last executing test programs: 3m2.789031165s ago: executing program 1 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x5400, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 3m2.7220675s ago: executing program 1 (id=430): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x3ff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) membarrier(0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) fchown(r0, 0x0, 0x0) fchmod(r0, 0x40) 3m2.674280574s ago: executing program 1 (id=432): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 3m2.637115277s ago: executing program 1 (id=433): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3m2.327944841s ago: executing program 1 (id=435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m2.214980631s ago: executing program 1 (id=439): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m2.193724473s ago: executing program 32 (id=439): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m57.521742546s ago: executing program 2 (id=542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}}], 0x1, 0x8005) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 2m57.457595451s ago: executing program 2 (id=544): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x81cc46, &(0x7f00000008c0)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYRES64=r2, @ANYRES16=r2], 0xfb, 0x2c3, &(0x7f0000000fc0)="$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") r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 2m57.285942895s ago: executing program 2 (id=548): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0x13, 0xb4b2}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2m57.21961062s ago: executing program 2 (id=549): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m56.905085306s ago: executing program 2 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e6430000000000000000000"], 0x2c}}, 0x40006) 2m56.782978995s ago: executing program 2 (id=557): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x14105, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) socket$tipc(0x1e, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2m56.782574805s ago: executing program 33 (id=557): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x14105, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) socket$tipc(0x1e, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1m57.419234983s ago: executing program 3 (id=1821): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000900)={0x0, &(0x7f0000000680)=""/160, 0x0, 0x0, 0x41}, 0x38) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getrlimit(0xe, 0x0) 1m57.152388364s ago: executing program 3 (id=1822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x4008000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r1, r2) 1m57.063061661s ago: executing program 3 (id=1823): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x40, &(0x7f0000000d40)={[{@auto_da_alloc}, {@nodioread_nolock}, {@nobarrier}, {@sysvgroups}, {@jqfmt_vfsold}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) read(r1, &(0x7f0000000800)=""/201, 0xc9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0xc9, 0x1) 1m56.122308206s ago: executing program 3 (id=1845): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 1m56.063479501s ago: executing program 4 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1m56.016451475s ago: executing program 4 (id=1847): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 1m55.911461723s ago: executing program 4 (id=1849): syz_open_dev$sg(0x0, 0x0, 0x8401) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 1m55.864915287s ago: executing program 3 (id=1850): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 1m55.839701779s ago: executing program 4 (id=1862): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 1m55.683147052s ago: executing program 3 (id=1854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 1m55.611111307s ago: executing program 34 (id=1854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 1m55.548227352s ago: executing program 4 (id=1858): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1m55.429050562s ago: executing program 4 (id=1861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) close(r0) 1m55.428730692s ago: executing program 35 (id=1861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) close(r0) 1m53.877804706s ago: executing program 0 (id=1880): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m53.767328215s ago: executing program 0 (id=1881): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x40, &(0x7f0000000d40)={[{@auto_da_alloc}, {@nodioread_nolock}, {@nobarrier}, {@sysvgroups}, {@jqfmt_vfsold}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) read(r1, &(0x7f0000000800)=""/201, 0xc9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0xc9, 0x1) 1m53.733416598s ago: executing program 0 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 1m53.640813935s ago: executing program 0 (id=1885): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 1m53.58106409s ago: executing program 0 (id=1886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x2, 0xb}, {0xa, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfd4b, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008810) 1m53.296748603s ago: executing program 0 (id=1888): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x9, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) 1m53.277622444s ago: executing program 36 (id=1888): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x9, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) 2.724676481s ago: executing program 8 (id=3884): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0x48, 0x0, 0x0) dup3(r2, r0, 0x80000) 2.044802396s ago: executing program 8 (id=3896): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.970923132s ago: executing program 6 (id=3898): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 1.914023526s ago: executing program 6 (id=3900): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 1.788698497s ago: executing program 6 (id=3902): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.766602309s ago: executing program 8 (id=3903): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.685865775s ago: executing program 6 (id=3905): r0 = msgget$private(0x0, 0x193) msgsnd(r0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.528139268s ago: executing program 5 (id=3907): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x123141) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x44, 0x0, 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, r3, 0x11, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x24, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf1, @mcast2, 0x3800}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.428200986s ago: executing program 5 (id=3908): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1.411927027s ago: executing program 5 (id=3909): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.391330158s ago: executing program 5 (id=3910): sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x40040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) 1.322346384s ago: executing program 9 (id=3912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x823a}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x31a}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0xffff]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x890}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}]}]}, 0xb0}}, 0x4000) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) 1.263899969s ago: executing program 9 (id=3913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1.24523936s ago: executing program 9 (id=3914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.182091975s ago: executing program 9 (id=3915): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 839.147613ms ago: executing program 7 (id=3917): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 838.803383ms ago: executing program 8 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 808.334956ms ago: executing program 8 (id=3919): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000001d0000000400000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 783.909848ms ago: executing program 8 (id=3920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 776.318658ms ago: executing program 7 (id=3921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 767.884619ms ago: executing program 6 (id=3922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x7, 0x305b2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xfffffffd}, &(0x7f00000001c0), &(0x7f0000000580)) socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) 744.165071ms ago: executing program 7 (id=3923): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x2007, @fd_index=0x7, 0x4, &(0x7f0000001680)=[{0x0}, {0x0}], 0x2, 0x24}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 712.187913ms ago: executing program 6 (id=3924): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1f5a685a}, 0x4c58, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r2}, 0x20) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 453.017134ms ago: executing program 5 (id=3925): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x6c8100, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10003}, 0x18) utime(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf) 405.415408ms ago: executing program 5 (id=3926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x20003) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) 211.026154ms ago: executing program 7 (id=3927): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") open(0x0, 0x145142, 0x1f0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 210.490343ms ago: executing program 9 (id=3937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x49) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80100, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)=ANY=[]) unshare(0x62040200) r0 = getpid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x9) 126.1828ms ago: executing program 7 (id=3928): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xba4}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x1, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 123.49µs ago: executing program 9 (id=3929): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 7 (id=3930): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) move_mount(r0, &(0x7f0000000100)='./bus\x00', r1, &(0x7f00000000c0)='./bus\x00', 0x14) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): udit: type=1326 audit(167.193:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 170.248147][ T29] audit: type=1326 audit(167.229:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 170.271103][ T29] audit: type=1326 audit(167.229:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 170.294682][ T29] audit: type=1326 audit(167.229:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 170.317596][ T29] audit: type=1326 audit(167.229:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.9.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 170.347372][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.366529][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.442286][T11154] ipvlan2: entered promiscuous mode [ 170.459245][T11154] bridge0: port 3(ipvlan2) entered blocking state [ 170.465918][T11154] bridge0: port 3(ipvlan2) entered disabled state [ 170.478922][ T3385] tipc: Node number set to 1626601114 [ 170.483850][T11154] ipvlan2: entered allmulticast mode [ 170.527206][T11154] ipvlan2: left allmulticast mode [ 170.561236][T11164] netlink: 'syz.5.2621': attribute type 13 has an invalid length. [ 170.576412][T11164] gretap0: refused to change device tx_queue_len [ 170.990097][T11196] wireguard0: entered promiscuous mode [ 170.998187][T11196] wireguard0: entered allmulticast mode [ 172.502849][T11231] bridge: RTM_NEWNEIGH with invalid ether address [ 172.644618][T11239] 9pnet_fd: Insufficient options for proto=fd [ 172.716169][T11241] __nla_validate_parse: 12 callbacks suppressed [ 172.716186][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2652'. [ 173.000842][T11253] loop9: detected capacity change from 0 to 1024 [ 173.057022][T11253] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.090313][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.382604][T11265] netlink: 'syz.8.2660': attribute type 1 has an invalid length. [ 173.435589][T11265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.477680][T11270] bond2: (slave geneve2): making interface the new active one [ 173.504622][T11270] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 173.586484][T11275] netlink: 'syz.8.2663': attribute type 4 has an invalid length. [ 173.618552][T11275] netlink: 'syz.8.2663': attribute type 4 has an invalid length. [ 174.386811][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2692'. [ 174.686867][T11342] net_ratelimit: 20 callbacks suppressed [ 174.686888][T11342] bond_slave_1: mtu less than device minimum [ 174.807408][T11355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11355 comm=syz.6.2695 [ 174.900159][T11361] tipc: Started in network mode [ 174.905134][T11361] tipc: Node identity ac14140f, cluster identity 4711 [ 174.913089][T11361] tipc: New replicast peer: 255.255.255.255 [ 174.919227][T11361] tipc: Enabled bearer , priority 10 [ 174.945420][T11365] loop6: detected capacity change from 0 to 512 [ 174.965670][T11365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.074655][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.092102][T11379] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.151181][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2706'. [ 175.164894][T11379] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.224895][T11379] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.254665][T11390] netlink: 'syz.5.2711': attribute type 1 has an invalid length. [ 175.277515][T11390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.294294][T11390] bond4: (slave gretap3): making interface the new active one [ 175.302846][T11390] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 175.314772][T11379] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.381858][ T3880] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.395499][ T3880] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.407471][ T3927] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.419950][ T3880] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.451240][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 175.451256][ T29] audit: type=1326 audit(172.204:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.481678][ T29] audit: type=1326 audit(172.232:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.504864][ T29] audit: type=1326 audit(172.260:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.532967][ T29] audit: type=1326 audit(172.278:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.558199][ T29] audit: type=1326 audit(172.306:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.583926][ T29] audit: type=1326 audit(172.324:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.608168][ T29] audit: type=1326 audit(172.334:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.631173][ T29] audit: type=1326 audit(172.343:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.655551][ T29] audit: type=1326 audit(172.352:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.678481][ T29] audit: type=1326 audit(172.361:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.8.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 175.734807][T11416] wg2: entered promiscuous mode [ 175.739832][T11416] wg2: entered allmulticast mode [ 176.022436][ T3399] tipc: Node number set to 2886997007 [ 176.336558][T11433] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2728'. [ 176.434234][T11436] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.441351][ T3399] IPVS: starting estimator thread 0... [ 176.449576][T11446] loop9: detected capacity change from 0 to 512 [ 176.535033][T11446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.542515][T11444] IPVS: using max 2976 ests per chain, 148800 per kthread [ 176.683686][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.744867][T11462] siw: device registration error -23 [ 176.859706][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2747'. [ 176.978512][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.985774][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.177056][T11517] loop6: detected capacity change from 0 to 1024 [ 177.206666][T11517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.300413][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2766'. [ 177.358316][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.378615][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2768'. [ 177.420694][T11535] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11535 comm=syz.8.2768 [ 178.018085][T11588] batadv_slave_0: entered promiscuous mode [ 178.024900][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2791'. [ 178.034569][T11590] loop6: detected capacity change from 0 to 512 [ 178.035208][T11588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.054634][T11588] batadv_slave_0 (unregistering): left promiscuous mode [ 178.062386][T11588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.073539][T11590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.112072][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.216156][T11599] loop6: detected capacity change from 0 to 512 [ 178.234999][T11599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.250199][T11599] EXT4-fs (loop6): shut down requested (0) [ 178.344691][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.418403][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 178.430303][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 178.439957][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 178.450894][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 178.815939][T11620] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 178.852510][T11624] loop6: detected capacity change from 0 to 128 [ 178.863663][T11624] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 178.870839][T11624] FAT-fs (loop6): Filesystem has been set read-only [ 178.878406][T11624] FAT-fs (loop6): error, clusters badly computed (3 != 2) [ 178.885702][T11624] FAT-fs (loop6): error, clusters badly computed (4 != 3) [ 178.893055][T11624] FAT-fs (loop6): error, clusters badly computed (5 != 4) [ 178.900344][T11624] FAT-fs (loop6): error, clusters badly computed (6 != 5) [ 178.987163][T11634] syzkaller0: entered allmulticast mode [ 178.994084][T11634] syzkaller0: entered promiscuous mode [ 179.004055][T11634] syzkaller0 (unregistering): left allmulticast mode [ 179.010937][T11634] syzkaller0 (unregistering): left promiscuous mode [ 179.415094][T11672] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2824'. [ 179.444941][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2824'. [ 179.484696][T11674] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2825'. [ 180.026825][T11698] syz_tun: entered allmulticast mode [ 180.054274][T11697] syz_tun: left allmulticast mode [ 180.125994][T11702] netlink: 'syz.7.2836': attribute type 10 has an invalid length. [ 180.147742][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.168936][T11702] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.176035][T11707] siw: device registration error -23 [ 180.302214][T11712] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 180.539584][T11726] loop9: detected capacity change from 0 to 512 [ 180.546140][T11726] EXT4-fs: Ignoring removed i_version option [ 180.562151][T11726] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 180.607037][T11726] EXT4-fs (loop9): 1 truncate cleaned up [ 180.616975][T11726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.662152][T11726] bond_slave_1: entered promiscuous mode [ 180.668201][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2846'. [ 180.688780][T11726] bond0: (slave bond_slave_1): Releasing backup interface [ 180.702378][T11726] bond_slave_1 (unregistering): left promiscuous mode [ 180.766190][T11736] bridge0: entered promiscuous mode [ 180.788472][T11736] bridge0: port 1(macsec1) entered blocking state [ 180.795795][T11736] bridge0: port 1(macsec1) entered disabled state [ 180.805212][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.813498][T11736] macsec1: entered allmulticast mode [ 180.819475][T11736] bridge0: entered allmulticast mode [ 180.834174][T11736] macsec1: left allmulticast mode [ 180.839247][T11736] bridge0: left allmulticast mode [ 180.848257][T11736] bridge0: left promiscuous mode [ 180.859880][T11744] netlink: 'syz.9.2851': attribute type 10 has an invalid length. [ 180.879737][T11744] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.888388][ T3888] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 180.899877][T11744] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.913536][T11744] siw: device registration error -23 [ 181.371386][T11778] netlink: 'syz.6.2867': attribute type 10 has an invalid length. [ 181.384141][T11778] team0: left allmulticast mode [ 181.392638][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.400302][T11778] team0: entered allmulticast mode [ 181.405856][T11778] bond0: (slave team0): Enslaving as an active interface with an up link [ 181.417387][T11778] siw: device registration error -23 [ 181.777640][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2872'. [ 181.805457][T11816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.825713][T11816] vlan1: entered allmulticast mode [ 181.830959][T11816] bond1: entered allmulticast mode [ 181.972785][T11835] loop6: detected capacity change from 0 to 2048 [ 182.003710][T11835] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2885: bad orphan inode 61 [ 182.018457][T11845] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 182.018934][T11835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.119060][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.335372][T11888] IPv6: Can't replace route, no match found [ 182.391998][T11895] loop9: detected capacity change from 0 to 128 [ 182.409833][T11895] bio_check_eod: 57463 callbacks suppressed [ 182.409849][T11895] syz.9.2882: attempt to access beyond end of device [ 182.409849][T11895] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 182.430044][T11895] syz.9.2882: attempt to access beyond end of device [ 182.430044][T11895] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 182.444569][T11895] syz.9.2882: attempt to access beyond end of device [ 182.444569][T11895] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 182.459179][T11895] syz.9.2882: attempt to access beyond end of device [ 182.459179][T11895] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 182.473125][T11895] syz.9.2882: attempt to access beyond end of device [ 182.473125][T11895] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 182.495156][T11895] syz.9.2882: attempt to access beyond end of device [ 182.495156][T11895] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 182.514733][T11895] syz.9.2882: attempt to access beyond end of device [ 182.514733][T11895] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 182.550796][T11895] syz.9.2882: attempt to access beyond end of device [ 182.550796][T11895] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 182.579877][T11895] syz.9.2882: attempt to access beyond end of device [ 182.579877][T11895] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 182.607424][T11895] syz.9.2882: attempt to access beyond end of device [ 182.607424][T11895] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 182.674858][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2884'. [ 182.933497][T11903] netlink: 'syz.5.2886': attribute type 10 has an invalid length. [ 182.934901][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 182.934973][ T29] audit: type=1326 audit(179.108:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 182.957923][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.982233][T11903] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.994945][T11909] siw: device registration error -23 [ 183.010420][ T29] audit: type=1326 audit(179.145:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.033386][ T29] audit: type=1326 audit(179.145:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.056376][ T29] audit: type=1326 audit(179.145:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.079314][ T29] audit: type=1326 audit(179.145:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.102250][ T29] audit: type=1326 audit(179.145:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.125637][ T29] audit: type=1326 audit(179.145:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.148675][ T29] audit: type=1326 audit(179.155:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.171739][ T29] audit: type=1326 audit(179.155:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.194754][ T29] audit: type=1326 audit(179.155:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.9.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 183.266406][T11913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.269489][T11917] loop9: detected capacity change from 0 to 2048 [ 183.284779][T11913] vlan1: entered allmulticast mode [ 183.289947][T11913] bond5: entered allmulticast mode [ 183.305687][T11917] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.2891: bad orphan inode 61 [ 183.316478][T11917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.429540][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.912178][T11937] __nla_validate_parse: 3 callbacks suppressed [ 183.912193][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 184.020129][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2908'. [ 184.045003][T11969] IPv6: Can't replace route, no match found [ 184.049966][T11965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.060499][T11968] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2920'. [ 184.101465][T11965] vlan1: entered allmulticast mode [ 184.106648][T11965] bond2: entered allmulticast mode [ 184.241906][T11991] loop6: detected capacity change from 0 to 128 [ 184.402525][T12011] syzkaller0: entered promiscuous mode [ 184.408857][T12011] syzkaller0: entered allmulticast mode [ 184.646015][T12023] netlink: 'syz.5.2933': attribute type 4 has an invalid length. [ 184.950265][T12032] netlink: 'syz.5.2939': attribute type 2 has an invalid length. [ 184.958089][T12032] netlink: 'syz.5.2939': attribute type 1 has an invalid length. [ 184.966499][T12032] netlink: 'syz.5.2939': attribute type 2 has an invalid length. [ 185.158689][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2942'. [ 185.175982][T12040] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2943'. [ 185.192905][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2942'. [ 185.363967][T12052] loop9: detected capacity change from 0 to 512 [ 185.382245][T12052] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.400799][T12052] EXT4-fs (loop9): orphan cleanup on readonly fs [ 185.419979][T12052] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.2948: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 185.466213][T12052] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.2948: Bad quota inode: 3, type: 0 [ 185.518821][T12052] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 185.533661][T12052] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 185.598782][T12052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.667745][T12052] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 185.679136][T12052] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 185.707261][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.858129][T12092] loop6: detected capacity change from 0 to 512 [ 185.871187][T12093] dvmrp1: entered allmulticast mode [ 185.879426][T12092] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.894030][T12092] EXT4-fs (loop6): failed to initialize system zone (-117) [ 185.901515][T12092] EXT4-fs (loop6): mount failed [ 185.958367][T12105] loop9: detected capacity change from 0 to 128 [ 186.047789][T12112] loop6: detected capacity change from 0 to 512 [ 186.055494][T12112] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 186.133263][T12112] EXT4-fs (loop6): 1 truncate cleaned up [ 186.139613][T12112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.169061][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.763684][T12131] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 186.923716][T12134] lo: entered allmulticast mode [ 186.928932][T12134] tunl0: entered allmulticast mode [ 186.934795][T12134] gre0: entered allmulticast mode [ 186.941523][T12134] gretap0: entered allmulticast mode [ 186.948291][T12134] erspan0: entered allmulticast mode [ 186.955342][T12134] ip_vti0: entered allmulticast mode [ 186.967204][T12134] ip6_vti0: entered allmulticast mode [ 186.973367][T12134] sit0: entered allmulticast mode [ 186.982159][T12134] ip6tnl0: entered allmulticast mode [ 186.988630][T12134] ip6gre0: entered allmulticast mode [ 186.994833][T12134] syz_tun: entered allmulticast mode [ 187.002250][T12134] ip6gretap0: entered allmulticast mode [ 187.009046][T12134] bridge0: entered allmulticast mode [ 187.018040][T12134] vcan0: entered allmulticast mode [ 187.024492][T12134] bond0: entered allmulticast mode [ 187.029698][T12134] team0: entered allmulticast mode [ 187.036800][T12134] nlmon0: entered allmulticast mode [ 187.043525][T12134] caif0: entered allmulticast mode [ 187.048723][T12134] batadv0: entered allmulticast mode [ 187.054211][T12134] vxcan0: entered allmulticast mode [ 187.059635][T12134] vxcan1: entered allmulticast mode [ 187.063521][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2980'. [ 187.065330][T12134] veth0: entered allmulticast mode [ 187.078913][T12134] veth1: entered allmulticast mode [ 187.084268][T12134] wg0: entered allmulticast mode [ 187.089320][T12134] wg2: entered allmulticast mode [ 187.094403][T12134] veth0_to_bridge: entered allmulticast mode [ 187.100521][T12134] veth1_to_bridge: entered allmulticast mode [ 187.106580][T12134] bridge_slave_1: entered allmulticast mode [ 187.112547][T12134] veth0_to_bond: entered allmulticast mode [ 187.118513][T12134] bond_slave_0: entered allmulticast mode [ 187.119049][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2980'. [ 187.124308][T12134] veth1_to_bond: entered allmulticast mode [ 187.139094][T12134] bond_slave_1: entered allmulticast mode [ 187.144904][T12134] veth1_to_team: entered allmulticast mode [ 187.150939][T12134] team_slave_1: entered allmulticast mode [ 187.156764][T12134] veth0_to_batadv: entered allmulticast mode [ 187.162857][T12134] batadv_slave_0: entered allmulticast mode [ 187.168859][T12134] veth1_to_batadv: entered allmulticast mode [ 187.174925][T12134] batadv_slave_1: entered allmulticast mode [ 187.180968][T12134] xfrm0: entered allmulticast mode [ 187.186151][T12134] veth0_to_hsr: entered allmulticast mode [ 187.192035][T12134] hsr_slave_0: entered allmulticast mode [ 187.197869][T12134] veth1_to_hsr: entered allmulticast mode [ 187.203688][T12134] hsr_slave_1: entered allmulticast mode [ 187.209402][T12134] hsr0: entered allmulticast mode [ 187.214514][T12134] veth1_virt_wifi: entered allmulticast mode [ 187.220605][T12134] veth0_virt_wifi: entered allmulticast mode [ 187.226681][T12134] veth1_vlan: entered allmulticast mode [ 187.232457][T12134] veth0_vlan: entered allmulticast mode [ 187.238395][T12134] vlan0: entered allmulticast mode [ 187.243626][T12134] macvlan0: entered allmulticast mode [ 187.249160][T12134] macvlan1: entered allmulticast mode [ 187.254612][T12134] ipvlan0: entered allmulticast mode [ 187.260041][T12134] ipvlan1: entered allmulticast mode [ 187.265415][T12134] veth1_macvtap: entered allmulticast mode [ 187.271282][T12134] veth0_macvtap: entered allmulticast mode [ 187.277259][T12134] macvtap0: entered allmulticast mode [ 187.282766][T12134] macsec0: entered allmulticast mode [ 187.288126][T12134] geneve0: entered allmulticast mode [ 187.293487][T12134] geneve1: entered allmulticast mode [ 187.299003][T12134] gretap1: entered allmulticast mode [ 187.304343][T12134] bridge1: entered allmulticast mode [ 187.309748][T12134] bridge2: entered allmulticast mode [ 187.321929][T12134] bridge3: entered allmulticast mode [ 187.328160][T12134] ip6tnl1: entered allmulticast mode [ 187.335636][T12134] bridge4: entered allmulticast mode [ 187.341650][T12134] veth2: entered allmulticast mode [ 187.346848][T12134] veth3: left promiscuous mode [ 187.351632][T12134] veth3: entered allmulticast mode [ 187.356893][T12134] gretap2: entered allmulticast mode [ 187.362773][T12134] bond2: entered allmulticast mode [ 187.372104][T12134] batadv1: entered allmulticast mode [ 187.377711][T12134] bridge5: entered allmulticast mode [ 187.383744][T12134] GPL: entered allmulticast mode [ 187.388916][T12134] : entered allmulticast mode [ 187.393900][T12134] syztnl1: entered allmulticast mode [ 187.399663][T12134] bond3: left promiscuous mode [ 187.404443][T12134] bond3: entered allmulticast mode [ 187.410271][T12134] wireguard0: entered allmulticast mode [ 187.416285][T12134] bond4: entered allmulticast mode [ 187.421528][T12134] gretap3: entered allmulticast mode [ 187.428227][T12134] syztnl2: entered allmulticast mode [ 187.433805][T12134] gtp0: entered allmulticast mode [ 187.440077][T12134] netdevsim netdevsim5 eth0: entered allmulticast mode [ 187.447229][T12134] netdevsim netdevsim5 eth1: entered allmulticast mode [ 187.454382][T12134] netdevsim netdevsim5 eth2: entered allmulticast mode [ 187.461313][T12134] netdevsim netdevsim5 eth3: entered allmulticast mode [ 187.481830][T12149] syz_tun: left promiscuous mode [ 187.487130][T12149] bridge0: port 2(syz_tun) entered disabled state [ 187.518186][T12149] vlan2: left promiscuous mode [ 187.523044][T12149] bridge_slave_0: left promiscuous mode [ 187.529527][T12149] bridge0: port 1(vlan2) entered disabled state [ 187.572829][T12153] tipc: Started in network mode [ 187.577754][T12153] tipc: Node identity ac14140f, cluster identity 4711 [ 187.585435][T12153] tipc: New replicast peer: 255.255.255.255 [ 187.591496][T12153] tipc: Enabled bearer , priority 10 [ 187.802480][T12177] netlink: 'syz.6.2997': attribute type 3 has an invalid length. [ 187.914914][T12196] loop6: detected capacity change from 0 to 1024 [ 187.922410][T12196] EXT4-fs: Ignoring removed oldalloc option [ 187.929207][T12196] EXT4-fs: Ignoring removed bh option [ 187.952693][T12198] veth0: entered promiscuous mode [ 187.958150][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3007'. [ 187.963001][T12196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.047679][T12208] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3006'. [ 188.197608][T12213] pim6reg: entered allmulticast mode [ 188.204859][T12213] pim6reg: left allmulticast mode [ 188.794714][ T36] tipc: Node number set to 2886997007 [ 188.834466][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.034199][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 189.034215][ T29] audit: type=1326 audit(440.745:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.9.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 189.065045][ T29] audit: type=1326 audit(440.745:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.9.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 189.087990][ T29] audit: type=1326 audit(440.745:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.9.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 189.110921][ T29] audit: type=1326 audit(440.745:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.9.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 189.175729][T12262] ref_ctr increment failed for inode: 0xa68 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881266405c0 [ 189.188960][T12262] uprobe: syz.6.3031:12262 failed to unregister, leaking uprobe [ 189.198843][T12264] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.233041][T12267] geneve2: entered promiscuous mode [ 189.238344][T12267] geneve2: entered allmulticast mode [ 189.284039][T12264] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.363565][T12264] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.390761][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3037'. [ 189.405584][ T29] audit: type=1326 audit(441.087:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.6.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 189.430163][ T29] audit: type=1326 audit(441.087:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.6.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 189.456408][ T29] audit: type=1326 audit(441.133:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.6.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 189.479368][ T29] audit: type=1326 audit(441.133:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.6.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 189.503612][ T29] audit: type=1326 audit(441.133:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.6.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 189.526819][ T29] audit: type=1326 audit(441.161:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.6.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 189.562532][T12264] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.580985][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3053'. [ 189.603348][T12289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12289 comm=syz.5.3053 [ 189.628389][T12289] netlink: 'syz.5.3053': attribute type 1 has an invalid length. [ 189.680148][ T3876] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.705143][ T3876] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.714050][ T3876] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.757938][ T3876] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.813556][T12302] dvmrp1: entered allmulticast mode [ 190.145343][T12327] loop9: detected capacity change from 0 to 512 [ 190.158189][T12327] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 190.184245][T12327] EXT4-fs (loop9): 1 truncate cleaned up [ 190.196043][T12327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.245536][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.349758][T12343] bridge0: entered allmulticast mode [ 190.481242][T12365] loop6: detected capacity change from 0 to 512 [ 190.490166][T12365] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 190.501772][T12365] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 190.511948][T12365] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3070: Corrupt directory, running e2fsck is recommended [ 190.525847][T12365] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 190.535188][T12365] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.3070: corrupted in-inode xattr: invalid ea_ino [ 190.552318][T12365] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3070: couldn't read orphan inode 15 (err -117) [ 190.566308][T12365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.586888][T12365] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 190.598469][T12365] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 190.608668][T12365] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3070: Corrupt directory, running e2fsck is recommended [ 190.623360][T12365] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.3070: path /515/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 190.643800][T12365] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 64: comm syz.6.3070: path /515/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 190.726373][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.787015][T12382] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3078'. [ 190.961979][T12402] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3089'. [ 191.028789][T12413] tipc: Enabling of bearer rejected, failed to enable media [ 191.063311][T12415] netlink: zone id is out of range [ 191.070459][T12415] netlink: zone id is out of range [ 191.075653][T12415] netlink: zone id is out of range [ 191.080819][T12415] netlink: zone id is out of range [ 191.085938][T12415] netlink: zone id is out of range [ 191.091125][T12415] netlink: zone id is out of range [ 191.096236][T12415] netlink: zone id is out of range [ 191.102908][T12415] netlink: zone id is out of range [ 191.108051][T12415] netlink: zone id is out of range [ 191.113202][T12415] netlink: zone id is out of range [ 191.165381][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3101'. [ 191.238212][T12434] tipc: New replicast peer: 255.255.255.255 [ 191.244458][T12434] tipc: Enabled bearer , priority 10 [ 192.052793][T12474] 9pnet_fd: Insufficient options for proto=fd [ 192.336964][ T5640] tipc: Node number set to 3128863797 [ 192.417904][T12497] loop6: detected capacity change from 0 to 512 [ 192.442243][T12497] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.454102][T12497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.464626][T12497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.473921][T12497] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.499081][T12497] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3129: Allocating blocks 41-42 which overlap fs metadata [ 192.532270][T12497] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3129: Allocating blocks 41-42 which overlap fs metadata [ 192.557208][T12506] loop9: detected capacity change from 0 to 512 [ 192.565256][T12497] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3129: Failed to acquire dquot type 1 [ 192.585651][T12506] journal_path: Non-blockdev passed as './bus' [ 192.591885][T12506] EXT4-fs: error: could not find journal device path [ 192.605866][T12497] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 192.638958][T12497] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.3129: corrupted inode contents [ 192.673325][T12497] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #12: comm syz.6.3129: mark_inode_dirty error [ 192.693692][T12497] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.3129: corrupted inode contents [ 192.725084][T12497] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.3129: mark_inode_dirty error [ 192.746949][T12497] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.3129: corrupted inode contents [ 192.780260][T12497] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 192.790040][T12497] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.3129: corrupted inode contents [ 192.813743][T12497] EXT4-fs error (device loop6): ext4_truncate:4666: inode #12: comm syz.6.3129: mark_inode_dirty error [ 192.827021][T12497] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 192.837628][T12497] EXT4-fs (loop6): 1 truncate cleaned up [ 192.843792][T12497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.885311][T12497] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 192.905232][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.357954][T12523] wireguard0: entered promiscuous mode [ 193.363781][T12523] wireguard0: entered allmulticast mode [ 193.642030][T12535] loop9: detected capacity change from 0 to 128 [ 193.668838][T12535] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 193.676712][T12535] FAT-fs (loop9): Filesystem has been set read-only [ 193.718446][T12535] bio_check_eod: 16 callbacks suppressed [ 193.718463][T12535] syz.9.3143: attempt to access beyond end of device [ 193.718463][T12535] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 193.760823][T12535] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 193.768715][T12535] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 193.779924][T12535] syz.9.3143: attempt to access beyond end of device [ 193.779924][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.794802][T12535] syz.9.3143: attempt to access beyond end of device [ 193.794802][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.810434][T12535] syz.9.3143: attempt to access beyond end of device [ 193.810434][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.826074][T12535] syz.9.3143: attempt to access beyond end of device [ 193.826074][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.840200][T12535] syz.9.3143: attempt to access beyond end of device [ 193.840200][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.854691][T12535] syz.9.3143: attempt to access beyond end of device [ 193.854691][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.872703][T12535] syz.9.3143: attempt to access beyond end of device [ 193.872703][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.892047][T12535] syz.9.3143: attempt to access beyond end of device [ 193.892047][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.908910][T12535] syz.9.3143: attempt to access beyond end of device [ 193.908910][T12535] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 194.482030][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 194.482043][ T29] audit: type=1326 audit(445.778:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.530685][ T29] audit: type=1326 audit(445.778:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.553686][ T29] audit: type=1326 audit(445.778:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.576500][ T29] audit: type=1326 audit(445.778:8472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.598974][ T29] audit: type=1326 audit(445.778:8473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.621460][ T29] audit: type=1326 audit(445.778:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.643926][ T29] audit: type=1326 audit(445.778:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.666263][ T29] audit: type=1326 audit(445.778:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.688576][ T29] audit: type=1326 audit(445.778:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.710929][ T29] audit: type=1326 audit(445.778:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 194.746096][T12555] netlink: 'syz.7.3150': attribute type 1 has an invalid length. [ 194.792437][T12555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.838364][T12559] bond2: (slave geneve1): making interface the new active one [ 194.859348][T12559] bond2: (slave geneve1): Enslaving as an active interface with an up link [ 195.071568][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3158'. [ 195.468986][T12587] siw: device registration error -23 [ 195.520967][T12586] loop6: detected capacity change from 0 to 512 [ 195.538698][T12586] journal_path: Non-blockdev passed as './bus' [ 195.544963][T12586] EXT4-fs: error: could not find journal device path [ 195.686533][T12601] wg2: entered promiscuous mode [ 195.691527][T12601] wg2: entered allmulticast mode [ 195.864600][T12618] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3175'. [ 195.873759][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3175'. [ 195.882846][T12618] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3175'. [ 195.924591][T12618] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3175'. [ 197.491239][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3193'. [ 197.500516][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3194'. [ 197.522722][T12659] vlan0: entered allmulticast mode [ 197.528394][T12659] bridge0: port 3(vlan0) entered blocking state [ 197.534722][T12659] bridge0: port 3(vlan0) entered disabled state [ 197.547375][T12659] vlan0: entered promiscuous mode [ 197.665095][T12676] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.730635][T12682] smc: net device bond0 applied user defined pnetid SYZ2 [ 197.744812][T12676] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.757753][T12682] smc: net device bond0 erased user defined pnetid SYZ2 [ 197.767872][T12687] FAT-fs (loop15): unable to read boot sector [ 197.783087][T12676] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.838917][T12676] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.864990][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3218'. [ 197.877903][T12696] wireguard0: entered promiscuous mode [ 197.883807][T12696] wireguard0: entered allmulticast mode [ 197.916785][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.931766][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.958479][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.982003][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.662235][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 198.676536][T12719] vlan1: entered allmulticast mode [ 198.682952][T12719] bridge0: port 1(vlan1) entered blocking state [ 198.689279][T12719] bridge0: port 1(vlan1) entered disabled state [ 198.696744][T12719] vlan1: entered promiscuous mode [ 198.701808][T12719] bridge_slave_0: entered promiscuous mode [ 198.717030][T12721] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.758248][T12721] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.833631][T12721] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.877498][T12721] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.969361][ T3904] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.980590][ T3904] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.992857][ T3904] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.012228][ T3851] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.044082][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3220'. [ 200.608634][T12770] __nla_validate_parse: 6 callbacks suppressed [ 200.608653][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3235'. [ 200.630677][T12773] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.635286][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3245'. [ 200.655378][T12774] vlan1: entered allmulticast mode [ 200.660852][T12774] bridge0: port 3(vlan1) entered blocking state [ 200.667375][T12774] bridge0: port 3(vlan1) entered disabled state [ 200.674538][T12774] vlan1: entered promiscuous mode [ 200.696105][T12773] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.772424][T12773] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.837153][T12773] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.907891][ T3904] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.919761][ T3904] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.931824][ T3876] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.944741][ T3876] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.543208][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3252'. [ 201.901498][T12810] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.963242][T12810] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.017807][T12810] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.082412][T12810] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.530799][ T3855] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.542240][ T3855] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.552710][ T3855] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.564222][ T3855] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.646354][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3251'. [ 202.661388][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3266'. [ 202.676123][T12824] vlan0: entered allmulticast mode [ 202.683718][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 202.683735][ T29] audit: type=1326 audit(453.342:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.698051][T12824] bridge0: port 3(vlan0) entered blocking state [ 202.719306][T12824] bridge0: port 3(vlan0) entered disabled state [ 202.734941][T12831] loop6: detected capacity change from 0 to 128 [ 202.754168][T12831] vfat: Unknown parameter '' [ 202.770012][ T29] audit: type=1326 audit(453.379:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.791172][T12824] vlan0: entered promiscuous mode [ 202.793000][ T29] audit: type=1326 audit(453.379:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.820975][ T29] audit: type=1326 audit(453.379:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.843911][ T29] audit: type=1326 audit(453.379:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.866867][ T29] audit: type=1326 audit(453.379:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.889812][ T29] audit: type=1326 audit(453.379:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.912730][ T29] audit: type=1326 audit(453.379:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.935703][ T29] audit: type=1326 audit(453.388:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 202.958499][ T29] audit: type=1326 audit(453.388:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.6.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 203.137862][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3265'. [ 203.163413][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3265'. [ 204.528194][T12877] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3275'. [ 204.543910][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 204.671746][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3276'. [ 206.039386][T12913] __nla_validate_parse: 8 callbacks suppressed [ 206.039400][T12913] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3290'. [ 206.057258][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3291'. [ 206.057726][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3290'. [ 206.069190][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3291'. [ 206.084521][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3291'. [ 206.095549][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3291'. [ 206.138891][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3302'. [ 206.262153][T12924] netlink: 'syz.5.3304': attribute type 10 has an invalid length. [ 206.271764][T12924] team0: Port device dummy0 added [ 206.279899][T12924] netlink: 'syz.5.3304': attribute type 10 has an invalid length. [ 206.290248][T12924] team0: Port device dummy0 removed [ 206.297762][T12924] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 206.329725][T12929] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 206.339818][T12929] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 207.033955][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3299'. [ 208.496247][T12999] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.580001][T12999] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.610775][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 208.610790][ T29] audit: type=1326 audit(458.827:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.7.3335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febfe16ebe9 code=0x0 [ 208.656322][T12999] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.666949][T13007] netlink: 'syz.7.3335': attribute type 10 has an invalid length. [ 208.722726][T12999] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.773501][ T3866] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.784613][ T3866] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.795819][ T3866] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.807946][ T3866] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.857375][T13010] vlan1: left promiscuous mode [ 208.862235][T13010] bridge_slave_0: left promiscuous mode [ 208.868005][T13010] bridge0: port 1(vlan1) entered disabled state [ 208.879349][T13013] netlink: 'syz.9.3338': attribute type 83 has an invalid length. [ 209.219527][ T29] audit: type=1326 audit(459.381:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.242576][ T29] audit: type=1326 audit(459.381:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.302132][T13025] lo: entered allmulticast mode [ 209.333075][T13025] tunl0: entered allmulticast mode [ 209.354584][T13025] gre0: entered allmulticast mode [ 209.398175][T13025] erspan0: entered allmulticast mode [ 209.413811][T13025] ip_vti0: entered allmulticast mode [ 209.416967][ T29] audit: type=1326 audit(459.428:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.427566][T13025] ip6_vti0: entered allmulticast mode [ 209.442057][ T29] audit: type=1326 audit(459.428:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.442116][ T29] audit: type=1326 audit(459.437:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.442141][ T29] audit: type=1326 audit(459.437:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.450820][T13025] sit0: entered allmulticast mode [ 209.470386][ T29] audit: type=1326 audit(459.437:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.470418][ T29] audit: type=1326 audit(459.437:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.470513][ T29] audit: type=1326 audit(459.437:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.5.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6fcdebe9 code=0x7ffc0000 [ 209.592567][T13025] ip6tnl0: entered allmulticast mode [ 209.603249][T13025] ip6gre0: entered allmulticast mode [ 209.620647][T13025] syz_tun: entered allmulticast mode [ 209.627385][T13025] ip6gretap0: entered allmulticast mode [ 209.635105][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.642260][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.650324][T13025] bridge0: entered allmulticast mode [ 209.657041][T13025] vcan0: entered allmulticast mode [ 209.663125][T13025] bond0: entered allmulticast mode [ 209.668234][T13025] bond_slave_0: entered allmulticast mode [ 209.674662][T13025] dummy0: entered allmulticast mode [ 209.679857][T13025] team0: entered allmulticast mode [ 209.685068][T13025] team_slave_0: entered allmulticast mode [ 209.690800][T13025] team_slave_1: entered allmulticast mode [ 209.699441][T13025] nlmon0: entered allmulticast mode [ 209.705468][T13025] caif0: entered allmulticast mode [ 209.710846][T13025] batadv0: entered allmulticast mode [ 209.717686][T13025] vxcan0: entered allmulticast mode [ 209.723426][T13025] vxcan1: entered allmulticast mode [ 209.729248][T13025] veth0: entered allmulticast mode [ 209.735409][T13025] veth1: entered allmulticast mode [ 209.741864][T13025] wg0: entered allmulticast mode [ 209.747675][T13025] wg2: left promiscuous mode [ 209.753080][T13025] veth0_to_bridge: entered allmulticast mode [ 209.762066][T13025] veth1_to_bridge: entered allmulticast mode [ 209.770668][T13025] veth0_to_bond: entered allmulticast mode [ 209.778156][T13025] veth0_to_team: entered allmulticast mode [ 209.794484][T13025] veth1_to_team: entered allmulticast mode [ 209.802487][T13025] veth1_to_batadv: entered allmulticast mode [ 209.809631][T13025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.817127][T13025] batadv_slave_1: entered allmulticast mode [ 209.824503][T13025] xfrm0: entered allmulticast mode [ 209.830478][T13025] veth0_to_hsr: entered allmulticast mode [ 209.838896][T13025] hsr_slave_0: entered allmulticast mode [ 209.845600][T13025] veth1_to_hsr: entered allmulticast mode [ 209.852275][T13025] hsr_slave_1: entered allmulticast mode [ 209.859153][T13025] hsr0: entered allmulticast mode [ 209.865007][T13025] veth1_virt_wifi: entered allmulticast mode [ 209.871904][T13025] veth0_virt_wifi: entered allmulticast mode [ 209.878864][T13025] veth1_macvtap: entered allmulticast mode [ 209.885551][T13025] veth0_macvtap: entered allmulticast mode [ 209.892388][T13025] macvtap0: entered allmulticast mode [ 209.898817][T13025] macsec0: entered allmulticast mode [ 209.904987][T13025] geneve0: entered allmulticast mode [ 209.911267][T13025] geneve1: entered allmulticast mode [ 209.917357][T13025] syztnl1: entered allmulticast mode [ 209.922756][T13025] veth2: entered allmulticast mode [ 209.927973][T13025] veth3: entered allmulticast mode [ 209.933820][T13025] gre1: entered allmulticast mode [ 209.939200][T13025] bridge1: entered allmulticast mode [ 209.945164][T13025] netdevsim netdevsim9 eth0: entered allmulticast mode [ 209.952083][T13025] netdevsim netdevsim9 eth1: entered allmulticast mode [ 209.959039][T13025] netdevsim netdevsim9 eth2: entered allmulticast mode [ 209.965987][T13025] netdevsim netdevsim9 eth3: entered allmulticast mode [ 209.989508][ T12] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.999784][ T12] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.008288][ T12] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.016661][ T12] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.144248][T13042] tipc: Enabled bearer , priority 0 [ 210.154664][T13044] netlink: 'syz.8.3340': attribute type 10 has an invalid length. [ 210.167155][T13044] team0: Port device dummy0 added [ 210.178438][T13044] netlink: 'syz.8.3340': attribute type 10 has an invalid length. [ 210.199941][T13042] syzkaller0: entered promiscuous mode [ 210.205662][T13042] syzkaller0: entered allmulticast mode [ 210.217413][T13042] tipc: Resetting bearer [ 210.229250][T13044] team0: Port device dummy0 removed [ 210.238334][T13044] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 210.247318][T13041] tipc: Resetting bearer [ 210.269885][T13041] tipc: Disabling bearer [ 210.280476][T13048] vlan0: left promiscuous mode [ 210.285410][T13048] bridge0: port 3(vlan0) entered disabled state [ 210.294517][T13048] bridge_slave_1: left allmulticast mode [ 210.300239][T13048] bridge_slave_1: left promiscuous mode [ 210.305880][T13048] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.314030][T13048] bridge_slave_0: left promiscuous mode [ 210.319708][T13048] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.817649][T13070] lo: entered allmulticast mode [ 210.824523][T13070] tunl0: entered allmulticast mode [ 210.833056][T13070] gre0: entered allmulticast mode [ 210.848051][T13070] gretap0: entered allmulticast mode [ 210.855311][T13070] erspan0: entered allmulticast mode [ 210.862575][T13070] ip_vti0: entered allmulticast mode [ 210.869128][T13070] ip6_vti0: entered allmulticast mode [ 210.875996][T13070] sit0: entered allmulticast mode [ 210.883280][T13070] ip6tnl0: entered allmulticast mode [ 210.890899][T13070] ip6gre0: entered allmulticast mode [ 210.897667][T13070] syz_tun: entered allmulticast mode [ 210.904649][T13070] ip6gretap0: entered allmulticast mode [ 210.913465][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.920724][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.928885][T13070] bridge0: entered allmulticast mode [ 210.935739][T13070] vcan0: entered allmulticast mode [ 210.942186][T13070] bond0: entered allmulticast mode [ 210.947376][T13070] bond_slave_0: entered allmulticast mode [ 210.953268][T13070] bond_slave_1: entered allmulticast mode [ 210.959045][T13070] team0: entered allmulticast mode [ 210.964209][T13070] team_slave_0: entered allmulticast mode [ 210.970013][T13070] team_slave_1: entered allmulticast mode [ 210.976747][T13070] dummy0: entered allmulticast mode [ 210.985165][T13070] nlmon0: entered allmulticast mode [ 210.991470][T13070] caif0: entered allmulticast mode [ 210.997356][T13070] vxcan0: entered allmulticast mode [ 211.003445][T13070] vxcan1: entered allmulticast mode [ 211.009751][T13070] wg0: entered allmulticast mode [ 211.016136][T13070] wg2: left promiscuous mode [ 211.021654][T13070] veth0_to_bridge: entered allmulticast mode [ 211.030431][T13070] veth1_to_bridge: entered allmulticast mode [ 211.039124][T13070] veth0_to_bond: entered allmulticast mode [ 211.048317][T13070] veth1_to_bond: entered allmulticast mode [ 211.055957][T13070] veth0_to_team: entered allmulticast mode [ 211.064180][T13070] veth1_to_team: entered allmulticast mode [ 211.072606][T13070] xfrm0: entered allmulticast mode [ 211.078862][T13070] veth0_to_hsr: entered allmulticast mode [ 211.085714][T13070] hsr_slave_0: entered allmulticast mode [ 211.092870][T13070] veth1_to_hsr: entered allmulticast mode [ 211.099944][T13070] hsr_slave_1: entered allmulticast mode [ 211.106950][T13070] hsr0: entered allmulticast mode [ 211.113244][T13070] veth1_virt_wifi: entered allmulticast mode [ 211.120331][T13070] veth0_virt_wifi: entered allmulticast mode [ 211.127474][T13070] veth1_vlan: entered allmulticast mode [ 211.134334][T13070] veth0_vlan: entered allmulticast mode [ 211.142300][T13070] vlan0: entered allmulticast mode [ 211.147741][T13070] macvlan0: entered allmulticast mode [ 211.154361][T13070] macvlan1: entered allmulticast mode [ 211.160833][T13070] ipvlan0: entered allmulticast mode [ 211.166307][T13070] ipvlan1: entered allmulticast mode [ 211.171860][T13070] veth1_macvtap: entered allmulticast mode [ 211.178833][T13070] veth0_macvtap: entered allmulticast mode [ 211.185862][T13070] macvtap0: entered allmulticast mode [ 211.192161][T13070] macsec0: entered allmulticast mode [ 211.198808][T13070] geneve0: entered allmulticast mode [ 211.205319][T13070] bridge1: entered allmulticast mode [ 211.211557][T13070] gre1: entered allmulticast mode [ 211.216975][T13070] bridge2: entered allmulticast mode [ 211.223097][T13070] veth2: entered allmulticast mode [ 211.228363][T13070] veth3: entered allmulticast mode [ 211.234542][T13070] bond2: entered allmulticast mode [ 211.239806][T13070] geneve1: entered allmulticast mode [ 211.246672][T13070] netdevsim netdevsim7 eth0: entered allmulticast mode [ 211.253735][T13070] netdevsim netdevsim7 eth1: entered allmulticast mode [ 211.260869][T13070] netdevsim netdevsim7 eth2: entered allmulticast mode [ 211.268005][T13070] netdevsim netdevsim7 eth3: entered allmulticast mode [ 211.275449][ T3851] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.295050][ T3851] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.332057][ T3851] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.346828][ T3851] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.489862][T13076] loop6: detected capacity change from 0 to 2048 [ 211.536147][T13076] Alternate GPT is invalid, using primary GPT. [ 211.542637][T13076] loop6: p2 p3 p7 [ 212.331823][T13085] netlink: 'syz.6.3353': attribute type 10 has an invalid length. [ 212.340814][T13085] bond0: (slave dummy0): Releasing backup interface [ 212.347475][T13085] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 212.364735][T13085] dummy0: left allmulticast mode [ 212.371059][T13085] dummy0: entered allmulticast mode [ 212.376611][T13085] team0: Port device dummy0 added [ 212.384900][T13083] geneve2: entered promiscuous mode [ 212.387099][T13085] netlink: 'syz.6.3353': attribute type 10 has an invalid length. [ 212.390195][T13083] geneve2: entered allmulticast mode [ 212.407813][T13085] dummy0: left allmulticast mode [ 212.413874][T13085] team0: Port device dummy0 removed [ 212.420551][T13085] dummy0: entered allmulticast mode [ 212.426128][T13085] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.463802][T13089] netlink: 'syz.9.3355': attribute type 2 has an invalid length. [ 212.471609][T13089] netlink: 'syz.9.3355': attribute type 1 has an invalid length. [ 212.479392][T13089] netlink: 'syz.9.3355': attribute type 2 has an invalid length. [ 212.543033][T13089] loop9: detected capacity change from 0 to 8192 [ 212.610258][T13098] __nla_validate_parse: 3 callbacks suppressed [ 212.610275][T13098] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3359'. [ 212.625652][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3359'. [ 212.634690][T13098] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3359'. [ 212.643685][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3359'. [ 212.652713][T13098] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3359'. [ 212.879469][T13109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.417924][T13121] netlink: 'syz.7.3369': attribute type 10 has an invalid length. [ 213.427707][T13121] netlink: 'syz.7.3369': attribute type 10 has an invalid length. [ 213.436136][T13121] dummy0: left allmulticast mode [ 213.441915][T13121] team0: Port device dummy0 removed [ 213.448507][T13121] dummy0: entered allmulticast mode [ 213.454412][T13121] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 213.492559][T13125] geneve2: entered promiscuous mode [ 213.497856][T13125] geneve2: entered allmulticast mode [ 213.509819][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3382'. [ 213.519276][T13131] loop9: detected capacity change from 0 to 1024 [ 213.527031][T13131] EXT4-fs: Ignoring removed oldalloc option [ 213.532991][T13131] EXT4-fs: Ignoring removed bh option [ 213.560735][T13131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.631495][T13135] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3371'. [ 214.418956][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.840909][T13142] netlink: 'syz.8.3373': attribute type 4 has an invalid length. [ 214.862856][T13141] vlan1: left promiscuous mode [ 214.867925][T13141] bridge0: port 3(vlan1) entered disabled state [ 214.890766][T13141] bridge_slave_1: left promiscuous mode [ 214.896469][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.906546][T13141] bridge_slave_0: left promiscuous mode [ 214.912412][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.931242][T13152] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3376'. [ 214.940241][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3376'. [ 214.949223][T13152] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3376'. [ 215.214257][T13157] loop6: detected capacity change from 0 to 2048 [ 215.271793][T13157] Alternate GPT is invalid, using primary GPT. [ 215.278225][T13157] loop6: p2 p3 p7 [ 215.322893][T13165] ªªªªªª: renamed from vlan0 [ 215.490796][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 215.490811][ T29] audit: type=1326 audit(465.162:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febfe165ba7 code=0x7ffc0000 [ 215.520065][ T29] audit: type=1326 audit(465.162:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febfe10add9 code=0x7ffc0000 [ 215.543042][ T29] audit: type=1326 audit(465.162:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febfe165ba7 code=0x7ffc0000 [ 215.566050][ T29] audit: type=1326 audit(465.162:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febfe10add9 code=0x7ffc0000 [ 215.589095][ T29] audit: type=1326 audit(465.162:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfe16ebe9 code=0x7ffc0000 [ 215.612177][ T29] audit: type=1326 audit(465.162:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfe16ebe9 code=0x7ffc0000 [ 215.636600][ T29] audit: type=1326 audit(465.181:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febfe16d550 code=0x7ffc0000 [ 215.659689][ T29] audit: type=1326 audit(465.181:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfe16ebe9 code=0x7ffc0000 [ 215.682763][ T29] audit: type=1326 audit(465.181:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfe16ebe9 code=0x7ffc0000 [ 215.705793][ T29] audit: type=1326 audit(465.292:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.7.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febfe16ebe9 code=0x7ffc0000 [ 215.884161][T13180] loop6: detected capacity change from 0 to 1024 [ 215.907506][T13180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.994980][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 216.364151][T13218] loop9: detected capacity change from 0 to 128 [ 216.517929][ T3858] bio_check_eod: 20271 callbacks suppressed [ 216.517945][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.517945][ T3858] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 216.546981][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.546981][ T3858] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 216.561640][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.561640][ T3858] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 216.575214][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.575214][ T3858] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 216.610543][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.610543][ T3858] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 216.635063][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.635063][ T3858] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 216.650816][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.650816][ T3858] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 216.664536][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.664536][ T3858] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 216.678145][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.678145][ T3858] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 216.709761][ T3858] kworker/u8:20: attempt to access beyond end of device [ 216.709761][ T3858] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 217.493481][T13340] net_ratelimit: 19 callbacks suppressed [ 217.493496][T13340] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.589082][T13350] loop9: detected capacity change from 0 to 512 [ 217.623907][T13350] EXT4-fs (loop9): failed to initialize system zone (-117) [ 217.679493][T13350] EXT4-fs (loop9): mount failed [ 217.982939][T13364] loop9: detected capacity change from 0 to 512 [ 218.036454][T13364] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.3415: error while reading EA inode 32 err=-116 [ 218.050135][T13364] EXT4-fs (loop9): Remounting filesystem read-only [ 218.057563][T13364] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 218.068825][T13364] EXT4-fs (loop9): 1 orphan inode deleted [ 218.078889][T13364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.157667][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.494163][T13384] __nla_validate_parse: 2 callbacks suppressed [ 218.494180][T13384] netlink: 21 bytes leftover after parsing attributes in process `syz.8.3417'. [ 219.210150][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3428'. [ 219.295453][T13386] Set syz1 is full, maxelem 65536 reached [ 219.715064][T13440] loop6: detected capacity change from 0 to 1024 [ 219.732904][T13440] EXT4-fs: Ignoring removed orlov option [ 219.760278][T13440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.807548][T13446] syzkaller0: entered allmulticast mode [ 219.827533][T13446] syzkaller0: entered promiscuous mode [ 219.849900][T13446] syzkaller0 (unregistering): left allmulticast mode [ 219.856698][T13446] syzkaller0 (unregistering): left promiscuous mode [ 220.046975][T13456] bond0: (slave team0): Releasing backup interface [ 220.082852][T13456] bond0: (slave dummy0): Releasing backup interface [ 220.107234][T13456] bond0: (slave bond_slave_0): Releasing backup interface [ 220.128911][T13456] bond0: (slave bond_slave_1): Releasing backup interface [ 220.143822][T13456] team0: Port device team_slave_0 removed [ 220.155376][T13456] team0: Port device team_slave_1 removed [ 220.188711][T13456] bond2: (slave geneve2): Releasing active interface [ 220.227582][T13463] vlan1: entered allmulticast mode [ 220.264481][ T3412] syz1: Port: 1 Link DOWN [ 220.292391][T13474] netlink: 'syz.7.3454': attribute type 3 has an invalid length. [ 220.329883][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.339443][T13476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.348783][T13476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.378443][T13479] loop6: detected capacity change from 0 to 512 [ 220.397800][T13479] EXT4-fs (loop6): failed to initialize system zone (-117) [ 220.408807][T13479] EXT4-fs (loop6): mount failed [ 220.428275][T13485] netlink: 'syz.9.3458': attribute type 1 has an invalid length. [ 220.436105][T13485] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3458'. [ 220.945550][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.964965][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.092572][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 221.092586][ T29] audit: type=1326 audit(470.343:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.121955][ T29] audit: type=1326 audit(470.343:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.165938][ T29] audit: type=1326 audit(470.343:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.188955][ T29] audit: type=1326 audit(470.343:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.212055][ T29] audit: type=1326 audit(470.343:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.235098][ T29] audit: type=1326 audit(470.343:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.258126][ T29] audit: type=1326 audit(470.343:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.281195][ T29] audit: type=1326 audit(470.343:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.304300][ T29] audit: type=1326 audit(470.343:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.327389][ T29] audit: type=1326 audit(470.343:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fcfda05ebe9 code=0x7ffc0000 [ 221.728304][T13592] loop6: detected capacity change from 0 to 512 [ 221.757058][T13597] netlink: 'syz.7.3506': attribute type 1 has an invalid length. [ 221.757738][T13592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.772635][T13597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.788894][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3506'. [ 221.801228][T13597] bond3 (unregistering): Released all slaves [ 221.831195][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.870736][T13604] loop6: detected capacity change from 0 to 512 [ 221.891369][T13604] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 221.917417][T13604] EXT4-fs (loop6): 1 truncate cleaned up [ 221.924271][T13604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.224699][T13619] loop9: detected capacity change from 0 to 1024 [ 222.246076][T13619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.434598][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.485862][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3514'. [ 222.812020][T13635] siw: device registration error -23 [ 222.818620][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.988914][T13653] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3523'. [ 223.371308][T13674] netlink: 'syz.9.3532': attribute type 1 has an invalid length. [ 223.385578][T13674] bond1: entered promiscuous mode [ 223.390895][T13674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.399829][T13674] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3532'. [ 223.416198][T13674] batadv0: entered promiscuous mode [ 223.421517][T13674] batadv0: entered allmulticast mode [ 223.428153][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.436448][T13674] bond1: (slave batadv0): making interface the new active one [ 223.444642][T13674] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 224.799888][T13712] loop9: detected capacity change from 0 to 8192 [ 225.384951][T13726] netlink: 'syz.9.3551': attribute type 1 has an invalid length. [ 225.417698][T13726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.459640][T13726] bond2: (slave geneve2): making interface the new active one [ 225.563202][T13726] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 225.572501][ T3848] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.597754][ T3848] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.606057][ T3848] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.619274][ T3848] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.629858][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.656316][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.739049][T13738] bond0: (slave team0): Releasing backup interface [ 225.745624][T13738] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 225.763807][T13740] netlink: 'syz.6.3553': attribute type 1 has an invalid length. [ 225.771570][T13740] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3553'. [ 225.782050][T13738] bond0: (slave dummy0): Releasing backup interface [ 225.792009][T13738] bond4: (slave gretap3): Releasing active interface [ 225.870110][T13744] loop9: detected capacity change from 0 to 2048 [ 225.918986][T13744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.946379][T13744] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3558: bg 0: block 234: padding at end of block bitmap is not set [ 225.961939][T13744] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 225.974305][T13744] EXT4-fs (loop9): This should not happen!! Data will be lost [ 225.974305][T13744] [ 226.086758][ T3893] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 226.099214][ T3893] EXT4-fs (loop9): This should not happen!! Data will be lost [ 226.099214][ T3893] [ 226.108889][ T3893] EXT4-fs (loop9): Total free blocks count 0 [ 226.114958][ T3893] EXT4-fs (loop9): Free/Dirty block details [ 226.120890][ T3893] EXT4-fs (loop9): free_blocks=0 [ 226.125834][ T3893] EXT4-fs (loop9): dirty_blocks=16 [ 226.130973][ T3893] EXT4-fs (loop9): Block reservation details [ 226.395010][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3571'. [ 226.408652][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3571'. [ 226.682360][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3566'. [ 226.692240][T13770] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.749543][T13770] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.846465][T13770] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.932606][T13770] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.046478][ T3868] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.057543][ T3868] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.069281][ T3868] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.080690][ T3868] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.676894][T13788] loop6: detected capacity change from 0 to 1024 [ 227.714177][T13788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.023519][T13797] netlink: 21 bytes leftover after parsing attributes in process `syz.9.3583'. [ 228.091269][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.147120][T13802] loop6: detected capacity change from 0 to 2048 [ 228.174125][T13802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.197279][T13802] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3574: bg 0: block 234: padding at end of block bitmap is not set [ 228.211972][T13802] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 228.224459][T13802] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.224459][T13802] [ 228.248409][ T3868] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 228.260766][ T3868] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.260766][ T3868] [ 228.270638][ T3868] EXT4-fs (loop6): Total free blocks count 0 [ 228.276643][ T3868] EXT4-fs (loop6): Free/Dirty block details [ 228.282554][ T3868] EXT4-fs (loop6): free_blocks=0 [ 228.287557][ T3868] EXT4-fs (loop6): dirty_blocks=16 [ 228.292682][ T3868] EXT4-fs (loop6): Block reservation details [ 228.862159][T13819] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3594'. [ 228.880776][T13819] 0ªî{X¹¦: renamed from 30ªX¹¦D [ 228.888368][T13819] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 228.964849][T13826] wireguard0: entered promiscuous mode [ 228.970966][T13826] wireguard0: entered allmulticast mode [ 229.038925][T13832] netlink: 'syz.5.3585': attribute type 1 has an invalid length. [ 229.110373][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3585'. [ 229.138447][T13832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.168882][T13833] bond6 (unregistering): Released all slaves [ 229.224037][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3586'. [ 229.300119][T13841] loop6: detected capacity change from 0 to 512 [ 229.325188][T13841] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.332084][T13841] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 229.360393][T13841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 229.372596][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3590'. [ 229.390188][T13841] System zones: 1-12 [ 229.394876][T13841] EXT4-fs (loop6): 1 truncate cleaned up [ 229.401459][T13841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.423321][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3590'. [ 229.626390][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.739822][T13864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13864 comm=syz.5.3598 [ 230.194647][T13875] loop9: detected capacity change from 0 to 512 [ 230.208833][T13875] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 230.222213][T13875] EXT4-fs (loop9): orphan cleanup on readonly fs [ 230.238428][T13875] __quota_error: 49 callbacks suppressed [ 230.238444][T13875] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 230.256508][T13875] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.277887][T13875] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 230.288269][T13875] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3601: bg 0: block 40: padding at end of block bitmap is not set [ 230.313915][T13875] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 230.353752][T13875] EXT4-fs (loop9): 1 truncate cleaned up [ 230.359918][T13875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.427642][T13875] netlink: 'syz.9.3601': attribute type 39 has an invalid length. [ 230.550344][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.598077][ T29] audit: type=1326 audit(479.126:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.657761][ T29] audit: type=1326 audit(479.126:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.663261][T13901] tipc: Enabling of bearer rejected, already enabled [ 230.680896][ T29] audit: type=1326 audit(479.154:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.711556][ T29] audit: type=1326 audit(479.154:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.734636][ T29] audit: type=1326 audit(479.154:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.757773][ T29] audit: type=1326 audit(479.154:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.781031][ T29] audit: type=1326 audit(479.154:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.804290][ T29] audit: type=1326 audit(479.154:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.827308][ T29] audit: type=1326 audit(479.154:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.9.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 230.881127][T13903] loop6: detected capacity change from 0 to 4096 [ 230.961204][T13903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.054348][T13903] EXT4-fs error (device loop6): ext4_empty_dir:3100: inode #12: block 80: comm syz.6.3616: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 231.083729][T13903] EXT4-fs warning (device loop6): ext4_empty_dir:3103: inode #12: comm syz.6.3616: directory missing '..' [ 231.144748][ T5226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.369278][T13922] wireguard0: entered promiscuous mode [ 231.386546][T13922] wireguard0: entered allmulticast mode [ 231.444385][T13929] __nla_validate_parse: 4 callbacks suppressed [ 231.444401][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 231.602153][T13939] loop9: detected capacity change from 0 to 1024 [ 231.652641][T13939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.665953][T13944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13944 comm=syz.6.3630 [ 231.715700][T13939] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.3629: Allocating blocks 449-513 which overlap fs metadata [ 231.763391][T13951] netlink: 'syz.6.3632': attribute type 1 has an invalid length. [ 231.786009][T13938] EXT4-fs (loop9): pa ffff888106e098c0: logic 48, phys. 177, len 21 [ 231.794137][T13938] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 231.819388][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3632'. [ 231.822866][T13951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.836203][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.867071][T13955] bond3 (unregistering): Released all slaves [ 232.033837][T13968] lo speed is unknown, defaulting to 1000 [ 232.041523][T13968] lo speed is unknown, defaulting to 1000 [ 232.047646][T13968] lo speed is unknown, defaulting to 1000 [ 232.054467][T13968] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 232.061653][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3641'. [ 232.078154][T13970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.089119][T13968] lo speed is unknown, defaulting to 1000 [ 232.095300][T13968] lo speed is unknown, defaulting to 1000 [ 232.101767][T13968] lo speed is unknown, defaulting to 1000 [ 232.106865][T13970] vlan1: entered allmulticast mode [ 232.112707][T13970] bond3: entered allmulticast mode [ 232.128603][T13968] lo speed is unknown, defaulting to 1000 [ 232.135084][T13968] lo speed is unknown, defaulting to 1000 [ 232.274523][T13988] $Hÿ: renamed from bond0 [ 232.281366][T13988] $Hÿ: entered promiscuous mode [ 232.286460][T13988] team0: entered promiscuous mode [ 232.291641][T13988] dummy0: entered promiscuous mode [ 232.296924][T13988] $Hÿ: left allmulticast mode [ 232.301807][T13988] team0: left allmulticast mode [ 232.306852][T13988] dummy0: left allmulticast mode [ 232.312119][T13980] lo speed is unknown, defaulting to 1000 [ 232.358975][T13995] netlink: 'syz.6.3650': attribute type 4 has an invalid length. [ 232.658620][T14008] lo: left allmulticast mode [ 232.670889][T14008] netlink: 'syz.6.3654': attribute type 13 has an invalid length. [ 232.679745][T14008] tunl0: left allmulticast mode [ 232.695005][T14008] gre0: left allmulticast mode [ 232.702535][T14008] gretap0: left allmulticast mode [ 232.709137][T14008] gretap0: refused to change device tx_queue_len [ 232.716821][T14008] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.796990][T14013] loop9: detected capacity change from 0 to 512 [ 232.817063][T14013] EXT4-fs: Ignoring removed oldalloc option [ 232.869932][T14013] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.3666: Parent and EA inode have the same ino 15 [ 232.915471][T14013] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.3666: Parent and EA inode have the same ino 15 [ 232.960805][T14013] EXT4-fs (loop9): 1 orphan inode deleted [ 232.990402][T14013] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.073925][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.507935][T13993] syz.7.3649 (13993) used greatest stack depth: 7160 bytes left [ 233.760862][T14040] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3677'. [ 233.898090][T14059] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3673'. [ 234.037202][T14070] lo speed is unknown, defaulting to 1000 [ 234.179350][T14080] loop9: detected capacity change from 0 to 2048 [ 234.234476][T14080] Alternate GPT is invalid, using primary GPT. [ 234.240835][T14080] loop9: p2 p3 p7 [ 234.867521][T14086] wireguard1: entered promiscuous mode [ 234.873456][T14086] wireguard1: entered allmulticast mode [ 234.916003][T14093] syzkaller0: entered allmulticast mode [ 234.921789][T14093] syzkaller0: entered promiscuous mode [ 234.931017][T14093] syzkaller0 (unregistering): left allmulticast mode [ 234.937936][T14093] syzkaller0 (unregistering): left promiscuous mode [ 235.093504][T14104] lo speed is unknown, defaulting to 1000 [ 235.109983][T14101] vlan0: left promiscuous mode [ 235.115026][T14101] bridge0: port 3(vlan0) entered disabled state [ 235.124568][T14101] bridge_slave_1: left promiscuous mode [ 235.130505][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.140570][T14101] bridge_slave_0: left promiscuous mode [ 235.146300][T14101] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.542764][T14139] wireguard0: entered promiscuous mode [ 235.548469][T14139] wireguard0: entered allmulticast mode [ 235.656967][T14146] netlink: 'syz.9.3706': attribute type 1 has an invalid length. [ 235.670698][T14146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.683228][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3706'. [ 235.694643][T14146] bond3 (unregistering): Released all slaves [ 235.791951][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3708'. [ 235.827378][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3707'. [ 235.922982][T14163] ------------[ cut here ]------------ [ 235.928490][T14163] 'send_pkt()' returns 0, but 65536 expected [ 235.935524][T14163] WARNING: CPU: 1 PID: 14163 at net/vmw_vsock/virtio_transport_common.c:428 virtio_transport_send_pkt_info+0x846/0x860 [ 235.948086][T14163] Modules linked in: [ 235.952077][T14163] CPU: 1 UID: 0 PID: 14163 Comm: syz.9.3712 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 235.964308][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.974515][T14163] RIP: 0010:virtio_transport_send_pkt_info+0x846/0x860 [ 235.981394][T14163] Code: 7b 01 fc 48 c7 c7 1d 37 d4 86 e8 95 2c 1c fc c6 05 2b b9 7d 01 01 90 48 c7 c7 05 dc 5e 86 44 89 fe 48 89 da e8 1b 1f cb fb 90 <0f> 0b 90 90 e9 f6 fe ff ff e8 bc 7b 01 fc 90 0f 0b 90 e9 04 fb ff [ 236.001127][T14163] RSP: 0018:ffffc9000128f918 EFLAGS: 00010246 [ 236.007284][T14163] RAX: 274fbee564014a00 RBX: 0000000000010000 RCX: 0000000000080000 [ 236.015268][T14163] RDX: ffffc9000a7c8000 RSI: 0000000000005399 RDI: 000000000000539a [ 236.023288][T14163] RBP: 0000000000010000 R08: 0001c9000128f78f R09: 0000000000000000 [ 236.031273][T14163] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000040000 [ 236.039322][T14163] R13: ffff888147cdd90c R14: ffffffff86d1f4b8 R15: 0000000000000000 [ 236.047291][T14163] FS: 00007f07932d76c0(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 236.056248][T14163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.062855][T14163] CR2: 000020000003f000 CR3: 000000013d7dc000 CR4: 00000000003506f0 [ 236.070856][T14163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.078887][T14163] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 236.086919][T14163] Call Trace: [ 236.090203][T14163] [ 236.093194][T14163] virtio_transport_seqpacket_enqueue+0xb4/0xe0 [ 236.099491][T14163] vsock_connectible_sendmsg+0x752/0x980 [ 236.105181][T14163] ? __pfx_woken_wake_function+0x10/0x10 [ 236.110888][T14163] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 236.117148][T14163] __sock_sendmsg+0x145/0x180 [ 236.121848][T14163] ____sys_sendmsg+0x345/0x4e0 [ 236.126751][T14163] ___sys_sendmsg+0x17b/0x1d0 [ 236.131471][T14163] __sys_sendmmsg+0x178/0x300 [ 236.136345][T14163] __x64_sys_sendmmsg+0x57/0x70 [ 236.141212][T14163] x64_sys_call+0x1c4a/0x2ff0 [ 236.145897][T14163] do_syscall_64+0xd2/0x200 [ 236.150433][T14163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.156551][T14163] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.162394][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.168427][T14163] RIP: 0033:0x7f079486ebe9 [ 236.172870][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.192540][T14163] RSP: 002b:00007f07932d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.201019][T14163] RAX: ffffffffffffffda RBX: 00007f0794a95fa0 RCX: 00007f079486ebe9 [ 236.209070][T14163] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 236.217182][T14163] RBP: 00007f07948f1e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.225224][T14163] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 236.233240][T14163] R13: 00007f0794a96038 R14: 00007f0794a95fa0 R15: 00007ffdcc1d6968 [ 236.241245][T14163] [ 236.244292][T14163] ---[ end trace 0000000000000000 ]--- [ 236.274736][T14168] tipc: Enabling of bearer rejected, already enabled [ 236.284811][T14168] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 236.292976][T14168] tipc: Enabled bearer , priority 10 [ 236.441133][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 236.441166][ T29] audit: type=1326 audit(484.528:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.470461][ T29] audit: type=1326 audit(484.528:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.493640][ T29] audit: type=1326 audit(484.528:10873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.516702][ T29] audit: type=1326 audit(484.528:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.539790][ T29] audit: type=1326 audit(484.528:10875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.562792][ T29] audit: type=1326 audit(484.528:10876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.585784][ T29] audit: type=1326 audit(484.528:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.608839][ T29] audit: type=1326 audit(484.528:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.631812][ T29] audit: type=1326 audit(484.528:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 236.654839][ T29] audit: type=1326 audit(484.528:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.9.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079486ebe9 code=0x7ffc0000 [ 237.362265][T14195] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.401154][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3727'. [ 237.419535][T14195] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.475233][T14195] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.509450][T14215] wireguard0: entered promiscuous mode [ 237.517320][T14215] wireguard0: entered allmulticast mode [ 237.566182][T14195] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.773507][ T3902] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.800258][ T3902] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.809367][ T3902] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.818009][ T3902] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.037150][T14246] netlink: 'syz.5.3747': attribute type 1 has an invalid length. [ 238.112083][T14246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.122738][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3747'. [ 238.145958][T14248] bond7 (unregistering): Released all slaves [ 238.324704][T14259] wireguard1: entered promiscuous mode [ 238.330462][T14259] wireguard1: entered allmulticast mode [ 238.450624][ T3874] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.463647][ T3874] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.486614][ T3874] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.506055][ T3874] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.574987][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3764'. [ 238.583944][T14290] hsr_slave_0: left promiscuous mode [ 238.589831][T14290] hsr_slave_1: left promiscuous mode [ 238.656710][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3765'. [ 238.666164][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3765'. [ 238.776673][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3770'. [ 238.824455][T14305] wireguard0: entered promiscuous mode [ 238.829990][T14305] wireguard0: entered allmulticast mode [ 238.899458][T14308] lo speed is unknown, defaulting to 1000 [ 238.913485][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3772'. [ 239.054880][T14329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14329 comm=syz.9.3780 [ 239.294128][T14348] netlink: 'syz.9.3788': attribute type 1 has an invalid length. [ 239.322633][T14348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.352312][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3788'. [ 239.385499][T14348] bond3 (unregistering): Released all slaves [ 239.552573][T14376] geneve2: entered promiscuous mode [ 239.555569][T14345] cgroup: fork rejected by pids controller in [ 239.557877][T14376] geneve2: entered allmulticast mode [ 239.574493][T14345] /syz5 [ 239.579746][ T3902] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.588024][ T3902] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.612308][ T3902] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.622082][T14395] loop9: detected capacity change from 0 to 128 [ 239.628791][ T3902] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.641101][T14395] FAT-fs (loop9): Directory bread(block 32) failed [ 239.648586][T14395] FAT-fs (loop9): Directory bread(block 33) failed [ 239.655783][T14395] FAT-fs (loop9): Directory bread(block 34) failed [ 239.661134][T14401] macsec0: entered promiscuous mode [ 239.662463][T14395] FAT-fs (loop9): Directory bread(block 35) failed [ 239.667632][T14401] macsec0: left allmulticast mode [ 239.694750][T14395] FAT-fs (loop9): Directory bread(block 36) failed [ 239.711143][T14395] FAT-fs (loop9): Directory bread(block 37) failed [ 239.732294][T14395] FAT-fs (loop9): Directory bread(block 38) failed [ 239.743236][T14395] FAT-fs (loop9): Directory bread(block 39) failed [ 239.858151][T14395] FAT-fs (loop9): Directory bread(block 40) failed [ 239.874324][T14395] FAT-fs (loop9): Directory bread(block 41) failed [ 240.200971][T14485] loop9: detected capacity change from 0 to 512 [ 240.210223][T14485] EXT4-fs: Ignoring removed nobh option [ 240.244024][T14485] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3804: corrupted inode contents [ 240.273625][T14485] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.3804: mark_inode_dirty error [ 240.331087][T14485] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3804: corrupted inode contents [ 240.374130][T14485] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3804: mark_inode_dirty error [ 240.438747][T14485] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3804: Failed to acquire dquot type 0 [ 240.469654][T14485] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3804: corrupted inode contents [ 240.510590][T14485] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.3804: mark_inode_dirty error [ 240.533159][T14485] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3804: corrupted inode contents [ 240.565860][T14485] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3804: mark_inode_dirty error [ 240.602647][T14485] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3804: corrupted inode contents [ 240.641389][T14485] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 240.650938][T14485] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3804: corrupted inode contents [ 240.695854][T14485] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.3804: mark_inode_dirty error [ 240.727855][T14485] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 240.751257][T14485] EXT4-fs (loop9): 1 truncate cleaned up [ 240.772960][T14485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.835609][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.855793][T14552] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 241.909398][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 241.909413][ T29] audit: type=1326 audit(489.571:11012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 241.973817][ T29] audit: type=1326 audit(489.571:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 241.996876][ T29] audit: type=1326 audit(489.571:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.019838][ T29] audit: type=1326 audit(489.598:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.042813][ T29] audit: type=1326 audit(489.608:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.065785][ T29] audit: type=1326 audit(489.608:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.088773][ T29] audit: type=1326 audit(489.608:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.111903][ T29] audit: type=1326 audit(489.608:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.134946][ T29] audit: type=1326 audit(489.608:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.157952][ T29] audit: type=1326 audit(489.608:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.6.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9602a9ebe9 code=0x7ffc0000 [ 242.228988][T14569] netlink: 'syz.9.3837': attribute type 39 has an invalid length. [ 242.327214][T14580] lo speed is unknown, defaulting to 1000 [ 242.517998][T14595] lo: left allmulticast mode [ 242.522745][T14595] tunl0: left allmulticast mode [ 242.527883][T14595] gre0: left allmulticast mode [ 242.532960][T14595] gretap0: left allmulticast mode [ 242.538466][T14595] erspan0: left allmulticast mode [ 242.543579][T14595] ip_vti0: left allmulticast mode [ 242.548743][T14595] ip6_vti0: left allmulticast mode [ 242.553952][T14595] sit0: left allmulticast mode [ 242.558804][T14595] ip6tnl0: left allmulticast mode [ 242.563911][T14595] ip6gre0: left allmulticast mode [ 242.569094][T14595] syz_tun: left allmulticast mode [ 242.574222][T14595] ip6gretap0: left allmulticast mode [ 242.579672][T14595] vcan0: left allmulticast mode [ 242.584667][T14595] bond0: left allmulticast mode [ 242.589767][T14595] dummy0: left allmulticast mode [ 242.594807][T14595] team0: left allmulticast mode [ 242.600365][T14595] nlmon0: left allmulticast mode [ 242.605370][T14595] caif0: left allmulticast mode [ 242.610340][T14595] vxcan0: left allmulticast mode [ 242.615651][T14595] vxcan1: left allmulticast mode [ 242.620822][T14595] wg0: left allmulticast mode [ 242.625572][T14595] wg2: left allmulticast mode [ 242.630331][T14595] veth0_to_bridge: left allmulticast mode [ 242.636146][T14595] veth1_to_bridge: left allmulticast mode [ 242.641982][T14595] bridge_slave_1: left allmulticast mode [ 242.647682][T14595] veth0_to_bond: left allmulticast mode [ 242.653350][T14595] bond_slave_0: left allmulticast mode [ 242.658921][T14595] veth1_to_bond: left allmulticast mode [ 242.664565][T14595] bond_slave_1: left allmulticast mode [ 242.670290][T14595] veth0_to_team: left allmulticast mode [ 242.676163][T14595] team_slave_0: left allmulticast mode [ 242.681781][T14595] veth1_to_team: left allmulticast mode [ 242.687403][T14595] team_slave_1: left allmulticast mode [ 242.692996][T14595] xfrm0: left allmulticast mode [ 242.697911][T14595] veth0_to_hsr: left allmulticast mode [ 242.703542][T14595] veth1_to_hsr: left allmulticast mode [ 242.709065][T14595] veth1_virt_wifi: left allmulticast mode [ 242.715016][T14595] veth0_virt_wifi: left allmulticast mode [ 242.720772][T14595] veth1_vlan: left allmulticast mode [ 242.726166][T14595] vlan0: left allmulticast mode [ 242.731169][T14595] macvlan0: left allmulticast mode [ 242.736460][T14595] macvlan1: left allmulticast mode [ 242.741686][T14595] ipvlan0: left allmulticast mode [ 242.746853][T14595] ipvlan1: left allmulticast mode [ 242.751893][T14595] veth0_vlan: left allmulticast mode [ 242.757387][T14595] veth1_macvtap: left allmulticast mode [ 242.763156][T14595] veth0_macvtap: left allmulticast mode [ 242.768766][T14595] macsec0: left allmulticast mode [ 242.773926][T14595] geneve0: left allmulticast mode [ 242.779007][T14595] bridge1: left allmulticast mode [ 242.784095][T14595] gre1: left allmulticast mode [ 242.788965][T14595] bridge2: left allmulticast mode [ 242.794084][T14595] veth2: left allmulticast mode [ 242.799172][T14595] veth3: left allmulticast mode [ 242.804312][T14595] bond2: left allmulticast mode [ 242.809366][T14595] geneve1: left allmulticast mode [ 242.814533][T14595] vlan1: left allmulticast mode [ 242.819411][T14595] bridge_slave_0: left allmulticast mode [ 242.827252][T14595] geneve2: left promiscuous mode [ 242.832401][T14595] geneve2: left allmulticast mode [ 242.838230][ T3848] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.852025][ T3848] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.861182][ T3848] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.869669][ T3848] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.240334][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3863'. [ 243.257879][T14630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14630 comm=syz.6.3863 [ 243.323450][T14636] loop9: detected capacity change from 0 to 512 [ 243.347065][T14636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.378109][T14636] EXT4-fs (loop9): shut down requested (0) [ 243.403775][T14645] tipc: Enabling of bearer rejected, already enabled [ 243.436180][T14650] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 243.477830][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.035249][T14663] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3876'. [ 244.263378][T14679] loop9: detected capacity change from 0 to 1024 [ 244.294991][T14679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.470209][ T3893] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm kworker/u8:54: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.495441][ T3893] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 244.507926][ T3893] EXT4-fs (loop9): This should not happen!! Data will be lost [ 244.507926][ T3893] [ 244.540286][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.374053][T14742] netlink: 'syz.6.3905': attribute type 1 has an invalid length. [ 245.389644][T14742] bond0: entered promiscuous mode [ 245.395019][T14742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.415028][T14742] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3905'. [ 245.429072][T14742] batadv0: entered promiscuous mode [ 245.434345][T14742] batadv0: entered allmulticast mode [ 245.440730][T14742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.450277][T14742] bond0: (slave batadv0): making interface the new active one [ 245.458742][T14742] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 245.521043][T14747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3907'. [ 245.530187][T14747] tipc: Enabling of bearer rejected, already enabled [ 245.689327][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3912'. [ 245.698490][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3912'. [ 245.707539][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3912'. [ 246.104611][T14766] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3916'. [ 246.113748][T14766] 0ªî{X¹¦: renamed from gretap0 [ 246.120563][T14766] 0ªî{X¹¦: entered allmulticast mode [ 246.126973][T14766] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 246.893431][T14978] lo speed is unknown, defaulting to 1000 [ 247.015859][T14985] loop9: detected capacity change from 0 to 1024 [ 247.028551][T14985] EXT4-fs: Ignoring removed orlov option [ 247.049387][T14985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.502216][T14985] ================================================================== [ 247.510333][T14985] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 247.518428][T14985] [ 247.520760][T14985] write to 0xffff88811a339758 of 4 bytes by task 14989 on cpu 1: [ 247.528475][T14985] writeback_single_inode+0x14a/0x3e0 [ 247.533860][T14985] sync_inode_metadata+0x5b/0x90 [ 247.538806][T14985] generic_buffers_fsync_noflush+0xd9/0x120 [ 247.544708][T14985] ext4_sync_file+0x1ab/0x690 [ 247.549404][T14985] vfs_fsync_range+0x10d/0x130 [ 247.554176][T14985] ext4_buffered_write_iter+0x34f/0x3c0 [ 247.559737][T14985] ext4_file_write_iter+0x383/0xf00 [ 247.564949][T14985] iter_file_splice_write+0x666/0x9e0 [ 247.570329][T14985] direct_splice_actor+0x153/0x2a0 [ 247.575454][T14985] splice_direct_to_actor+0x30f/0x680 [ 247.580850][T14985] do_splice_direct+0xda/0x150 [ 247.585619][T14985] do_sendfile+0x380/0x650 [ 247.590051][T14985] __x64_sys_sendfile64+0x105/0x150 [ 247.595269][T14985] x64_sys_call+0x2bb0/0x2ff0 [ 247.599957][T14985] do_syscall_64+0xd2/0x200 [ 247.604479][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.610378][T14985] [ 247.612701][T14985] read to 0xffff88811a339758 of 4 bytes by task 14985 on cpu 0: [ 247.620331][T14985] vfs_fsync_range+0x9b/0x130 [ 247.625021][T14985] ext4_buffered_write_iter+0x34f/0x3c0 [ 247.630583][T14985] ext4_file_write_iter+0x383/0xf00 [ 247.635792][T14985] iter_file_splice_write+0x666/0x9e0 [ 247.641169][T14985] direct_splice_actor+0x153/0x2a0 [ 247.646296][T14985] splice_direct_to_actor+0x30f/0x680 [ 247.651664][T14985] do_splice_direct+0xda/0x150 [ 247.656427][T14985] do_sendfile+0x380/0x650 [ 247.660849][T14985] __x64_sys_sendfile64+0x105/0x150 [ 247.666053][T14985] x64_sys_call+0x2bb0/0x2ff0 [ 247.670735][T14985] do_syscall_64+0xd2/0x200 [ 247.675251][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.681146][T14985] [ 247.683462][T14985] value changed: 0x00000038 -> 0x00000002 [ 247.689171][T14985] [ 247.691488][T14985] Reported by Kernel Concurrency Sanitizer on: [ 247.697654][T14985] CPU: 0 UID: 0 PID: 14985 Comm: syz.9.3929 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 247.711396][T14985] Tainted: [W]=WARN [ 247.715203][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.725263][T14985] ================================================================== [ 248.095157][ T8963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.