inactive_anon:21408kB active_file:66060kB inactive_file:52292kB unevictable:67624kB isolated(anon):0kB isolated(file):0kB mapped:115500kB dirty:652kB writeback:8kB shmem:88056kB kernel_stack:5024kB pagetables:5608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.097281][T10108] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.127114][T10108] lowmem_reserve[]: 0 2881 7859 7859 [ 160.132530][T10108] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 160.163827][T10108] lowmem_reserve[]: 0 0 4978 4978 [ 160.169178][T10108] Node 0 Normal free:4188000kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84528kB inactive_anon:21408kB active_file:66060kB inactive_file:52292kB unevictable:67624kB writepending:660kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:203128kB local_pcp:29448kB free_cma:0kB [ 160.203011][T10108] lowmem_reserve[]: 0 0 0 0 [ 160.207640][T10108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.220493][T10108] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 160.236682][T10108] Node 0 Normal: 1125*4kB (UME) 557*8kB (UE) 335*16kB (UM) 317*32kB (UM) 127*64kB (U) 103*128kB (UME) 95*256kB (UM) 61*512kB (UM) 33*1024kB (UME) 25*2048kB (UM) 977*4096kB (UM) = 4188108kB [ 160.255605][T10108] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 160.264968][T10108] 68561 total pagecache pages [ 160.269717][T10108] 64 pages in swap cache [ 160.273991][T10108] Free swap = 78656kB [ 160.278063][T10108] Total swap = 124996kB [ 160.282243][T10108] 2097051 pages RAM [ 160.286059][T10108] 0 pages HighMem/MovableOnly [ 160.290787][T10108] 81087 pages reserved [ 161.250947][T10125] loop6: detected capacity change from 0 to 128 [ 161.700247][T10125] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 161.717369][T10131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2535'. [ 161.735707][T10125] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 161.736669][T10131] IPVS: Unknown mcast interface: [ 161.838494][T10133] xt_hashlimit: max too large, truncated to 1048576 [ 161.936558][T10140] bond_slave_1: mtu less than device minimum [ 162.060011][T10128] netlink: 87 bytes leftover after parsing attributes in process `syz.5.2533'. [ 162.221138][T10152] vlan3: entered allmulticast mode [ 162.226340][T10152] bridge_slave_0: entered allmulticast mode [ 162.453357][T10160] loop5: detected capacity change from 0 to 512 [ 162.494039][T10160] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 163.280032][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 163.511218][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.556581][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.610534][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 163.610618][ T29] audit: type=1326 audit(163.596:10542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.642412][ T29] audit: type=1326 audit(163.626:10543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.665546][ T29] audit: type=1326 audit(163.626:10544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.688539][ T29] audit: type=1326 audit(163.626:10545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.711649][ T29] audit: type=1326 audit(163.626:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.734721][ T29] audit: type=1326 audit(163.626:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.757765][ T29] audit: type=1326 audit(163.626:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.784002][ T29] audit: type=1326 audit(163.766:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.807011][ T29] audit: type=1326 audit(163.766:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.829997][ T29] audit: type=1326 audit(163.766:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 163.856028][T10202] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 163.865187][ T7334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.873675][ T7334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.882197][ T7334] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.891441][T10194] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 163.939110][T10205] xt_hashlimit: max too large, truncated to 1048576 [ 163.961816][T10194] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 164.290491][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2574'. [ 164.321648][T10194] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 164.464277][ T4605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.480701][ T4605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.513552][ T4606] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.654340][ T4606] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 165.030722][T10248] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.105941][T10254] loop5: detected capacity change from 0 to 1024 [ 165.128014][T10254] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 165.139046][T10254] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.161910][T10254] JBD2: no valid journal superblock found [ 165.167727][T10254] EXT4-fs (loop5): Could not load journal inode [ 165.245650][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2589'. [ 165.256513][T10260] loop6: detected capacity change from 0 to 1024 [ 165.263585][T10260] EXT4-fs: Ignoring removed oldalloc option [ 165.286574][T10260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.301212][T10260] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.2590: inode has both inline data and extents flags [ 165.329352][ T8287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.343494][T10267] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 165.403689][ T4605] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 165.503868][T10275] lo speed is unknown, defaulting to 1000 [ 165.511188][T10275] wg1 speed is unknown, defaulting to 1000 [ 165.517524][T10275] lo speed is unknown, defaulting to 1000 [ 165.641341][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 165.650450][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 165.703124][T10292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10292 comm=syz.3.2601 [ 165.984949][T10299] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2604'. [ 166.039242][T10305] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2607'. [ 166.060418][T10305] 0ªX¹¦À: renamed from caif0 [ 166.072475][T10305] 0ªX¹¦À: entered allmulticast mode [ 166.077867][T10305] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 166.285858][T10318] wg2: left promiscuous mode [ 166.290609][T10318] wg2: left allmulticast mode [ 166.338352][T10318] wg2: entered promiscuous mode [ 166.343349][T10318] wg2: entered allmulticast mode [ 166.433676][T10331] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2616'. [ 166.594497][T10339] loop6: detected capacity change from 0 to 8192 [ 166.628616][T10341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10341 comm=syz.0.2620 [ 166.641807][T10341] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 166.661077][T10341] bond6: (slave gretap0): making interface the new active one [ 166.668857][T10341] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 166.679300][T10339] loop6: p1 p2 p3 p4[DM] [ 166.683898][T10339] loop6: p1 size 835329 extends beyond EOD, truncated [ 166.691967][T10339] loop6: p2 size 327680 extends beyond EOD, truncated [ 166.699352][T10339] loop6: p3 start 1052673 is beyond EOD, truncated [ 166.706007][T10339] loop6: p4 size 262144 extends beyond EOD, truncated [ 166.729580][T10339] SELinux: failed to load policy [ 166.758635][T10341] vlan3: entered allmulticast mode [ 166.763851][T10341] bond6: entered allmulticast mode [ 166.769320][T10341] gretap0: entered allmulticast mode [ 166.853289][T10350] loop6: detected capacity change from 0 to 2048 [ 166.860889][T10350] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64 [ 167.071666][T10262] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 167.162339][ T7334] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.221791][ T7334] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.230175][ T7334] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.248426][ T7334] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.300833][T10366] lo speed is unknown, defaulting to 1000 [ 167.307322][T10366] wg1 speed is unknown, defaulting to 1000 [ 167.320892][T10366] lo speed is unknown, defaulting to 1000 [ 167.446435][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2636'. [ 167.548332][T10381] Cannot find add_set index 0 as target [ 167.652055][T10386] lo speed is unknown, defaulting to 1000 [ 167.663237][T10386] wg1 speed is unknown, defaulting to 1000 [ 167.675175][T10386] lo speed is unknown, defaulting to 1000 [ 167.901821][T10394] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.914967][T10394] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.352557][T10413] netlink: 'syz.5.2650': attribute type 12 has an invalid length. [ 168.379886][T10415] loop5: detected capacity change from 0 to 128 [ 168.388741][T10415] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.464241][ T4097] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.500075][T10418] loop5: detected capacity change from 0 to 2048 [ 168.521346][T10418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.534361][T10418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.454034][T10435] geneve3: entered promiscuous mode [ 169.459299][T10435] geneve3: entered allmulticast mode [ 169.808858][T10443] wg2: entered promiscuous mode [ 169.813881][T10443] wg2: entered allmulticast mode [ 169.994121][ T1458] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 170.057793][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 170.057809][ T29] audit: type=1326 audit(170.036:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 170.079728][T10448] lo speed is unknown, defaulting to 1000 [ 170.095226][T10448] wg1 speed is unknown, defaulting to 1000 [ 170.103498][ T1458] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 170.109868][ T29] audit: type=1326 audit(170.086:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 170.136819][T10448] lo speed is unknown, defaulting to 1000 [ 170.137368][ T29] audit: type=1326 audit(170.116:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 170.166477][ T29] audit: type=1326 audit(170.146:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 170.196119][ T29] audit: type=1326 audit(170.176:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 170.219165][ T29] audit: type=1326 audit(170.176:11024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa980bcf6c9 code=0x7ffc0000 [ 170.251079][ T1458] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 170.280174][T10448] chnl_net:caif_netlink_parms(): no params data found [ 170.314922][ T1458] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 170.346360][T10481] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2670'. [ 170.365962][T10448] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.374272][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.382642][T10448] bridge_slave_0: entered allmulticast mode [ 170.389220][T10448] bridge_slave_0: entered promiscuous mode [ 170.389230][T10479] loop6: detected capacity change from 0 to 2048 [ 170.404540][T10483] netlink: 'syz.3.2671': attribute type 7 has an invalid length. [ 170.405280][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.413707][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 170.419464][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.436612][T10448] bridge_slave_1: entered allmulticast mode [ 170.442690][T10479] loop6: p2 p3 p7 [ 170.443511][T10448] bridge_slave_1: entered promiscuous mode [ 170.461967][ T29] audit: type=1400 audit(170.446:11025): avc: denied { write } for pid=10473 comm="syz.6.2669" name="loop6p2" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.495658][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.523811][ T1458] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 170.622619][ T1458] bond0 (unregistering): (slave bridge0): Removing an active aggregator [ 170.638514][ T29] audit: type=1326 audit(170.616:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 170.663468][ T1458] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 170.673476][ T29] audit: type=1326 audit(170.616:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fccd0d2f6c9 code=0x7ffc0000 [ 170.697737][ T29] audit: type=1326 audit(170.616:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.3.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccd0d2f703 code=0x7ffc0000 [ 170.750044][T10510] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.2675'. [ 170.759762][T10510] netlink: zone id is out of range [ 170.765036][T10510] netlink: zone id is out of range [ 170.770539][T10510] netlink: zone id is out of range [ 170.775984][T10510] netlink: del zone limit has 8 unknown bytes [ 170.784212][ T1458] .` (unregistering): (slave macvlan1): Releasing backup interface [ 170.793776][ T1458] .` (unregistering): Released all slaves [ 170.811058][ T1458] bond0 (unregistering): Released all slaves [ 170.819532][ T1458] bond1 (unregistering): Released all slaves [ 170.833381][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.858485][ T1458] tipc: Disabling bearer [ 170.864582][ T1458] tipc: Left network mode [ 170.879520][T10448] team0: Port device team_slave_0 added [ 170.891989][ T1458] hsr_slave_0: left promiscuous mode [ 170.898064][ T1458] hsr_slave_1: left promiscuous mode [ 171.026672][T10448] team0: Port device team_slave_1 added [ 171.092821][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.099826][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.126769][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.139617][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.147740][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.174774][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.244601][T10448] hsr_slave_0: entered promiscuous mode [ 171.260897][T10448] hsr_slave_1: entered promiscuous mode [ 171.269771][T10448] debugfs: 'hsr0' already exists in 'hsr' [ 171.276774][T10448] Cannot create hsr debugfs directory [ 171.492448][T10448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.504126][T10448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.514786][T10448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.525465][T10448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.545668][T10599] loop5: detected capacity change from 0 to 128 [ 171.600058][T10448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.616380][T10448] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.628303][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.635519][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.650288][T10611] loop6: detected capacity change from 0 to 1024 [ 171.658599][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.665728][ T4625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.690590][T10599] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.698378][T10448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.716805][T10614] 9pnet_fd: Insufficient options for proto=fd [ 171.726128][T10611] EXT4-fs: Ignoring removed orlov option [ 171.744361][T10611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.797763][T10448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.975335][T10448] veth0_vlan: entered promiscuous mode [ 171.990677][T10448] veth1_vlan: entered promiscuous mode [ 172.006519][ T4097] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.044835][T10448] veth0_macvtap: entered promiscuous mode [ 172.055189][T10448] veth1_macvtap: entered promiscuous mode [ 172.073294][T10448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.084671][T10448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.100813][ T4625] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.109579][ T4625] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.133665][ T4625] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.163085][ T4625] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.202108][T10651] veth0_vlan: entered allmulticast mode [ 172.238258][T10651] ªªªªªª: renamed from vlan0 [ 173.142064][T10658] ================================================================== [ 173.150207][T10658] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 173.158059][T10658] [ 173.160405][T10658] write to 0xffffea0004909918 of 8 bytes by task 10644 on cpu 1: [ 173.168226][T10658] __filemap_remove_folio+0x1a5/0x2a0 [ 173.173730][T10658] filemap_remove_folio+0x6d/0x1d0 [ 173.178883][T10658] truncate_inode_folio+0x42/0x50 [ 173.183929][T10658] shmem_undo_range+0x244/0xa80 [ 173.188818][T10658] shmem_evict_inode+0x134/0x520 [ 173.193779][T10658] evict+0x2e3/0x550 [ 173.197699][T10658] iput+0x4ed/0x650 [ 173.201531][T10658] dentry_unlink_inode+0x24f/0x260 [ 173.206648][T10658] __dentry_kill+0x18d/0x4b0 [ 173.211255][T10658] dput+0x5e/0xd0 [ 173.214992][T10658] __fput+0x444/0x650 [ 173.218985][T10658] ____fput+0x1c/0x30 [ 173.222973][T10658] task_work_run+0x131/0x1a0 [ 173.227670][T10658] do_exit+0x483/0x15c0 [ 173.231842][T10658] do_group_exit+0xff/0x140 [ 173.236454][T10658] get_signal+0xe58/0xf70 [ 173.240792][T10658] arch_do_signal_or_restart+0x96/0x440 [ 173.246362][T10658] irqentry_exit_to_user_mode+0x5b/0xa0 [ 173.251938][T10658] irqentry_exit+0x12/0x50 [ 173.256395][T10658] asm_exc_page_fault+0x26/0x30 [ 173.261256][T10658] [ 173.263590][T10658] read to 0xffffea0004909918 of 8 bytes by task 10658 on cpu 0: [ 173.271220][T10658] folio_mapping+0xa1/0xe0 [ 173.275658][T10658] evict_folios+0x2b4b/0x3590 [ 173.280359][T10658] try_to_shrink_lruvec+0x5b5/0x950 [ 173.285575][T10658] shrink_lruvec+0x22e/0x1b50 [ 173.290266][T10658] shrink_node+0x686/0x2120 [ 173.294787][T10658] do_try_to_free_pages+0x3f6/0xcd0 [ 173.300020][T10658] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 173.305927][T10658] try_charge_memcg+0x383/0xa10 [ 173.310794][T10658] obj_cgroup_charge_pages+0xa6/0x150 [ 173.316190][T10658] __memcg_kmem_charge_page+0x9f/0x170 [ 173.321671][T10658] __alloc_frozen_pages_noprof+0x188/0x360 [ 173.327518][T10658] alloc_pages_mpol+0xb3/0x260 [ 173.332306][T10658] alloc_pages_noprof+0x90/0x130 [ 173.337266][T10658] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 173.343103][T10658] __kvmalloc_node_noprof+0x483/0x670 [ 173.348506][T10658] ip_set_alloc+0x24/0x30 [ 173.352858][T10658] hash_netiface_create+0x282/0x740 [ 173.358078][T10658] ip_set_create+0x3cc/0x970 [ 173.362684][T10658] nfnetlink_rcv_msg+0x4c6/0x590 [ 173.367645][T10658] netlink_rcv_skb+0x123/0x220 [ 173.372448][T10658] nfnetlink_rcv+0x167/0x16c0 [ 173.377149][T10658] netlink_unicast+0x5c0/0x690 [ 173.381939][T10658] netlink_sendmsg+0x58b/0x6b0 [ 173.386723][T10658] __sock_sendmsg+0x145/0x180 [ 173.391431][T10658] ____sys_sendmsg+0x31e/0x4e0 [ 173.396240][T10658] ___sys_sendmsg+0x17b/0x1d0 [ 173.400931][T10658] __x64_sys_sendmsg+0xd4/0x160 [ 173.405851][T10658] x64_sys_call+0x191e/0x3000 [ 173.410555][T10658] do_syscall_64+0xd2/0x200 [ 173.415089][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.420999][T10658] [ 173.423328][T10658] value changed: 0xffff888146e8a7b8 -> 0x0000000000000000 [ 173.430455][T10658] [ 173.432783][T10658] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.439030][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.3.2695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.450418][T10658] Tainted: [W]=WARN [ 173.454241][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.464303][T10658] ================================================================== [ 173.698645][T10283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.748176][ T7336] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.792840][ T7336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.852937][ T7336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.962378][ T7336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 174.060019][T10658] syz.3.2695 (10658) used greatest stack depth: 6024 bytes left [ 174.099500][ T7336] bond6 (unregistering): (slave gretap0): Releasing active interface [ 174.108676][ T7336] gretap0 (unregistering): left allmulticast mode [ 174.121071][ T7336] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 174.332378][ T7336] bond3 (unregistering): (slave bridge5): Removing an active aggregator [ 174.341011][ T7336] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 174.512752][ T7336] bond0 (unregistering): Released all slaves [ 174.520868][ T7336] bond1 (unregistering): Released all slaves [ 174.529458][ T7336] bond2 (unregistering): (slave batadv1): Releasing active interface [ 174.539046][ T7336] bond2 (unregistering): Released all slaves [ 174.548195][ T7336] bond3 (unregistering): Released all slaves [ 174.559294][ T7336] bond4 (unregistering): Released all slaves [ 174.568584][ T7336] bond5 (unregistering): Released all slaves [ 174.578331][ T7336] bond6 (unregistering): Released all slaves [ 174.615024][ T7336] tipc: Left network mode [ 174.953527][ T7336] IPVS: stop unused estimator thread 0... [ 175.521596][ T7336] bond3 (unregistering): (slave bridge7): Releasing active interface [ 175.772399][ T7336] .` (unregistering): (slave dummy0): Releasing backup interface [ 175.780771][ T7336] .` (unregistering): Released all slaves [ 175.788572][ T7336] bond1 (unregistering): Released all slaves [ 175.796562][ T7336] bond0 (unregistering): Released all slaves [ 175.806274][ T7336] bond2 (unregistering): Released all slaves [ 175.814906][ T7336] bond3 (unregistering): Released all slaves [ 175.848326][ T7336] hsr_slave_0: left promiscuous mode [ 175.854438][ T7336] hsr_slave_1: left promiscuous mode [ 176.273438][ T7336] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.343232][ T7336] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.403276][ T7336] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.453239][ T7336] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.524794][ T7336] bridge_slave_1: left allmulticast mode [ 176.530490][ T7336] bridge_slave_1: left promiscuous mode [ 176.536127][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.543971][ T7336] bridge_slave_0: left allmulticast mode [ 176.549638][ T7336] bridge_slave_0: left promiscuous mode [ 176.555327][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.653202][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.663173][ T7336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.672817][ T7336] bond0 (unregistering): Released all slaves [ 176.724807][ T7336] hsr_slave_0: left promiscuous mode [ 176.730711][ T7336] hsr_slave_1: left promiscuous mode [ 176.736336][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.743745][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.751550][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.758941][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.769080][ T7336] veth1_macvtap: left promiscuous mode [ 176.774611][ T7336] veth0_macvtap: left promiscuous mode [ 176.780170][ T7336] veth1_vlan: left promiscuous mode [ 176.838669][ T7336] team0 (unregistering): Port device team_slave_1 removed [ 176.849718][ T7336] team0 (unregistering): Port device team_slave_0 removed [ 178.002224][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.011556][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.021013][ T4603] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 178.029652][ T4603] bond0 (unregistering): Released all slaves [ 178.081696][ T4603] tipc: Disabling bearer [ 178.086981][ T4603] tipc: Left network mode [ 178.093276][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.100804][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.413715][ T4603] IPVS: stop unused estimator thread 0...