last executing test programs: 3m17.428810412s ago: executing program 0 (id=2038): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0xffffffff}, 0x1, r1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}}, 0x0) 3m17.388867956s ago: executing program 0 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2801, 0x0) 3m17.317588331s ago: executing program 0 (id=2041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3m17.243613637s ago: executing program 0 (id=2043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 3m17.183182892s ago: executing program 0 (id=2049): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m17.182850202s ago: executing program 0 (id=2051): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 3m17.126994497s ago: executing program 32 (id=2051): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 3m15.45412391s ago: executing program 3 (id=2105): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 3m14.637220925s ago: executing program 3 (id=2122): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 3m14.529103684s ago: executing program 3 (id=2125): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3m14.487654297s ago: executing program 3 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 3m14.431057652s ago: executing program 3 (id=2129): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) fcntl$setlease(r0, 0x400, 0x1) 3m14.235666027s ago: executing program 5 (id=2135): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 3m14.225116638s ago: executing program 3 (id=2136): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x100000}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r2, 0x0) 3m14.213100479s ago: executing program 33 (id=2136): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x100000}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r2, 0x0) 3m14.130547765s ago: executing program 5 (id=2140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 3m14.109169767s ago: executing program 5 (id=2143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 3m14.036012803s ago: executing program 5 (id=2148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 3m13.970738768s ago: executing program 5 (id=2151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) 3m12.430747691s ago: executing program 5 (id=2190): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0), 0x800) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m12.430508331s ago: executing program 34 (id=2190): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0), 0x800) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.460618364s ago: executing program 7 (id=4409): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m12.38011349s ago: executing program 7 (id=4416): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) 2m12.204237595s ago: executing program 7 (id=4419): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m12.092512774s ago: executing program 7 (id=4422): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) fallocate(r0, 0x0, 0x4000, 0x1001f0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x40000000, 0xffffffff, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x9, 0x0, 0xc]}}) r1 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x59) 2m11.937294816s ago: executing program 7 (id=4426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x4, 0x7, 0xfff8}, {0x9, 0x1, 0x7, 0x1000, 0x4}, 0x1, 0xf6, 0xd28}}, @TCA_TBF_BURST={0x8, 0x6, 0x9}]}}]}, 0x60}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2m11.862711932s ago: executing program 7 (id=4431): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m11.862514602s ago: executing program 35 (id=4431): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 43.978466842s ago: executing program 6 (id=7395): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 43.913268137s ago: executing program 6 (id=7388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 43.8798903s ago: executing program 6 (id=7390): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="08000000109eb2fa3400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 43.025582198s ago: executing program 6 (id=7391): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 42.291372636s ago: executing program 6 (id=7412): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) open(&(0x7f00000003c0)='./file0\x00', 0x8060, 0x2c) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) 41.886233859s ago: executing program 6 (id=7421): memfd_create(0x0, 0x3) r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000240)=""/87, 0x57}, 0x2297}, {{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1}, 0x10001}], 0x2, 0x2004, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 41.865854231s ago: executing program 36 (id=7421): memfd_create(0x0, 0x3) r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000240)=""/87, 0x57}, 0x2297}, {{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1}, 0x10001}], 0x2, 0x2004, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.00931678s ago: executing program 8 (id=8795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESOCT], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000281a5f1200"/28], 0x48) 2.869741081s ago: executing program 8 (id=8798): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818, &(0x7f0000002080)={[], [], 0x2c}, 0x0, 0x4e4, &(0x7f0000000240)="$eJzs3UtvVFUcAPD/TN8CdsQnD6WKxsYHpeW50IVGEzYmJhqDy9oWghQwtCZAGltdYGKihk/gY2fiJ3ClG6OuNG41bo0JMd2ALsw1Z+ZOmTJ9De200Pn9koFz7tw755x7zqHnwZ0G0LL60h+FiK0R8VtE9Fai80/oq/x1fXZq5J/ZqZFCZNlrfxfK512bnRqpnlq9bkse6S9GFLsidi2Q7sTFS6eHx8fHzufxgcliHjozfHLs5NjZoaNHDx7oOXJ46NCalDPl6drO987t3nHszSuvjBy/8taPX6f8Zvn7teWoKDWYQlvdkb7om38vazzR4Kff7rbVhAvtG5gRGpJabaqujnL/7422uFF5vfHyBxuaOaCpsizLuuqOzv0sm8lqFQqVC4BNorDyLp3GxE3NC7Ceqj/or82mmerUSP08eHO7+kKUZ0Cp3NfzV+Wd9iimOXypMjfqaFL690XE8Zl/P0uvqFuHaFaqAEAr+zaNf56pjDuqr8o7xXig5ry7872hUkTcExHbI+LefPxyf0T53Acj4qHonLsmjSjr15bm67spXj/+/KVnlUVcUhr/PZfvbc0f/1X3o6LUlse2lcvfUThxanxsf35P+qOjK8UH6z75wvPV0Hcv/frpYun31Yz/0iulXx0L5vn4q/2mmzg6PDm86oLnrr5fntJP15e/MLcTkOpxR0TsXMkHds+Ppnt26qmvdi92+vLl/2TxtNZgnyn7IuLJSv3PxE3lTzrz0MDkmXcGJi5eevZU7f7k4JHDQ4cGumN8bP9AtVXU++nny6/mwboB/fLlb65U/3ct2P7ndi5Lhdr92onG07j8+4eLzilvtf13Fl4vh1P9fJx62/Dk5PnBiM7CzNzxqB4funHtheGeG8cHK+Xv37tw/98e8d/n+XW7IiI14ocj4pGI2JPn/dGIeCwi9i5R/h9efPztxSZzt0P9jzZU/40H2k5//01dwh/1rbD8qf4PlkP9+ZHR4cnu5cq10gyu+gYCAADAHWBPRGyNQnFfZY0zm44o7tsXsWVuBWVi8ukT5949O1p5RqAUHcXqSldvzXroYL42nOLpqqGI9lLN+wfK68ZZlmU9KZ7m7+PbNrbo0PK25P2/O9/j2BrFcv9P/qx/pAXYbBraR1vsiTbgjnTr++jZmuYDWH+e14bWpf9D61px//c8Gmw6C/X/6YjrG5AVYJ0t1P/f2IB8AOvP/B9al/4PrUv/h5a0muf6lwpsP7bEOYX25iS6eKAYS38LQCmieqT6HxyX/sA/ihFrk8O2NS1pzwrqtDvWIq0oLntOewNfxJAHqr87oMlNori+zW/pQFdELNN65xrbdDVwqdkZK1fDlxv4TxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCa+D8AAP//sMPOPQ==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r2}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649244e2dbc43efa86973faa71c00002e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 2.809902776s ago: executing program 8 (id=8803): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.954510054s ago: executing program 8 (id=8829): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3916c55, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1.917969427s ago: executing program 8 (id=8831): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) getpgid(0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) 1.428071486s ago: executing program 4 (id=8850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000380), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.385666879s ago: executing program 4 (id=8852): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x26000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 1.349841692s ago: executing program 9 (id=8853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x500082c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.300215816s ago: executing program 9 (id=8854): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) 1.072305414s ago: executing program 2 (id=8855): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r0) 1.042866936s ago: executing program 2 (id=8856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 836.112183ms ago: executing program 2 (id=8857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 755.186649ms ago: executing program 2 (id=8858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0x20000006}) dup3(r2, r4, 0x0) 744.00844ms ago: executing program 2 (id=8859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 730.293952ms ago: executing program 2 (id=8860): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 517.487898ms ago: executing program 4 (id=8862): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x1000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40004) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000001000) 434.238765ms ago: executing program 9 (id=8867): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b400073500"}) 388.250039ms ago: executing program 9 (id=8869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 360.004671ms ago: executing program 9 (id=8871): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x86}, &(0x7f0000000180)=0x8) 356.821481ms ago: executing program 1 (id=8872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 341.433413ms ago: executing program 9 (id=8873): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x26000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 340.963333ms ago: executing program 4 (id=8874): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setrlimit(0x9, 0x0) io_setup(0x2004, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 324.252044ms ago: executing program 1 (id=8875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) lseek(0xffffffffffffffff, 0x84b0, 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 318.275214ms ago: executing program 4 (id=8876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) 227.819711ms ago: executing program 8 (id=8877): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) 227.663042ms ago: executing program 4 (id=8878): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x81459a, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 173.908516ms ago: executing program 1 (id=8879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x18, r2, 0x200000}, 0x10) 135.285339ms ago: executing program 1 (id=8880): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000740), 0x3, 0x43d, &(0x7f00000011c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d89632b40000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/34]) 75.872074ms ago: executing program 1 (id=8881): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 1 (id=8882): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x40, 0x700, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @empty, @empty}}}}) kernel console output (not intermixed with test programs): 202.590332][T18205] bridge0: port 1(macsec1) entered disabled state [ 202.622242][T18205] macsec1: entered allmulticast mode [ 202.627570][T18205] bridge0: entered allmulticast mode [ 202.661414][T18205] macsec1: left allmulticast mode [ 202.666525][T18205] bridge0: left allmulticast mode [ 203.518161][T18269] __nla_validate_parse: 3 callbacks suppressed [ 203.518181][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6181'. [ 203.813733][T18295] macvlan1: entered promiscuous mode [ 203.826958][T18295] ipvlan0: entered promiscuous mode [ 203.837605][T18295] ipvlan0: left promiscuous mode [ 203.845057][T18295] macvlan1: left promiscuous mode [ 203.928716][T18305] bond0: entered promiscuous mode [ 203.943538][T18305] dummy0: entered promiscuous mode [ 203.948798][T18305] bond0: entered allmulticast mode [ 203.955712][T18305] dummy0: entered allmulticast mode [ 203.964985][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.191063][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 204.191082][ T29] audit: type=1326 audit(204.165:10635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.274265][ T29] audit: type=1326 audit(204.205:10636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.297467][ T29] audit: type=1326 audit(204.205:10637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 204.320500][ T29] audit: type=1326 audit(204.205:10638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.343734][ T29] audit: type=1326 audit(204.205:10639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.366840][ T29] audit: type=1326 audit(204.205:10640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 204.390055][ T29] audit: type=1326 audit(204.205:10641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0146d5d550 code=0x7ffc0000 [ 204.413066][ T29] audit: type=1326 audit(204.205:10642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.436121][ T29] audit: type=1326 audit(204.205:10643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.459096][ T29] audit: type=1326 audit(204.205:10644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.4.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 204.630853][T18350] openvswitch: netlink: Message has 6 unknown bytes. [ 205.008581][T18400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6235'. [ 205.034680][T18406] geneve0: entered allmulticast mode [ 205.040290][T18406] geneve0: entered promiscuous mode [ 205.070298][T18409] netlink: 2020 bytes leftover after parsing attributes in process `syz.4.6237'. [ 205.079488][T18409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6237'. [ 205.151355][T18405] geneve0: left promiscuous mode [ 205.156596][T18405] geneve0: left allmulticast mode [ 205.531113][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6263'. [ 205.562722][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6266'. [ 205.571734][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6266'. [ 205.603756][T18466] bridge0: port 1(vlan2) entered blocking state [ 205.610286][T18466] bridge0: port 1(vlan2) entered disabled state [ 205.617365][T18466] vlan2: entered allmulticast mode [ 205.622563][T18466] bridge0: entered allmulticast mode [ 205.628691][T18466] vlan2: left allmulticast mode [ 205.633614][T18466] bridge0: left allmulticast mode [ 206.384276][T18522] bridge: RTM_NEWNEIGH with invalid ether address [ 206.770664][T18534] validate_nla: 2 callbacks suppressed [ 206.770683][T18534] netlink: 'syz.6.6293': attribute type 13 has an invalid length. [ 206.900008][T18543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6298'. [ 206.922361][T18545] geneve0: entered allmulticast mode [ 206.936893][T18545] geneve0: entered promiscuous mode [ 207.015252][T18549] lo speed is unknown, defaulting to 1000 [ 207.021507][T18549] lo speed is unknown, defaulting to 1000 [ 207.039320][T18544] geneve0: left promiscuous mode [ 207.044408][T18544] geneve0: left allmulticast mode [ 207.096806][T18567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18567 comm=syz.6.6309 [ 207.109422][T18567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18567 comm=syz.6.6309 [ 207.148768][T18573] loop6: detected capacity change from 0 to 128 [ 207.165131][T18573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 207.175600][T18573] System zones: 1-3, 19-19, 35-36 [ 207.204396][T18573] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 207.305515][ T8719] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.322621][T18593] geneve0: entered allmulticast mode [ 207.328675][T18593] geneve0: entered promiscuous mode [ 207.444986][T18591] geneve0: left promiscuous mode [ 207.450157][T18591] geneve0: left allmulticast mode [ 207.507868][T18613] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6328'. [ 207.834077][T18628] netlink: 'syz.2.6344': attribute type 10 has an invalid length. [ 207.841991][T18628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6344'. [ 207.855442][T18628] bond0: (slave dummy0): Releasing backup interface [ 207.875534][T18628] dummy0: left allmulticast mode [ 207.884900][T18628] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 208.005608][T18647] netlink: 'syz.8.6340': attribute type 13 has an invalid length. [ 208.014715][T18643] bridge0: entered promiscuous mode [ 208.020991][T18643] bridge0: port 1(macvtap2) entered blocking state [ 208.027805][T18643] bridge0: port 1(macvtap2) entered disabled state [ 208.034596][T18643] macvtap2: entered allmulticast mode [ 208.040007][T18643] bridge0: entered allmulticast mode [ 208.045830][T18643] macvtap2: left allmulticast mode [ 208.050972][T18643] bridge0: left allmulticast mode [ 208.057346][T18643] bridge0: left promiscuous mode [ 208.199177][ T4050] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.208400][ T4050] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.218284][ T4050] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.227413][ T4050] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.287801][T18662] bridge0: port 1(vlan2) entered blocking state [ 208.294236][T18662] bridge0: port 1(vlan2) entered disabled state [ 208.301378][T18662] vlan2: entered allmulticast mode [ 208.306669][T18662] bridge0: entered allmulticast mode [ 208.313090][T18662] vlan2: left allmulticast mode [ 208.317976][T18662] bridge0: left allmulticast mode [ 208.462405][T18677] netlink: 'syz.1.6353': attribute type 10 has an invalid length. [ 208.470464][T18677] dummy0: entered promiscuous mode [ 208.476828][T18677] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 208.693669][T18690] geneve0: entered allmulticast mode [ 208.703975][T18690] geneve0: entered promiscuous mode [ 208.854460][T18688] geneve0: left promiscuous mode [ 208.859556][T18688] geneve0: left allmulticast mode [ 208.962310][T18695] __nla_validate_parse: 3 callbacks suppressed [ 208.962328][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6362'. [ 208.977508][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6362'. [ 209.031522][T18695] bridge0: port 4(vlan0) entered blocking state [ 209.037914][T18695] bridge0: port 4(vlan0) entered disabled state [ 209.044707][T18695] vlan0: entered allmulticast mode [ 209.049842][T18695] bridge0: entered allmulticast mode [ 209.058826][T18695] vlan0: left allmulticast mode [ 209.063729][T18695] bridge0: left allmulticast mode [ 209.193082][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 209.193102][ T29] audit: type=1326 audit(209.125:10851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.222448][ T29] audit: type=1326 audit(209.125:10852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.245510][ T29] audit: type=1326 audit(209.135:10853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.268693][ T29] audit: type=1326 audit(209.135:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.291748][ T29] audit: type=1326 audit(209.135:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.314728][ T29] audit: type=1326 audit(209.135:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.337700][ T29] audit: type=1326 audit(209.135:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.360754][ T29] audit: type=1326 audit(209.145:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.383713][ T29] audit: type=1326 audit(209.145:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.406659][ T29] audit: type=1326 audit(209.145:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 209.491293][T18713] sch_fq: defrate 6 ignored. [ 209.600682][T18726] netlink: 'syz.8.6369': attribute type 10 has an invalid length. [ 209.608593][T18726] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6369'. [ 209.620866][T18728] netlink: 2020 bytes leftover after parsing attributes in process `syz.2.6368'. [ 209.630080][T18728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6368'. [ 209.640005][T18726] bond0: (slave dummy0): Releasing backup interface [ 209.658292][T18726] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 209.694849][T18730] lo speed is unknown, defaulting to 1000 [ 209.718484][T18730] lo speed is unknown, defaulting to 1000 [ 209.975776][T18767] netlink: 'syz.6.6393': attribute type 10 has an invalid length. [ 209.983894][T18767] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6393'. [ 209.997757][T18767] dummy0: entered promiscuous mode [ 210.003851][T18767] bond0: (slave dummy0): Releasing backup interface [ 210.020085][T18767] bridge0: port 4(dummy0) entered blocking state [ 210.026538][T18767] bridge0: port 4(dummy0) entered disabled state [ 210.047147][T18767] dummy0: entered allmulticast mode [ 210.083348][T18774] C: renamed from team_slave_0 [ 210.093921][T18774] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 210.101763][T18774] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6396'. [ 210.106465][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6408'. [ 210.110875][T18774] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.148016][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6408'. [ 210.249881][T18789] netlink: 'syz.1.6401': attribute type 13 has an invalid length. [ 210.263716][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6404'. [ 210.277499][T18791] bridge0: port 1(vlan1) entered blocking state [ 210.283834][T18791] bridge0: port 1(vlan1) entered disabled state [ 210.290416][T18791] vlan1: entered allmulticast mode [ 210.295668][T18791] bridge0: entered allmulticast mode [ 210.303641][T18791] vlan1: left allmulticast mode [ 210.308520][T18791] bridge0: left allmulticast mode [ 210.429519][T18800] loop6: detected capacity change from 0 to 512 [ 210.443074][T18800] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.455916][T18800] EXT4-fs (loop6): 1 truncate cleaned up [ 210.462482][T18800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.482659][ T3414] lo speed is unknown, defaulting to 1000 [ 210.488523][ T3414] syz2: Port: 1 Link DOWN [ 210.615422][T18806] geneve0: entered allmulticast mode [ 210.632302][T18806] geneve0: entered promiscuous mode [ 210.694890][ T8719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.725720][T18820] bridge0: port 5(macsec0) entered blocking state [ 210.732312][T18820] bridge0: port 5(macsec0) entered disabled state [ 210.739269][T18820] macsec0: entered allmulticast mode [ 210.744658][T18820] bridge0: entered allmulticast mode [ 210.751499][T18820] macsec0: left allmulticast mode [ 210.756591][T18820] bridge0: left allmulticast mode [ 210.773478][T18805] geneve0: left promiscuous mode [ 210.778513][T18805] geneve0: left allmulticast mode [ 210.854595][T18829] loop6: detected capacity change from 0 to 512 [ 210.870217][T18829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.931553][T18840] vlan2: entered allmulticast mode [ 210.969274][ T8719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.750464][T18857] lo speed is unknown, defaulting to 1000 [ 211.757839][T18857] lo speed is unknown, defaulting to 1000 [ 211.892754][ T4050] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.902807][ T4050] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.914257][ T4050] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.930104][ T4050] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.375425][T18879] syz.8.6450: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 212.390033][T18879] CPU: 1 UID: 0 PID: 18879 Comm: syz.8.6450 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 212.390070][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.390084][T18879] Call Trace: [ 212.390091][T18879] [ 212.390099][T18879] __dump_stack+0x1d/0x30 [ 212.390122][T18879] dump_stack_lvl+0xe8/0x140 [ 212.390170][T18879] dump_stack+0x15/0x1b [ 212.390252][T18879] warn_alloc+0x12b/0x1a0 [ 212.390287][T18879] __vmalloc_node_range_noprof+0x9c/0xe00 [ 212.390390][T18879] ? __futex_wait+0x1ff/0x260 [ 212.390450][T18879] ? __pfx_futex_wake_mark+0x10/0x10 [ 212.390477][T18879] ? __rcu_read_unlock+0x4f/0x70 [ 212.390499][T18879] ? avc_has_perm_noaudit+0x1b1/0x200 [ 212.390533][T18879] vmalloc_user_noprof+0x7d/0xb0 [ 212.390597][T18879] ? xskq_create+0x80/0xe0 [ 212.390628][T18879] xskq_create+0x80/0xe0 [ 212.390671][T18879] xsk_init_queue+0x95/0xf0 [ 212.390805][T18879] xsk_setsockopt+0x477/0x640 [ 212.390834][T18879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.390882][T18879] __sys_setsockopt+0x181/0x200 [ 212.390903][T18879] __x64_sys_setsockopt+0x64/0x80 [ 212.390922][T18879] x64_sys_call+0x20ec/0x2ff0 [ 212.390942][T18879] do_syscall_64+0xd2/0x200 [ 212.391043][T18879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.391110][T18879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.391133][T18879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.391153][T18879] RIP: 0033:0x7f12ea29ebe9 [ 212.391169][T18879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.391186][T18879] RSP: 002b:00007f12e8d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.391221][T18879] RAX: ffffffffffffffda RBX: 00007f12ea4c5fa0 RCX: 00007f12ea29ebe9 [ 212.391253][T18879] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 212.391265][T18879] RBP: 00007f12ea321e19 R08: 0000000000000004 R09: 0000000000000000 [ 212.391277][T18879] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 212.391289][T18879] R13: 00007f12ea4c6038 R14: 00007f12ea4c5fa0 R15: 00007ffc05967b98 [ 212.391308][T18879] [ 212.391325][T18879] Mem-Info: [ 212.607680][T18879] active_anon:40975 inactive_anon:258 isolated_anon:0 [ 212.607680][T18879] active_file:14620 inactive_file:13166 isolated_file:0 [ 212.607680][T18879] unevictable:16828 dirty:328 writeback:0 [ 212.607680][T18879] slab_reclaimable:3646 slab_unreclaimable:250981 [ 212.607680][T18879] mapped:28918 shmem:21317 pagetables:1444 [ 212.607680][T18879] sec_pagetables:0 bounce:0 [ 212.607680][T18879] kernel_misc_reclaimable:0 [ 212.607680][T18879] free:1561790 free_pcp:24200 free_cma:0 [ 212.653590][T18879] Node 0 active_anon:163900kB inactive_anon:1032kB active_file:58480kB inactive_file:52664kB unevictable:67312kB isolated(anon):0kB isolated(file):0kB mapped:115672kB dirty:1312kB writeback:0kB shmem:85268kB kernel_stack:5040kB pagetables:5776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.681828][T18879] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.710641][T18879] lowmem_reserve[]: 0 2883 7862 7862 [ 212.715992][T18879] Node 0 DMA32 free:2949312kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952844kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 212.746168][T18879] lowmem_reserve[]: 0 0 4978 4978 [ 212.751406][T18879] Node 0 Normal free:3282720kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:163784kB inactive_anon:1032kB active_file:58480kB inactive_file:52664kB unevictable:67312kB writepending:1312kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:93076kB local_pcp:20952kB free_cma:0kB [ 212.784247][T18879] lowmem_reserve[]: 0 0 0 0 [ 212.789151][T18879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.802162][T18879] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949312kB [ 212.818392][T18879] Node 0 Normal: 2491*4kB (UME) 195*8kB (UM) 47*16kB (UME) 22*32kB (UME) 24*64kB (ME) 87*128kB (UME) 95*256kB (UME) 58*512kB (UME) 68*1024kB (UM) 38*2048kB (UM) 746*4096kB (M) = 3282740kB [ 212.837081][T18879] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 212.846417][T18879] 66180 total pagecache pages [ 212.851108][T18879] 263 pages in swap cache [ 212.855440][T18879] Free swap = 123360kB [ 212.859590][T18879] Total swap = 124996kB [ 212.863852][T18879] 2097051 pages RAM [ 212.867727][T18879] 0 pages HighMem/MovableOnly [ 212.872392][T18879] 80440 pages reserved [ 212.909813][T18889] IPVS: Error connecting to the multicast addr [ 213.305124][T18932] lo speed is unknown, defaulting to 1000 [ 213.311201][T18932] lo speed is unknown, defaulting to 1000 [ 214.168764][T18983] vlan2: entered allmulticast mode [ 214.174052][T18983] bridge_slave_0: entered allmulticast mode [ 214.247335][T18989] cgroup: Unknown subsys name 'cpuset' [ 214.491334][T18997] lo speed is unknown, defaulting to 1000 [ 214.497559][T18997] lo speed is unknown, defaulting to 1000 [ 215.088991][T19001] lo speed is unknown, defaulting to 1000 [ 215.095897][T19001] lo speed is unknown, defaulting to 1000 [ 215.117829][T19004] lo speed is unknown, defaulting to 1000 [ 215.147839][T19004] lo speed is unknown, defaulting to 1000 [ 215.234399][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 215.234415][ T29] audit: type=1326 audit(215.215:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.305806][ T29] audit: type=1326 audit(215.255:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.328833][ T29] audit: type=1326 audit(215.255:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.351805][ T29] audit: type=1326 audit(215.255:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.374902][ T29] audit: type=1326 audit(215.255:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.397932][ T29] audit: type=1326 audit(215.255:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.408232][T19028] __nla_validate_parse: 12 callbacks suppressed [ 215.408250][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6504'. [ 215.420983][ T29] audit: type=1326 audit(215.255:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.421065][ T29] audit: type=1326 audit(215.255:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.482330][ T29] audit: type=1326 audit(215.255:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.505313][ T29] audit: type=1326 audit(215.255:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 215.528778][T19031] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6504'. [ 215.801779][T19078] loop6: detected capacity change from 0 to 512 [ 215.815442][T19081] lo speed is unknown, defaulting to 1000 [ 215.821728][T19081] lo speed is unknown, defaulting to 1000 [ 215.841573][T19078] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6528: corrupted inode contents [ 215.875737][T19078] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.6528: mark_inode_dirty error [ 215.897256][T19078] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6528: corrupted inode contents [ 215.916888][T19078] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.6528: mark_inode_dirty error [ 215.975762][T19078] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6528: corrupted inode contents [ 216.009868][T19078] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 216.019393][T19078] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6528: corrupted inode contents [ 216.041184][T19078] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.6528: mark_inode_dirty error [ 216.063374][T19078] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 216.075383][T19078] EXT4-fs (loop6): 1 truncate cleaned up [ 216.084973][T19115] ref_ctr_offset mismatch. inode: 0x186a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 216.097578][T19078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.110547][ T4040] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 216.232394][ T8719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.284094][T19134] tipc: Started in network mode [ 216.289016][T19134] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 216.297951][T19134] tipc: Enabling of bearer rejected, failed to enable media [ 216.974377][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6581'. [ 217.045615][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6581'. [ 217.392975][T19251] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.443661][T19257] atomic_op ffff8881003e0928 conn xmit_atomic 0000000000000000 [ 217.580092][T19279] geneve0: entered allmulticast mode [ 217.780316][T19309] loop6: detected capacity change from 0 to 128 [ 217.796086][T19309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 217.804197][T19309] System zones: 1-3, 19-19, 35-36 [ 217.809871][T19309] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 217.826146][T19309] rdma_rxe: rxe_newlink: failed to add syz_tun [ 217.844778][ T8719] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.152767][T19357] loop6: detected capacity change from 0 to 128 [ 218.163234][T19357] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.200676][ T8719] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.239946][T19365] macvtap0: refused to change device tx_queue_len [ 218.471118][T19390] netlink: 'syz.2.6664': attribute type 12 has an invalid length. [ 218.576193][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6668'. [ 218.592373][T19398] ip6gre1: entered allmulticast mode [ 218.660768][T19414] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6666'. [ 218.791652][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6684'. [ 218.800659][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6684'. [ 219.905131][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6719'. [ 219.914090][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6719'. [ 219.996843][T19530] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 220.299333][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 220.299374][ T29] audit: type=1326 audit(220.275:11295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 220.328795][ T29] audit: type=1326 audit(220.275:11296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 220.355696][ T29] audit: type=1326 audit(220.275:11297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 220.378800][ T29] audit: type=1326 audit(220.275:11298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 220.401787][ T29] audit: type=1326 audit(220.275:11299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 220.449223][ T29] audit: type=1326 audit(220.405:11300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 220.472513][ T29] audit: type=1326 audit(220.405:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87ef7d5ba7 code=0x7ffc0000 [ 220.495405][ T29] audit: type=1326 audit(220.405:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87ef77add9 code=0x7ffc0000 [ 220.518281][ T29] audit: type=1326 audit(220.405:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87ef7d5ba7 code=0x7ffc0000 [ 220.541300][ T29] audit: type=1326 audit(220.405:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.2.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87ef77add9 code=0x7ffc0000 [ 220.786818][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6758'. [ 220.799189][T19594] sctp: [Deprecated]: syz.8.6758 (pid 19594) Use of int in max_burst socket option. [ 220.799189][T19594] Use struct sctp_assoc_value instead [ 221.055423][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6775'. [ 221.159180][T19644] netlink: 'syz.1.6781': attribute type 10 has an invalid length. [ 221.449315][T19680] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.457304][T19679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6796'. [ 221.501231][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6799'. [ 221.576529][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6802'. [ 221.733093][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6809'. [ 221.808775][T19714] netlink: 536 bytes leftover after parsing attributes in process `syz.4.6807'. [ 221.819797][T19714] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6807'. [ 221.988474][T19723] lo speed is unknown, defaulting to 1000 [ 221.995648][T19723] lo speed is unknown, defaulting to 1000 [ 222.253704][T19739] block device autoloading is deprecated and will be removed. [ 222.378974][T19741] openvswitch: netlink: Message has 6 unknown bytes. [ 222.745356][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6843'. [ 222.776367][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6844'. [ 222.895260][T19807] openvswitch: netlink: Message has 6 unknown bytes. [ 224.595484][T19953] pim6reg: entered allmulticast mode [ 224.610237][T19953] pim6reg: left allmulticast mode [ 224.622697][T19955] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 225.055201][T20002] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 33554432, id = 0 [ 225.065536][T19996] IPVS: stopping backup sync thread 20002 ... [ 225.427333][ T29] kauditd_printk_skb: 1051 callbacks suppressed [ 225.427350][ T29] audit: type=1326 audit(481.400:12356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.458003][ T29] audit: type=1326 audit(481.400:12357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.515049][ T29] audit: type=1326 audit(481.460:12358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.538018][ T29] audit: type=1326 audit(481.460:12359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.562287][ T29] audit: type=1326 audit(481.460:12360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.585865][ T29] audit: type=1326 audit(481.460:12361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.609533][ T29] audit: type=1326 audit(481.460:12362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.633709][ T29] audit: type=1326 audit(481.460:12363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.656605][ T29] audit: type=1326 audit(481.460:12364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.680859][ T29] audit: type=1326 audit(481.460:12365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.4.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 225.977755][T20066] __nla_validate_parse: 3 callbacks suppressed [ 225.977771][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6963'. [ 226.003981][T20066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6963'. [ 226.208784][T20095] netlink: 'syz.2.6977': attribute type 1 has an invalid length. [ 226.257931][T20103] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 226.315493][T20114] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6986'. [ 226.369738][T20122] pim6reg: entered allmulticast mode [ 226.397808][T20122] pim6reg: left allmulticast mode [ 226.475652][T20129] netlink: 'syz.6.6990': attribute type 12 has an invalid length. [ 226.505368][T20130] ------------[ cut here ]------------ [ 226.510863][T20130] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 226.531174][T20130] WARNING: CPU: 1 PID: 20130 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 226.541716][T20130] Modules linked in: [ 226.545671][T20130] CPU: 1 UID: 0 PID: 20130 Comm: syz.8.6991 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 226.558288][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.568404][T20130] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 226.574767][T20130] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 226.594434][T20130] RSP: 0018:ffffc90002977440 EFLAGS: 00010292 [ 226.600532][T20130] RAX: 142a8a57d0b08600 RBX: ffff88810b1eb040 RCX: 0000000000080000 [ 226.608553][T20130] RDX: ffffc90008349000 RSI: 000000000001d3b1 RDI: 000000000001d3b2 [ 226.616580][T20130] RBP: 0000000000000000 R08: 0001c9000297727f R09: 0000000000000000 [ 226.624584][T20130] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810b1eb000 [ 226.632693][T20130] R13: ffff88814bdf0000 R14: ffff88814bdf0000 R15: ffff88810b1eb038 [ 226.640694][T20130] FS: 00007f12e8d076c0(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 226.649712][T20130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.656331][T20130] CR2: 00007f50106b2108 CR3: 0000000128438000 CR4: 00000000003506f0 [ 226.664349][T20130] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.672357][T20130] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 226.680351][T20130] Call Trace: [ 226.683674][T20130] [ 226.686623][T20130] reg_set_min_max+0x1eb/0x260 [ 226.691553][T20130] check_cond_jmp_op+0x1080/0x16e0 [ 226.696818][T20130] do_check+0x332a/0x7a10 [ 226.701295][T20130] do_check_common+0xc3a/0x12a0 [ 226.703903][T20140] netlink: 'syz.6.6994': attribute type 10 has an invalid length. [ 226.706240][T20130] bpf_check+0x942b/0xd9e0 [ 226.718460][T20130] ? __rcu_read_unlock+0x4f/0x70 [ 226.723437][T20130] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 226.729516][T20130] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 226.735295][T20130] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 226.741220][T20130] ? css_rstat_updated+0xb7/0x240 [ 226.746331][T20130] ? pcpu_block_update+0x24e/0x3b0 [ 226.751480][T20130] ? _find_next_zero_bit+0x64/0xa0 [ 226.756682][T20130] ? pcpu_block_refresh_hint+0x157/0x170 [ 226.762360][T20130] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 226.768429][T20130] ? css_rstat_updated+0xb7/0x240 [ 226.773474][T20130] ? __rcu_read_unlock+0x4f/0x70 [ 226.778429][T20130] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 226.784251][T20130] ? selinux_bpf_prog_load+0x36/0xf0 [ 226.789540][T20130] ? __kmalloc_cache_noprof+0x299/0x320 [ 226.795133][T20130] ? selinux_bpf_prog_load+0xbf/0xf0 [ 226.800406][T20130] ? security_bpf_prog_load+0x2c/0xa0 [ 226.805793][T20130] bpf_prog_load+0xedd/0x1070 [ 226.810463][T20130] ? security_bpf+0x2b/0x90 [ 226.814979][T20130] __sys_bpf+0x462/0x7b0 [ 226.819283][T20130] __x64_sys_bpf+0x41/0x50 [ 226.823783][T20130] x64_sys_call+0x2aea/0x2ff0 [ 226.828500][T20130] do_syscall_64+0xd2/0x200 [ 226.833060][T20130] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 226.839197][T20130] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 226.844930][T20130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.850803][T20130] RIP: 0033:0x7f12ea29ebe9 [ 226.855343][T20130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.875032][T20130] RSP: 002b:00007f12e8d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.883462][T20130] RAX: ffffffffffffffda RBX: 00007f12ea4c5fa0 RCX: 00007f12ea29ebe9 [ 226.891459][T20130] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 226.899434][T20130] RBP: 00007f12ea321e19 R08: 0000000000000000 R09: 0000000000000000 [ 226.907480][T20130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.915465][T20130] R13: 00007f12ea4c6038 R14: 00007f12ea4c5fa0 R15: 00007ffc05967b98 [ 226.923436][T20130] [ 226.926546][T20130] ---[ end trace 0000000000000000 ]--- [ 226.979915][T20151] netlink: 'syz.8.7001': attribute type 1 has an invalid length. [ 226.983120][T20152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6999'. [ 227.010912][T20151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.026176][T20151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.034996][T20151] bond2: (slave batadv0): making interface the new active one [ 227.043888][T20151] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 227.699191][T20198] netlink: 'syz.4.7021': attribute type 12 has an invalid length. [ 228.551896][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7037'. [ 228.571085][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7037'. [ 228.731741][T20260] bridge: RTM_NEWNEIGH with invalid ether address [ 229.509038][T20353] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7086'. [ 230.339767][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7102'. [ 230.509013][T20398] netlink: 'syz.4.7106': attribute type 15 has an invalid length. [ 230.516934][T20398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7106'. [ 230.660223][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 230.660243][ T29] audit: type=1326 audit(486.630:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.754773][ T29] audit: type=1326 audit(486.630:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.779015][ T29] audit: type=1326 audit(486.680:12446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.803342][ T29] audit: type=1326 audit(486.680:12447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.826379][ T29] audit: type=1326 audit(486.680:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.850631][ T29] audit: type=1326 audit(486.680:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.874988][ T29] audit: type=1326 audit(486.680:12450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.898019][ T29] audit: type=1326 audit(486.680:12451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.922189][ T29] audit: type=1326 audit(486.680:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 230.945794][ T29] audit: type=1326 audit(486.680:12453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.2.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 231.209761][T20443] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7125'. [ 231.264979][T20451] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7129'. [ 231.696992][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7147'. [ 231.707560][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7143'. [ 231.717110][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7147'. [ 231.728011][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7143'. [ 231.750731][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7149'. [ 231.759843][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7149'. [ 231.887083][T20524] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 231.893684][T20524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.901304][T20524] vhci_hcd vhci_hcd.0: Device attached [ 231.936719][T20521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7156'. [ 231.937618][T20526] vhci_hcd: connection closed [ 231.950835][ T4072] vhci_hcd: stop threads [ 231.959868][ T4072] vhci_hcd: release socket [ 231.964411][ T4072] vhci_hcd: disconnect device [ 231.995291][T20532] vlan1: entered allmulticast mode [ 232.000534][T20532] bridge_slave_0: entered allmulticast mode [ 232.012520][T20534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20534 comm=syz.2.7160 [ 232.787124][T20626] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7199'. [ 233.638852][T20691] bridge: RTM_NEWNEIGH with invalid ether address [ 233.657840][T20693] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 233.799662][T20694] lo speed is unknown, defaulting to 1000 [ 233.810255][T20694] lo speed is unknown, defaulting to 1000 [ 234.713341][T20774] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 234.713341][T20774] program syz.6.7256 not setting count and/or reply_len properly [ 234.835091][T20789] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 235.125025][T20822] netlink: 'syz.6.7277': attribute type 1 has an invalid length. [ 235.349836][T20852] netlink: zone id is out of range [ 235.355156][T20852] netlink: zone id is out of range [ 235.360351][T20852] netlink: zone id is out of range [ 235.365644][T20852] netlink: zone id is out of range [ 235.470437][ T6475] Process accounting resumed [ 236.126412][T20906] lo speed is unknown, defaulting to 1000 [ 236.143461][T20906] lo speed is unknown, defaulting to 1000 [ 236.345388][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 236.345405][ T29] audit: type=1326 audit(492.320:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.371598][T20916] lo speed is unknown, defaulting to 1000 [ 236.395818][T20916] lo speed is unknown, defaulting to 1000 [ 236.398284][ T29] audit: type=1326 audit(492.350:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.424789][ T29] audit: type=1326 audit(492.350:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.447771][ T29] audit: type=1326 audit(492.350:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.470833][ T29] audit: type=1326 audit(492.350:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.493914][ T29] audit: type=1326 audit(492.350:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.516964][ T29] audit: type=1326 audit(492.350:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.539962][ T29] audit: type=1326 audit(492.360:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.562924][ T29] audit: type=1326 audit(492.360:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.586005][ T29] audit: type=1326 audit(492.360:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.1.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 236.674239][T20933] __nla_validate_parse: 3 callbacks suppressed [ 236.674255][T20933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7319'. [ 236.700472][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7317'. [ 236.720143][T20935] vxlan0: entered promiscuous mode [ 236.729352][ T4043] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.759489][ T4043] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.779240][ T4043] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.817943][ T4043] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.860155][T20950] loop6: detected capacity change from 0 to 2048 [ 236.882554][T20950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.900977][T20950] random: crng reseeded on system resumption [ 236.937033][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7325'. [ 236.948024][ T8719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.670746][T21000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7345'. [ 237.881865][T21011] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7349'. [ 238.033194][T21018] dummy0: left promiscuous mode [ 238.038705][T21018] wg2: left promiscuous mode [ 238.043483][T21018] wg2: left allmulticast mode [ 238.100303][T21024] loop6: detected capacity change from 0 to 512 [ 238.114293][T21024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.189187][T21036] ipvlan2: entered promiscuous mode [ 238.213425][T21036] bridge0: port 1(ipvlan2) entered blocking state [ 238.219950][T21036] bridge0: port 1(ipvlan2) entered disabled state [ 238.242421][T21036] ipvlan2: entered allmulticast mode [ 238.247776][T21036] bridge0: entered allmulticast mode [ 238.254816][T21036] ipvlan2: left allmulticast mode [ 238.259873][T21036] bridge0: left allmulticast mode [ 238.297784][ T8719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.329432][T21043] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7361'. [ 238.384162][T21049] netlink: 272 bytes leftover after parsing attributes in process `syz.6.7366'. [ 238.514145][T21069] loop6: detected capacity change from 0 to 1024 [ 238.521285][T21069] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.527822][T21069] EXT4-fs: Ignoring removed bh option [ 238.546675][T21069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.661504][ T8719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.691778][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7380'. [ 238.966186][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7390'. [ 239.828518][T21111] loop6: detected capacity change from 0 to 8192 [ 239.839965][T21111] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.901495][T21131] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7403'. [ 239.954403][T21134] loop6: detected capacity change from 8192 to 0 [ 239.954470][ C1] I/O error, dev loop6, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 239.970278][ C1] Buffer I/O error on dev loop6, logical block 33, lost sync page write [ 239.986603][T21111] bio_check_eod: 25394 callbacks suppressed [ 239.986623][T21111] syz.6.7391: attempt to access beyond end of device [ 239.986623][T21111] loop6: rw=1, sector=1, nr_sectors = 1 limit=0 [ 240.005864][T21111] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 240.042145][T21111] syz.6.7391: attempt to access beyond end of device [ 240.042145][T21111] loop6: rw=0, sector=65, nr_sectors = 1 limit=0 [ 240.056324][T21111] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 240.064903][T21111] syz.6.7391: attempt to access beyond end of device [ 240.064903][T21111] loop6: rw=2049, sector=85, nr_sectors = 1 limit=0 [ 240.078179][T21111] Buffer I/O error on dev loop6, logical block 85, lost async page write [ 240.099188][T21111] syz.6.7391: attempt to access beyond end of device [ 240.099188][T21111] loop6: rw=2049, sector=97, nr_sectors = 1 limit=0 [ 240.113593][T21111] Buffer I/O error on dev loop6, logical block 97, lost async page write [ 240.124128][T21111] syz.6.7391: attempt to access beyond end of device [ 240.124128][T21111] loop6: rw=2049, sector=98, nr_sectors = 1 limit=0 [ 240.137569][T21111] Buffer I/O error on dev loop6, logical block 98, lost async page write [ 240.148935][T21111] syz.6.7391: attempt to access beyond end of device [ 240.148935][T21111] loop6: rw=2049, sector=99, nr_sectors = 1 limit=0 [ 240.162112][T21111] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 240.170846][T21111] syz.6.7391: attempt to access beyond end of device [ 240.170846][T21111] loop6: rw=2049, sector=100, nr_sectors = 1 limit=0 [ 240.185442][T21111] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 240.187164][T21144] bond0: left promiscuous mode [ 240.198810][T21144] bond_slave_0: left promiscuous mode [ 240.204325][T21144] bond_slave_1: left promiscuous mode [ 240.225529][T21144] dummy0: left promiscuous mode [ 240.225758][T21111] syz.6.7391: attempt to access beyond end of device [ 240.225758][T21111] loop6: rw=2049, sector=101, nr_sectors = 1 limit=0 [ 240.230966][T21144] wg2: left promiscuous mode [ 240.244829][T21111] Buffer I/O error on dev loop6, logical block 101, lost async page write [ 240.248445][T21144] wg2: left allmulticast mode [ 240.282397][T21144] ip6gre1: left allmulticast mode [ 240.288409][T21111] syz.6.7391: attempt to access beyond end of device [ 240.288409][T21111] loop6: rw=2049, sector=102, nr_sectors = 1 limit=0 [ 240.301782][T21111] Buffer I/O error on dev loop6, logical block 102, lost async page write [ 240.317304][T21111] syz.6.7391: attempt to access beyond end of device [ 240.317304][T21111] loop6: rw=2049, sector=103, nr_sectors = 1 limit=0 [ 240.330645][T21111] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 240.353359][T21144] vxlan0: left promiscuous mode [ 240.366438][ T4054] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.380209][ T4054] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.404355][ T4054] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.426464][ T4054] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.484093][ T8719] FAT-fs (loop6): Directory bread(block 65) failed [ 240.498377][ T8719] FAT-fs (loop6): Directory bread(block 66) failed [ 240.527159][ T8719] FAT-fs (loop6): Directory bread(block 67) failed [ 240.547940][ T8719] FAT-fs (loop6): Directory bread(block 68) failed [ 240.562396][T21151] ipvlan2: entered promiscuous mode [ 240.565352][ T8719] FAT-fs (loop6): Directory bread(block 69) failed [ 240.568438][T21151] bridge0: port 1(ipvlan2) entered blocking state [ 240.579840][ T8719] FAT-fs (loop6): Directory bread(block 70) failed [ 240.580875][T21151] bridge0: port 1(ipvlan2) entered disabled state [ 240.587832][ T8719] FAT-fs (loop6): Directory bread(block 71) failed [ 240.604246][T21151] ipvlan2: entered allmulticast mode [ 240.609547][T21151] bridge0: entered allmulticast mode [ 240.627063][T21151] ipvlan2: left allmulticast mode [ 240.632157][T21151] bridge0: left allmulticast mode [ 240.762090][ T4046] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 240.784460][T11615] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 240.815817][T11615] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 240.824179][T11615] FAT-fs (loop6): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 240.920471][T21166] lo speed is unknown, defaulting to 1000 [ 240.933551][T21166] lo speed is unknown, defaulting to 1000 [ 241.169330][T21173] lo speed is unknown, defaulting to 1000 [ 241.179502][T21173] lo speed is unknown, defaulting to 1000 [ 241.241233][T21197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21197 comm=syz.8.7431 [ 241.346979][T21173] chnl_net:caif_netlink_parms(): no params data found [ 241.359916][T21210] netlink: 'syz.8.7435': attribute type 3 has an invalid length. [ 241.420548][T21173] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.427934][T21173] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.436991][T21173] bridge_slave_0: entered allmulticast mode [ 241.445156][T21173] bridge_slave_0: entered promiscuous mode [ 241.452110][T21173] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.459240][T21173] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.467679][T21173] bridge_slave_1: entered allmulticast mode [ 241.474516][T21173] bridge_slave_1: entered promiscuous mode [ 241.500849][T21173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.511840][T21173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.533933][T21173] team0: Port device team_slave_0 added [ 241.540992][T21173] team0: Port device team_slave_1 added [ 241.570475][T21173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.577494][T21173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.604811][T21173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.616919][T21173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.623924][T21173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.649969][T21173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.711044][T21173] hsr_slave_0: entered promiscuous mode [ 241.717530][T21173] hsr_slave_1: entered promiscuous mode [ 241.723635][T21173] debugfs: 'hsr0' already exists in 'hsr' [ 241.729376][T21173] Cannot create hsr debugfs directory [ 241.755252][T21237] __nla_validate_parse: 3 callbacks suppressed [ 241.755270][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7444'. [ 241.851796][T21173] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 241.875493][T21173] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 241.885080][T21173] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 241.909118][T21173] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 241.928012][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7450'. [ 241.963488][T21173] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.970581][T21173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.978112][T21173] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.985240][T21173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.995899][ T4073] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.008879][ T4073] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.095184][T21173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.130418][T21173] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.140662][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.147809][ T4060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.169618][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.176817][ T4060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.208787][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 242.208804][ T29] audit: type=1326 audit(498.180:12693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 242.238058][ T29] audit: type=1326 audit(498.180:12694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 242.240073][T21173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.272686][T21173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.281401][ T29] audit: type=1326 audit(498.250:12695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 242.306065][ T29] audit: type=1326 audit(498.250:12696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 242.329225][ T29] audit: type=1326 audit(498.250:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 242.352269][ T29] audit: type=1326 audit(498.250:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6f8f40b07 code=0x7ffc0000 [ 242.375273][ T29] audit: type=1326 audit(498.250:12699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa6f8f40a7c code=0x7ffc0000 [ 242.398267][ T29] audit: type=1326 audit(498.250:12700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa6f8f409b4 code=0x7ffc0000 [ 242.403188][T21173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.421268][ T29] audit: type=1326 audit(498.250:12701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa6f8f409b4 code=0x7ffc0000 [ 242.451086][ T29] audit: type=1326 audit(498.250:12702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21262 comm="syz.1.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa6f8f3d84a code=0x7ffc0000 [ 242.500745][T21263] tipc: Enabling of bearer rejected, already enabled [ 242.686359][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7458'. [ 242.772685][T21296] ipvlan2: entered promiscuous mode [ 242.780810][T21296] bridge0: port 1(ipvlan2) entered blocking state [ 242.788545][T21296] bridge0: port 1(ipvlan2) entered disabled state [ 242.802813][T21296] ipvlan2: entered allmulticast mode [ 242.808177][T21296] bridge0: entered allmulticast mode [ 242.818697][T21296] ipvlan2: left allmulticast mode [ 242.823839][T21296] bridge0: left allmulticast mode [ 242.867426][T21305] bridge: RTM_NEWNEIGH with invalid ether address [ 242.878272][T21173] veth0_vlan: entered promiscuous mode [ 242.893820][T21173] veth1_vlan: entered promiscuous mode [ 242.936017][T21173] veth0_macvtap: entered promiscuous mode [ 242.948966][T21173] veth1_macvtap: entered promiscuous mode [ 242.962488][T21173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.975360][T21173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.996871][ T4061] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.010044][ T4061] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.040931][T21328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7476'. [ 243.051291][ T4061] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.063647][ T4061] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.119500][T21335] bridge: RTM_NEWNEIGH with invalid ether address [ 243.318480][T21359] netlink: 'syz.1.7490': attribute type 13 has an invalid length. [ 243.366514][T21359] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 243.376594][T21359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.392249][ T3414] lo speed is unknown, defaulting to 1000 [ 243.398026][ T3414] syz2: Port: 1 Link ACTIVE [ 243.690790][T21383] loop9: detected capacity change from 0 to 2048 [ 243.706314][T21383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.721865][T21381] lo speed is unknown, defaulting to 1000 [ 243.731779][T21381] lo speed is unknown, defaulting to 1000 [ 243.755217][T21383] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 243.771980][T21383] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 243.785656][T21383] EXT4-fs (loop9): This should not happen!! Data will be lost [ 243.785656][T21383] [ 243.795408][T21383] EXT4-fs (loop9): Total free blocks count 0 [ 243.801575][T21383] EXT4-fs (loop9): Free/Dirty block details [ 243.807515][T21383] EXT4-fs (loop9): free_blocks=2415919104 [ 243.814533][T21383] EXT4-fs (loop9): dirty_blocks=32 [ 243.819732][T21383] EXT4-fs (loop9): Block reservation details [ 243.825747][T21383] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 243.867886][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.107155][T21410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7519'. [ 244.195245][T21412] ipvlan2: entered promiscuous mode [ 244.212430][T21412] bridge0: port 1(ipvlan2) entered blocking state [ 244.218912][T21412] bridge0: port 1(ipvlan2) entered disabled state [ 244.251969][T21412] ipvlan2: entered allmulticast mode [ 244.257406][T21412] bridge0: entered allmulticast mode [ 244.272481][T21412] ipvlan2: left allmulticast mode [ 244.277574][T21412] bridge0: left allmulticast mode [ 245.007264][T21450] ipvlan2: entered promiscuous mode [ 245.026152][T21450] bridge0: port 3(ipvlan2) entered blocking state [ 245.032788][T21450] bridge0: port 3(ipvlan2) entered disabled state [ 245.040176][T21450] ipvlan2: entered allmulticast mode [ 245.045563][T21450] bridge0: entered allmulticast mode [ 245.053554][T21450] ipvlan2: left allmulticast mode [ 245.058610][T21450] bridge0: left allmulticast mode [ 245.071569][T21460] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7531'. [ 245.093652][T21458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7530'. [ 245.154546][T21456] lo speed is unknown, defaulting to 1000 [ 245.161209][T21456] lo speed is unknown, defaulting to 1000 [ 245.312031][T21473] netlink: 'syz.1.7538': attribute type 13 has an invalid length. [ 245.319897][T21473] netlink: 'syz.1.7538': attribute type 17 has an invalid length. [ 245.371494][T21473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.497266][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7544'. [ 245.666982][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7560'. [ 245.735368][T21514] netlink: 'syz.9.7553': attribute type 13 has an invalid length. [ 245.746172][T21512] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7563'. [ 245.800137][T21514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.558628][T21538] wireguard0: entered promiscuous mode [ 246.564157][T21538] wireguard0: entered allmulticast mode [ 246.609598][T21543] lo speed is unknown, defaulting to 1000 [ 246.629276][T21543] lo speed is unknown, defaulting to 1000 [ 246.978399][T21582] ipvlan2: entered promiscuous mode [ 247.007107][T21582] bridge0: port 1(ipvlan2) entered blocking state [ 247.013798][T21582] bridge0: port 1(ipvlan2) entered disabled state [ 247.063179][T21582] ipvlan2: entered allmulticast mode [ 247.068573][T21582] bridge0: entered allmulticast mode [ 247.098152][T21582] ipvlan2: left allmulticast mode [ 247.104407][T21582] bridge0: left allmulticast mode [ 247.166784][T21605] __nla_validate_parse: 1 callbacks suppressed [ 247.166799][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7595'. [ 247.271396][T21606] netlink: '+}[@': attribute type 1 has an invalid length. [ 247.301843][T21606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.485038][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7603'. [ 247.555265][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 247.555301][ T29] audit: type=1326 audit(503.530:12765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.629449][ T29] audit: type=1326 audit(503.530:12766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.653787][ T29] audit: type=1326 audit(503.530:12767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.676977][ T29] audit: type=1326 audit(503.530:12768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.701367][ T29] audit: type=1326 audit(503.530:12769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.725723][ T29] audit: type=1326 audit(503.530:12770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.748909][ T29] audit: type=1326 audit(503.530:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.773235][ T29] audit: type=1326 audit(503.530:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.796454][ T29] audit: type=1326 audit(503.530:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.820946][ T29] audit: type=1326 audit(503.550:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.9.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 247.864924][T21658] bond3: entered promiscuous mode [ 247.869982][T21658] bond3: entered allmulticast mode [ 247.875943][T21658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.884553][T21658] bond3 (unregistering): Released all slaves [ 248.512932][T21707] rdma_op ffff8881205e3d80 conn xmit_rdma 0000000000000000 [ 248.560919][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7640'. [ 248.574625][T21714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.589537][T21714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.811653][T21748] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7656'. [ 248.813442][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7657'. [ 249.019416][T21771] lo speed is unknown, defaulting to 1000 [ 249.034070][T21771] lo speed is unknown, defaulting to 1000 [ 249.072714][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7670'. [ 249.314570][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7677'. [ 249.393720][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 249.400186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.408046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.415896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.423770][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.431591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.439454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.447282][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.455134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.462982][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.470849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.478710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.486590][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.494439][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.502311][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.510135][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.518013][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.525865][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.533735][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.541645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.549534][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.557364][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.565203][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.573031][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.580873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.588721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.596587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.604430][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.612378][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.620208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.628077][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.635897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.643740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.651530][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.659515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.667339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.675144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.683202][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.691015][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.698903][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.706705][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.714500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.722319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.730116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.737968][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.745774][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.753707][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.761501][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.769327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.777161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.784974][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.792800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.800615][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.808501][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.816497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.824287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.832097][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.843046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.850857][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.858689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 249.866547][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 249.874342][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.068522][T21819] lo speed is unknown, defaulting to 1000 [ 250.080122][T21819] lo speed is unknown, defaulting to 1000 [ 250.204528][T21841] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7707'. [ 250.279815][T21853] loop9: detected capacity change from 0 to 512 [ 250.308568][T21853] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.374582][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.454141][T21881] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7712'. [ 250.512654][T21890] netlink: 'syz.9.7716': attribute type 3 has an invalid length. [ 250.934654][T21924] netlink: 830 bytes leftover after parsing attributes in process `syz.9.7729'. [ 250.989265][T21930] loop9: detected capacity change from 0 to 164 [ 251.015040][T21930] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 251.046359][T21930] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 251.063560][T21930] Symlink component flag not implemented [ 251.069241][T21930] Symlink component flag not implemented [ 251.088596][T21930] Symlink component flag not implemented (7) [ 251.094663][T21930] Symlink component flag not implemented (116) [ 251.110448][T21937] bond1: entered promiscuous mode [ 251.115700][T21937] bond1: entered allmulticast mode [ 251.122795][T21937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.133269][T21937] bond1 (unregistering): Released all slaves [ 251.440798][T21981] loop9: detected capacity change from 0 to 1024 [ 251.474511][T21981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.535911][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.577910][T21998] gtp0: entered promiscuous mode [ 252.207001][T22046] netlink: 'syz.4.7783': attribute type 1 has an invalid length. [ 252.246031][T22046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.288192][T22046] bond4: (slave veth7): Enslaving as an active interface with a down link [ 252.299575][T22044] lo speed is unknown, defaulting to 1000 [ 252.311545][T22046] : (slave dummy0): Releasing backup interface [ 252.322259][T22046] bond4: (slave dummy0): making interface the new active one [ 252.331151][T22046] dummy0: entered promiscuous mode [ 252.336500][T22046] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 252.345938][T22044] lo speed is unknown, defaulting to 1000 [ 252.353456][T22064] __nla_validate_parse: 4 callbacks suppressed [ 252.353471][T22064] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7789'. [ 252.531113][T22085] netlink: 'syz.2.7799': attribute type 3 has an invalid length. [ 252.875522][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 252.875539][ T29] audit: type=1326 audit(508.850:13022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 252.917577][ T29] audit: type=1326 audit(508.880:13023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 252.941761][ T29] audit: type=1326 audit(508.880:13024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 252.965281][ T29] audit: type=1326 audit(508.880:13025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 252.988988][ T29] audit: type=1326 audit(508.890:13026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 253.013291][ T29] audit: type=1326 audit(508.890:13027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 253.036387][ T29] audit: type=1326 audit(508.890:13028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 253.060601][ T29] audit: type=1326 audit(508.890:13029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 253.084727][ T29] audit: type=1326 audit(508.890:13030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 253.108054][ T29] audit: type=1326 audit(508.890:13031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f8f3ebe9 code=0x7ffc0000 [ 253.279561][T22134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7819'. [ 253.334843][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7819'. [ 253.449607][T22157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7828'. [ 254.288304][T22243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7869'. [ 254.297935][T22244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22244 comm=syz.2.7867 [ 254.331324][T22246] ip6gre3: entered allmulticast mode [ 254.505505][T22282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22282 comm=syz.9.7887 [ 254.707383][T22306] cgroup: Invalid name [ 254.751152][T22312] netlink: 'syz.2.7900': attribute type 27 has an invalid length. [ 254.774948][T22312] bond0: left promiscuous mode [ 254.779786][T22312] bond0: left allmulticast mode [ 254.795326][T22312] dummy0: left promiscuous mode [ 254.803023][T22312] ªªªªªª: left promiscuous mode [ 254.807916][T22312] ªªªªªª: left allmulticast mode [ 254.824806][T22312] veth7: left promiscuous mode [ 254.839367][T22316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22316 comm=syz.1.7902 [ 254.856983][ T4046] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.901294][T22317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.953573][T22317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.969541][ T36] lo speed is unknown, defaulting to 1000 [ 254.975374][ T36] syz0: Port: 1 Link ACTIVE [ 254.980021][ T4046] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.001598][ T4046] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.034925][ T4046] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.112980][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7912'. [ 255.140758][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7912'. [ 255.156645][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7912'. [ 255.167568][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7912'. [ 255.177609][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7912'. [ 255.192028][T22344] loop9: detected capacity change from 0 to 1024 [ 255.225581][T22344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.281632][T22344] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 15) [ 255.319438][T22344] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 255.332007][T22344] EXT4-fs (loop9): This should not happen!! Data will be lost [ 255.332007][T22344] [ 255.347070][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.361213][T22344] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 255.383106][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.407680][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.441597][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.468375][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.517738][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.538640][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.553304][T22361] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 1: comm syz.9.7914: lblock 1 mapped to illegal pblock 1 (length 3) [ 255.704995][T22393] netlink: 'syz.8.7935': attribute type 21 has an invalid length. [ 256.106644][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.165209][T22444] lo speed is unknown, defaulting to 1000 [ 256.182939][T22453] 9pnet_fd: p9_fd_create_tcp (22453): problem connecting socket to 127.0.0.1 [ 256.183645][T22444] lo speed is unknown, defaulting to 1000 [ 256.413333][T22476] hsr_slave_0 (unregistering): left promiscuous mode [ 256.608896][T22496] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 257.303386][T22565] netlink: 'syz.2.8012': attribute type 27 has an invalid length. [ 257.368346][ T3377] lo speed is unknown, defaulting to 1000 [ 257.375515][ T3377] syz0: Port: 1 Link DOWN [ 257.636171][T22611] __nla_validate_parse: 5 callbacks suppressed [ 257.636192][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8033'. [ 257.719995][T22628] netlink: 'syz.8.8040': attribute type 10 has an invalid length. [ 257.731042][T22628] team0: Port device dummy0 added [ 257.744080][T22630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8041'. [ 257.998910][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 257.998927][ T29] audit: type=1326 audit(513.971:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.064655][ T29] audit: type=1326 audit(514.011:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.087680][ T29] audit: type=1326 audit(514.011:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.110737][ T29] audit: type=1326 audit(514.011:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.134275][ T29] audit: type=1326 audit(514.011:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.157384][ T29] audit: type=1326 audit(514.011:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.180435][ T29] audit: type=1326 audit(514.011:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.203454][ T29] audit: type=1326 audit(514.011:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22650 comm="syz.2.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 258.771930][T22692] loop9: detected capacity change from 0 to 1024 [ 258.788008][T22692] EXT4-fs: Ignoring removed bh option [ 258.806067][T22696] sctp: [Deprecated]: syz.4.8067 (pid 22696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.806067][T22696] Use struct sctp_sack_info instead [ 258.974426][T22692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.998410][ T29] audit: type=1326 audit(514.971:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22691 comm="syz.9.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 259.022696][ T29] audit: type=1326 audit(514.971:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22691 comm="syz.9.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 259.064887][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.127985][T22721] netlink: 'syz.8.8076': attribute type 1 has an invalid length. [ 259.129717][T22723] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8077'. [ 259.135823][T22721] netlink: 'syz.8.8076': attribute type 4 has an invalid length. [ 259.152803][T22721] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.8076'. [ 259.174793][T22721] netlink: 'syz.8.8076': attribute type 1 has an invalid length. [ 259.182618][T22721] netlink: 'syz.8.8076': attribute type 4 has an invalid length. [ 259.190518][T22721] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.8076'. [ 259.204361][T22728] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8077'. [ 259.428726][T22765] loop9: detected capacity change from 0 to 1024 [ 259.503829][T22777] tipc: Started in network mode [ 259.508782][T22777] tipc: Node identity 000000000000005f0000000000000001, cluster identity 4711 [ 259.519046][T22777] tipc: Enabling of bearer rejected, failed to enable media [ 259.665979][T22794] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8107'. [ 259.708768][T22798] loop9: detected capacity change from 0 to 1024 [ 259.724669][T22798] EXT4-fs: Ignoring removed orlov option [ 259.730401][T22798] EXT4-fs: dax option not supported [ 260.500781][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8135'. [ 260.527181][T22861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.567358][T22861] vlan1: entered allmulticast mode [ 260.572543][T22861] bond1: entered allmulticast mode [ 260.688391][T22872] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.8137'. [ 260.697700][T22872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8137'. [ 260.929935][T22889] lo speed is unknown, defaulting to 1000 [ 260.937997][T22889] lo speed is unknown, defaulting to 1000 [ 261.122290][T22920] netlink: 'syz.8.8161': attribute type 4 has an invalid length. [ 261.143265][T22920] netlink: 'syz.8.8161': attribute type 4 has an invalid length. [ 261.361760][T22947] loop9: detected capacity change from 0 to 2048 [ 261.385563][T22947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.424034][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.584118][T22985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.592698][T22985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.604078][T22985] pimreg: entered allmulticast mode [ 261.612569][T22987] tipc: New replicast peer: 100.1.1.1 [ 261.618003][T22987] tipc: Enabled bearer , priority 10 [ 261.637761][T22990] x_tables: ip_tables: udp match: only valid for protocol 17 [ 261.703214][T22993] bridge0: entered allmulticast mode [ 261.742119][ T6475] page_pool_release_retry() stalled pool shutdown: id 123, 3329 inflight 120 sec [ 261.915708][T22998] netlink: 'syz.1.8193': attribute type 29 has an invalid length. [ 261.925389][T22998] netlink: 'syz.1.8193': attribute type 29 has an invalid length. [ 262.226228][T23008] bridge0: entered promiscuous mode [ 262.235556][T23008] bridge0: port 3(macvtap1) entered blocking state [ 262.242209][T23008] bridge0: port 3(macvtap1) entered disabled state [ 262.249363][T23008] macvtap1: entered allmulticast mode [ 262.254796][T23008] bridge0: entered allmulticast mode [ 262.277958][T23008] macvtap1: left allmulticast mode [ 262.283185][T23008] bridge0: left allmulticast mode [ 262.297315][T23008] bridge0: left promiscuous mode [ 262.568434][T23022] lo speed is unknown, defaulting to 1000 [ 262.601442][T23022] lo speed is unknown, defaulting to 1000 [ 262.893360][T23040] tipc: New replicast peer: 100.1.1.1 [ 262.898900][T23040] tipc: Enabled bearer , priority 10 [ 262.963959][T23045] __nla_validate_parse: 5 callbacks suppressed [ 262.963976][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8215'. [ 263.029524][T23057] netlink: 'syz.2.8216': attribute type 1 has an invalid length. [ 263.037336][T23057] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.8216'. [ 263.069305][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 263.069321][ T29] audit: type=1400 audit(519.041:13449): avc: denied { read write } for pid=23062 comm="syz.9.8223" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 263.100090][ T29] audit: type=1400 audit(519.041:13450): avc: denied { open } for pid=23062 comm="syz.9.8223" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 263.163259][T23065] loop9: detected capacity change from 0 to 512 [ 263.169914][T23065] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.176958][T23065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.196369][T23065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.225239][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.382171][T23075] lo speed is unknown, defaulting to 1000 [ 263.388250][T23075] lo speed is unknown, defaulting to 1000 [ 263.429431][T23081] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8228'. [ 263.481360][T23081] netlink: 'syz.9.8228': attribute type 2 has an invalid length. [ 263.533414][ T3769] dummy0: left promiscuous mode [ 263.545282][T23096] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8235'. [ 263.633819][T23108] netlink: 'syz.8.8241': attribute type 29 has an invalid length. [ 263.643224][T23108] netlink: 'syz.8.8241': attribute type 29 has an invalid length. [ 263.654475][T23108] netlink: 500 bytes leftover after parsing attributes in process `syz.8.8241'. [ 263.678124][T23111] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8242'. [ 263.718068][T23113] lo speed is unknown, defaulting to 1000 [ 263.719141][T23115] tipc: Started in network mode [ 263.728856][T23115] tipc: Node identity ac14140f, cluster identity 4711 [ 263.737814][T23115] tipc: New replicast peer: 255.255.255.255 [ 263.745095][T23115] tipc: Enabled bearer , priority 10 [ 263.751431][T23113] lo speed is unknown, defaulting to 1000 [ 263.763673][T23115] netlink: 340 bytes leftover after parsing attributes in process `syz.9.8244'. [ 263.899423][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8249'. [ 263.960876][T23132] lo speed is unknown, defaulting to 1000 [ 263.986738][T23132] lo speed is unknown, defaulting to 1000 [ 264.000586][T23139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23139 comm=syz.9.8253 [ 264.014647][ T6475] tipc: Node number set to 94 [ 264.068453][T23144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8256'. [ 264.132741][T23152] ip6gre1: entered allmulticast mode [ 264.448737][ T29] audit: type=1326 audit(520.421:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.471896][ T29] audit: type=1326 audit(520.421:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.514392][ T29] audit: type=1326 audit(520.471:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.537447][ T29] audit: type=1326 audit(520.471:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.560453][ T29] audit: type=1326 audit(520.471:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.583476][ T29] audit: type=1326 audit(520.471:13456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.606486][ T29] audit: type=1326 audit(520.471:13457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.629718][ T29] audit: type=1326 audit(520.471:13458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.2.8269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ef7debe9 code=0x7ffc0000 [ 264.733613][T23191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8277'. [ 264.743087][T23191] x_tables: ip_tables: udp match: only valid for protocol 17 [ 264.825398][T23205] netlink: 'syz.9.8282': attribute type 1 has an invalid length. [ 264.861233][ T6475] tipc: Node number set to 2886997007 [ 265.039976][T23223] IPVS: Unknown mcast interface: vcan0 [ 265.315548][T23237] netlink: 'syz.4.8295': attribute type 27 has an invalid length. [ 265.323805][T23237] 0ªî{X¹¦: left allmulticast mode [ 265.330977][T23237] wg2: left allmulticast mode [ 265.337930][T23237] geneve0: left allmulticast mode [ 265.360777][T23237] macvtap1: left promiscuous mode [ 265.365875][T23237] macvtap1: left allmulticast mode [ 265.434118][T23237] ip6gre2: left allmulticast mode [ 265.449010][T23237] wireguard0: left promiscuous mode [ 265.454354][T23237] wireguard0: left allmulticast mode [ 265.469422][T23218] Set syz1 is full, maxelem 65536 reached [ 265.537868][T23237] gtp0: left promiscuous mode [ 265.549771][T23237] ip6gre3: left allmulticast mode [ 265.620828][T23239] 8021q: adding VLAN 0 to HW filter on device  [ 265.673804][T23239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.754940][T23251] lo speed is unknown, defaulting to 1000 [ 265.763435][T23251] lo speed is unknown, defaulting to 1000 [ 265.799995][T23227] Set syz1 is full, maxelem 65536 reached [ 265.812024][T23254] bridge0: port 1(macvtap1) entered blocking state [ 265.818603][T23254] bridge0: port 1(macvtap1) entered disabled state [ 265.825847][T23254] macvtap1: entered allmulticast mode [ 265.831338][T23254] bridge0: entered allmulticast mode [ 265.837199][T23254] macvtap1: left allmulticast mode [ 265.843018][T23254] bridge0: left allmulticast mode [ 265.926226][T23260] rdma_op ffff88812eb46980 conn xmit_rdma 0000000000000000 [ 265.944557][T23264] tipc: Enabling of bearer rejected, failed to enable media [ 266.119557][T23289] netlink: 'syz.2.8318': attribute type 3 has an invalid length. [ 266.128260][T23289] netlink: 'syz.2.8318': attribute type 3 has an invalid length. [ 266.191190][T23297] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 266.221887][T23301] sch_tbf: burst 511 is lower than device veth9 mtu (1514) ! [ 266.425768][T23344] pimreg: entered allmulticast mode [ 267.534572][T23440] pimreg: entered allmulticast mode [ 267.540185][T23444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23444 comm=syz.2.8381 [ 267.765340][T23462] loop9: detected capacity change from 0 to 512 [ 267.793973][T23462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.929286][T23462] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.8392: corrupted inode contents [ 267.945767][T23475] veth1_to_bond: entered allmulticast mode [ 267.950991][T23462] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #2: comm syz.9.8392: mark_inode_dirty error [ 267.964426][T23462] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.8392: corrupted inode contents [ 267.976799][T23475] bond0: (slave bond_slave_1): Releasing backup interface [ 267.986641][T23462] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.8392: mark_inode_dirty error [ 267.998553][T23475] veth1_to_bond (unregistering): left allmulticast mode [ 268.022713][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.120638][T23494] bridge0: port 1(macvtap2) entered blocking state [ 268.128458][T23494] bridge0: port 1(macvtap2) entered disabled state [ 268.155587][T23494] macvtap2: entered allmulticast mode [ 268.161142][T23494] bridge0: entered allmulticast mode [ 268.171763][T23494] macvtap2: left allmulticast mode [ 268.177070][T23494] bridge0: left allmulticast mode [ 268.204924][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 268.204941][ T29] audit: type=1326 audit(524.181:13651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.260089][ T29] audit: type=1326 audit(524.181:13652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.283179][ T29] audit: type=1326 audit(524.181:13653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.291303][T23517] loop9: detected capacity change from 0 to 1024 [ 268.306274][ T29] audit: type=1326 audit(524.181:13654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.306324][ T29] audit: type=1326 audit(524.181:13655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.306351][ T29] audit: type=1326 audit(524.181:13656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.306374][ T29] audit: type=1326 audit(524.181:13657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.306397][ T29] audit: type=1326 audit(524.181:13658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.306500][ T29] audit: type=1326 audit(524.181:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.306528][ T29] audit: type=1326 audit(524.221:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23510 comm="syz.9.8411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 268.539921][T23517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.596721][T23517] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.8412: Allocating blocks 449-513 which overlap fs metadata [ 268.620266][T23516] EXT4-fs (loop9): pa ffff88810729c380: logic 48, phys. 177, len 21 [ 268.628363][T23516] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 268.664673][T23554] __nla_validate_parse: 16 callbacks suppressed [ 268.664709][T23554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8420'. [ 268.689788][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.728409][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8424'. [ 268.731052][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8426'. [ 268.756112][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8426'. [ 268.793046][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8424'. [ 268.903821][T23599] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23599 comm=syz.8.8433 [ 268.917718][T23599] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23599 comm=syz.8.8433 [ 269.046756][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8440'. [ 269.057423][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8440'. [ 269.068551][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8440'. [ 269.080186][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8440'. [ 269.095589][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8440'. [ 269.227506][T23657] ipvlan1: entered allmulticast mode [ 269.232908][T23657] veth0_vlan: entered allmulticast mode [ 269.239464][T23657] ipvlan1: left allmulticast mode [ 269.245619][T23657] veth0_vlan: left allmulticast mode [ 269.908211][T23736] netlink: 'syz.4.8461': attribute type 4 has an invalid length. [ 269.928203][T23737] bridge0: port 1(macvtap1) entered blocking state [ 269.934878][T23737] bridge0: port 1(macvtap1) entered disabled state [ 269.941523][T23737] macvtap1: entered allmulticast mode [ 269.946924][T23737] bridge0: entered allmulticast mode [ 269.952610][T23737] macvtap1: left allmulticast mode [ 269.957733][T23737] bridge0: left allmulticast mode [ 270.467017][T23781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23781 comm=syz.9.8478 [ 270.778024][T23791] netlink: 'syz.9.8484': attribute type 10 has an invalid length. [ 270.819725][T23791] team0: Port device dummy0 added [ 270.832519][T23794] netlink: 'syz.9.8484': attribute type 10 has an invalid length. [ 270.870672][T23794] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 270.912642][T23794] team0: Failed to send options change via netlink (err -105) [ 270.931855][T23794] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 270.952459][T23794] team0: Port device dummy0 removed [ 270.967045][T23794] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 271.212483][T23814] netem: change failed [ 271.573080][T23818] Set syz1 is full, maxelem 65536 reached [ 271.659940][T23845] netlink: 'syz.2.8507': attribute type 1 has an invalid length. [ 271.690250][T23845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.711012][T23845] vlan2: entered allmulticast mode [ 271.716207][T23845] bond5: entered allmulticast mode [ 271.896828][T23880] netlink: 'syz.4.8525': attribute type 1 has an invalid length. [ 271.915577][T23880] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.948835][T23880] vlan2: entered allmulticast mode [ 271.954272][T23880] bond5: entered allmulticast mode [ 272.038587][T23898] IPv4: Oversized IP packet from 127.202.26.0 [ 272.222111][T23931] netlink: 'syz.8.8546': attribute type 10 has an invalid length. [ 272.234642][T23931] netlink: 'syz.8.8546': attribute type 10 has an invalid length. [ 272.244664][T23931] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 272.259676][T23931] team0: Port device dummy0 removed [ 272.271747][T23931] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 273.112437][T23973] bond6: entered promiscuous mode [ 273.117534][T23973] bond6: entered allmulticast mode [ 273.138426][T23973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.147775][T23973] bond6 (unregistering): Released all slaves [ 273.511685][T24009] netlink: 'syz.4.8581': attribute type 10 has an invalid length. [ 273.606917][T24013] lo speed is unknown, defaulting to 1000 [ 273.631481][T24013] lo speed is unknown, defaulting to 1000 [ 273.653542][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 273.653558][ T29] audit: type=1326 audit(529.631:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.703104][ T29] audit: type=1326 audit(529.661:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.726250][ T29] audit: type=1326 audit(529.661:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.749308][ T29] audit: type=1326 audit(529.661:13829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.772308][ T29] audit: type=1326 audit(529.661:13830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.795386][ T29] audit: type=1326 audit(529.671:13831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.818432][ T29] audit: type=1326 audit(529.671:13832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.841576][ T29] audit: type=1326 audit(529.671:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.864641][ T29] audit: type=1326 audit(529.671:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 273.887743][ T29] audit: type=1326 audit(529.671:13835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.9.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 275.233171][T24117] IPVS: Error connecting to the multicast addr [ 275.302893][T24127] __nla_validate_parse: 16 callbacks suppressed [ 275.302910][T24127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8630'. [ 275.332796][T24133] netlink: 'syz.9.8633': attribute type 10 has an invalid length. [ 275.343546][T24133] ipvlan0: entered allmulticast mode [ 275.348891][T24133] veth0_vlan: entered allmulticast mode [ 275.357846][T24133] team0: Device ipvlan0 failed to register rx_handler [ 275.458163][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 275.469165][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 275.540490][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 275.549788][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 275.567087][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 275.578361][T24152] netlink: 'syz.9.8642': attribute type 2 has an invalid length. [ 275.586331][T24152] netlink: 'syz.9.8642': attribute type 1 has an invalid length. [ 275.594168][T24152] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.8642'. [ 275.909209][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8656'. [ 275.919897][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8656'. [ 275.932677][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8656'. [ 276.202254][T24218] netlink: 'syz.1.8680': attribute type 1 has an invalid length. [ 276.225899][T24218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.252725][T24218] bond4: (slave veth17): Enslaving as an active interface with a down link [ 276.271267][T24218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.278266][T24218] bond4: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 276.562485][T24254] geneve2: entered promiscuous mode [ 276.567716][T24254] geneve2: entered allmulticast mode [ 276.574690][ T4083] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.585680][ T4083] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.596299][ T4083] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.607762][ T4083] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.763433][T24277] netlink: 'syz.9.8698': attribute type 13 has an invalid length. [ 276.775063][T24277] netlink: 'syz.9.8698': attribute type 13 has an invalid length. [ 276.775048][ T4045] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.791688][ T4045] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.803124][ T4045] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.812997][ T4045] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.313802][T24317] lo speed is unknown, defaulting to 1000 [ 277.319916][T24317] lo speed is unknown, defaulting to 1000 [ 277.774086][T12641] hid_parser_main: 17 callbacks suppressed [ 277.774101][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.787919][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.795560][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.804534][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.812229][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.819802][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.827358][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.834922][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.843511][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.850977][T12641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.863029][T12641] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 277.952412][T24375] tipc: Started in network mode [ 277.957361][T24375] tipc: Node identity ac14140f, cluster identity 4711 [ 277.965280][T24375] tipc: New replicast peer: 255.255.255.83 [ 277.971276][T24375] tipc: Enabled bearer , priority 10 [ 278.497728][T24423] bridge0: left allmulticast mode [ 278.504769][T24423] ip6gre1: left allmulticast mode [ 278.515317][ T36] lo speed is unknown, defaulting to 1000 [ 278.521207][ T36] syz2: Port: 1 Link DOWN [ 279.090397][ T36] tipc: Node number set to 2886997007 [ 279.219680][T24532] netlink: 'syz.8.8780': attribute type 21 has an invalid length. [ 279.229319][T24532] netlink: 'syz.8.8780': attribute type 1 has an invalid length. [ 279.442809][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 279.442833][ T29] audit: type=1326 audit(535.422:14189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24567 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 279.522078][ T29] audit: type=1326 audit(535.452:14190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24567 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 279.546525][ T29] audit: type=1326 audit(535.452:14191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24567 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 279.569593][ T29] audit: type=1326 audit(535.452:14192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24570 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0146d914a5 code=0x7ffc0000 [ 279.592584][ T29] audit: type=1326 audit(535.462:14193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24567 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 279.616939][ T29] audit: type=1326 audit(535.462:14194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24567 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 279.640227][ T29] audit: type=1326 audit(535.462:14195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24567 comm="syz.4.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0146d5ebe9 code=0x7ffc0000 [ 279.906296][T24622] tipc: New replicast peer: 255.255.255.83 [ 279.912603][T24622] tipc: Enabled bearer , priority 10 [ 280.001406][T24639] netlink: 'syz.9.8804': attribute type 21 has an invalid length. [ 280.011966][T24639] netlink: 'syz.9.8804': attribute type 1 has an invalid length. [ 280.055205][T24648] netlink: zone id is out of range [ 280.075862][ T29] audit: type=1326 audit(536.052:14196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24651 comm="syz.9.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 280.100007][ T29] audit: type=1326 audit(536.052:14197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24651 comm="syz.9.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 280.128597][ T29] audit: type=1326 audit(536.052:14198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24651 comm="syz.9.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f91ecf9ebe9 code=0x7ffc0000 [ 280.362928][T24678] lo speed is unknown, defaulting to 1000 [ 280.369261][T24678] lo speed is unknown, defaulting to 1000 [ 281.304011][T24839] loop9: detected capacity change from 0 to 512 [ 281.321559][T24839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 281.354124][T24839] EXT4-fs (loop9): 1 truncate cleaned up [ 281.365184][T24839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.427288][T21173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.360171][T24977] macvtap0: refused to change device tx_queue_len [ 282.783714][T25008] ================================================================== [ 282.791832][T25008] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 282.800446][T25008] [ 282.802778][T25008] write to 0xffff8881187cea68 of 8 bytes by task 24999 on cpu 0: [ 282.810509][T25008] shmem_file_splice_read+0x470/0x600 [ 282.815898][T25008] splice_direct_to_actor+0x26c/0x680 [ 282.821288][T25008] do_splice_direct+0xda/0x150 [ 282.826058][T25008] do_sendfile+0x380/0x650 [ 282.830496][T25008] __x64_sys_sendfile64+0x105/0x150 [ 282.835714][T25008] x64_sys_call+0x2bb0/0x2ff0 [ 282.840407][T25008] do_syscall_64+0xd2/0x200 [ 282.844936][T25008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.850836][T25008] [ 282.853166][T25008] write to 0xffff8881187cea68 of 8 bytes by task 25008 on cpu 1: [ 282.860891][T25008] shmem_file_splice_read+0x470/0x600 [ 282.866280][T25008] splice_direct_to_actor+0x26c/0x680 [ 282.871665][T25008] do_splice_direct+0xda/0x150 [ 282.876436][T25008] do_sendfile+0x380/0x650 [ 282.880877][T25008] __x64_sys_sendfile64+0x105/0x150 [ 282.886097][T25008] x64_sys_call+0x2bb0/0x2ff0 [ 282.890788][T25008] do_syscall_64+0xd2/0x200 [ 282.895294][T25008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.901186][T25008] [ 282.903507][T25008] value changed: 0x0000000000001e8c -> 0x0000000000001e91 [ 282.910602][T25008] [ 282.912919][T25008] Reported by Kernel Concurrency Sanitizer on: [ 282.919064][T25008] CPU: 1 UID: 0 PID: 25008 Comm: syz.4.8878 Tainted: G W 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 282.933126][T25008] Tainted: [W]=WARN [ 282.936918][T25008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.946976][T25008] ==================================================================