last executing test programs: 3m43.918151043s ago: executing program 32 (id=438): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x0, r0}, 0x10) 3m23.786087958s ago: executing program 33 (id=1058): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x30}, 0x0) 3m22.3198031s ago: executing program 34 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3m21.795084519s ago: executing program 35 (id=1112): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x40002010}) close(r1) 3m21.423934804s ago: executing program 36 (id=1119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m7.079816468s ago: executing program 37 (id=1693): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 3m3.212759519s ago: executing program 38 (id=1762): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r2}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 2m39.789332844s ago: executing program 39 (id=2647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2m17.783400378s ago: executing program 40 (id=3555): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 2m11.434679687s ago: executing program 41 (id=3838): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7e) 1m55.711903963s ago: executing program 42 (id=4318): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e17f000001", @ANYRES32=0x0], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 1m52.776017779s ago: executing program 43 (id=4376): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='.\x00', 0x80000000) close(r2) 1m18.681540131s ago: executing program 44 (id=5643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={&(0x7f0000000200)='./file0\x00', r2}, 0x18) 1m14.619980264s ago: executing program 45 (id=5744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) 1m5.651864115s ago: executing program 7 (id=6073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 1m5.630981035s ago: executing program 7 (id=6074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) 1m5.532158996s ago: executing program 7 (id=6075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) 1m5.531956316s ago: executing program 7 (id=6076): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x80100000400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]}) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m5.30766552s ago: executing program 7 (id=6083): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vcan0\x00'}}, 0x1e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) 1m4.831424807s ago: executing program 7 (id=6099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) 1m4.793161018s ago: executing program 46 (id=6099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) 1m4.63321674s ago: executing program 5 (id=6107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffe}}}}}}}, 0x0) 1m4.592789681s ago: executing program 5 (id=6109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r4, 0x7, '\x00', 0x0, r3, 0x0, 0x3}, 0x50) 1m4.536208552s ago: executing program 5 (id=6112): r0 = socket$inet6(0xa, 0x3, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 1m4.459993713s ago: executing program 5 (id=6115): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x80100000400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]}) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m4.263397586s ago: executing program 5 (id=6121): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 1m0.18802876s ago: executing program 5 (id=6222): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r3, 0x0) 1m0.18789924s ago: executing program 47 (id=6222): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r3, 0x0) 57.068401488s ago: executing program 9 (id=6310): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 57.003891799s ago: executing program 9 (id=6312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) close_range(r3, 0xffffffffffffffff, 0x0) 56.96851835s ago: executing program 9 (id=6313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 56.93597613s ago: executing program 9 (id=6315): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 56.741534633s ago: executing program 9 (id=6324): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000b40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}}}}}}}}, 0x0) 55.395758235s ago: executing program 9 (id=6378): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 55.388701305s ago: executing program 48 (id=6378): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 52.773357375s ago: executing program 3 (id=6458): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd61"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 52.335447502s ago: executing program 3 (id=6471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 52.151707725s ago: executing program 3 (id=6476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}], 0x2, 0x20004874) 52.107566446s ago: executing program 3 (id=6479): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) sync() unlink(&(0x7f0000000180)='./file1\x00') 51.764763521s ago: executing program 3 (id=6490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 51.272578879s ago: executing program 3 (id=6504): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 51.272442769s ago: executing program 49 (id=6504): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 37.001053292s ago: executing program 2 (id=7018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r2, 0x14) 36.822142824s ago: executing program 2 (id=7020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x105}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x15, 0x2, 0x10}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 36.699184026s ago: executing program 2 (id=7024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file1\x00', 0x7a8) 36.657163907s ago: executing program 2 (id=7026): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 36.624377518s ago: executing program 2 (id=7027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4085) 36.413917011s ago: executing program 2 (id=7035): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 36.370845942s ago: executing program 50 (id=7035): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 1.394606178s ago: executing program 0 (id=8240): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r1}, 0x38) 1.324123669s ago: executing program 0 (id=8252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 1.224457871s ago: executing program 0 (id=8242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x84c, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x18) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 1.164779782s ago: executing program 6 (id=8246): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 1.121425592s ago: executing program 6 (id=8250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.049514434s ago: executing program 6 (id=8256): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) symlink(0x0, 0x0) unlink(0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 965.848515ms ago: executing program 4 (id=8264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 943.696715ms ago: executing program 4 (id=8266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioprio_get$pid(0x2, 0x0) 943.056545ms ago: executing program 1 (id=8267): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) 919.348475ms ago: executing program 4 (id=8268): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) 918.822835ms ago: executing program 1 (id=8269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x4c400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 860.145917ms ago: executing program 1 (id=8271): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) dup2(r1, r3) 822.183057ms ago: executing program 1 (id=8273): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 806.134987ms ago: executing program 1 (id=8275): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 692.174949ms ago: executing program 1 (id=8276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 692.005119ms ago: executing program 8 (id=8277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f00000400000000"], 0xe6) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 691.835989ms ago: executing program 8 (id=8278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 392.233204ms ago: executing program 0 (id=8279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)={[{@usrquota}, {@noquota}, {@grpid}]}, 0x1, 0x4c4, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 391.771344ms ago: executing program 8 (id=8289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 250.086096ms ago: executing program 6 (id=8280): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) 249.504786ms ago: executing program 0 (id=8291): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) 207.373327ms ago: executing program 6 (id=8281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 188.032407ms ago: executing program 0 (id=8282): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x4, @a_listen={0x5, 0x3, 0x4, 0x80, 0x3, 0x4, 0x5, "", 0x4, 0xb, 0x2b, 0x3, 0x1, "dc"}}, 0x10) read$nci(r0, 0x0, 0x0) 171.278167ms ago: executing program 6 (id=8283): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xad}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 150.306197ms ago: executing program 8 (id=8284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 80.125648ms ago: executing program 4 (id=8285): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) alarm(0x8) 76.819538ms ago: executing program 4 (id=8286): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 42.450019ms ago: executing program 8 (id=8287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 29.969459ms ago: executing program 4 (id=8288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0151c300000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 0s ago: executing program 8 (id=8290): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) kernel console output (not intermixed with test programs): 00000000-0000-0000-0000-000000000000. [ 214.189257][T19326] hsr_slave_0: left promiscuous mode [ 214.205715][T19326] hsr_slave_1: left promiscuous mode [ 214.219865][T19326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.227517][T19326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.251224][T19326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.259029][T19326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.293685][T19326] veth1_macvtap: left promiscuous mode [ 214.303309][T19326] veth0_macvtap: left promiscuous mode [ 214.308877][T19326] veth1_vlan: left promiscuous mode [ 214.317419][T19326] veth0_vlan: left promiscuous mode [ 214.417871][T19326] team0 (unregistering): Port device team_slave_1 removed [ 214.429542][T19326] team0 (unregistering): Port device team_slave_0 removed [ 214.475272][T29076] erspan0: entered promiscuous mode [ 214.481160][T29076] macvtap1: entered promiscuous mode [ 214.486933][T29076] macvtap1: entered allmulticast mode [ 214.492391][T29076] erspan0: entered allmulticast mode [ 214.560502][T28581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.576261][T28581] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.590044][T19314] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.597249][T19314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.612197][T19314] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.619334][T19314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.687224][T28581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.697778][T28581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.765454][T29103] loop4: detected capacity change from 0 to 1024 [ 214.778217][T29103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.793355][T28581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.809544][T29103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.853411][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.947290][T28581] veth0_vlan: entered promiscuous mode [ 214.958075][T28581] veth1_vlan: entered promiscuous mode [ 214.979608][T28581] veth0_macvtap: entered promiscuous mode [ 214.990209][T28581] veth1_macvtap: entered promiscuous mode [ 215.008125][T28581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.028762][T28581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.047210][T28581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.056065][T28581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.064891][T28581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.065061][T29136] loop4: detected capacity change from 0 to 8192 [ 215.073637][T28581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.184427][T29158] pimreg: entered allmulticast mode [ 215.190554][T29161] __nla_validate_parse: 8 callbacks suppressed [ 215.190646][T29161] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6380'. [ 215.207581][T29151] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6380'. [ 215.236111][T29158] pimreg: left allmulticast mode [ 215.310735][T29173] ref_ctr_offset mismatch. inode: 0x17 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 215.343838][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 215.343854][ T29] audit: type=1400 audit(220.327:5335): avc: denied { create } for pid=29179 comm="syz.4.6463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.398327][ T29] audit: type=1400 audit(220.359:5336): avc: denied { write } for pid=29179 comm="syz.4.6463" path="socket:[63166]" dev="sockfs" ino=63166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.800361][T29207] netlink: 'syz.6.6475': attribute type 1 has an invalid length. [ 215.827791][T29207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.923736][T29248] loop3: detected capacity change from 0 to 512 [ 215.942028][T29248] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.955967][T29254] xt_hashlimit: max too large, truncated to 1048576 [ 215.969538][T29248] EXT4-fs (loop3): 1 truncate cleaned up [ 215.985204][T29248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.029753][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6485'. [ 216.039097][T29248] loop3: detected capacity change from 512 to 64 [ 216.084029][T29265] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.092526][T29265] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.100836][T29265] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.109260][T29265] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.113371][T29248] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop3 ino=15 [ 216.118676][T29265] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 216.129075][T29248] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop3 ino=15 [ 216.148916][ T29] audit: type=1400 audit(221.167:5337): avc: denied { name_bind } for pid=29305 comm="syz.1.6486" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.173465][ T29] audit: type=1400 audit(221.199:5338): avc: denied { unlink } for pid=29247 comm="syz.3.6479" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.173623][T29248] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -12) [ 216.224766][T29310] netlink: 360 bytes leftover after parsing attributes in process `syz.6.6488'. [ 216.255460][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.269153][ T29] audit: type=1400 audit(221.283:5339): avc: denied { rmdir } for pid=26389 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.270008][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.305403][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.321876][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.337366][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.352508][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.366196][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.381895][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.400439][T26389] EXT4-fs warning (device loop3): ext4_empty_dir:3105: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 216.408368][T29321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6493'. [ 216.422937][T29321] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6493'. [ 216.432096][T29321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6493'. [ 216.449893][T29321] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6493'. [ 216.458965][T29321] netlink: 'syz.6.6493': attribute type 6 has an invalid length. [ 216.511133][T29325] program syz.4.6495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.513534][ T29] audit: type=1400 audit(221.545:5340): avc: denied { write } for pid=29324 comm="syz.4.6495" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 216.543639][ T29] audit: type=1400 audit(221.545:5341): avc: denied { open } for pid=29324 comm="syz.4.6495" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 216.662851][T19324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.673271][T19324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.676249][T26389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.746049][T19324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.756641][T19324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.810481][T19324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.821114][T19324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.840659][T29332] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6496'. [ 216.880011][T19324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.890521][T19324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.937204][ T29] audit: type=1326 audit(221.997:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29391 comm="syz.6.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 216.964253][T19324] bridge_slave_1: left allmulticast mode [ 216.970056][T19324] bridge_slave_1: left promiscuous mode [ 216.975886][T19324] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.979377][ T29] audit: type=1326 audit(222.028:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29391 comm="syz.6.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 217.005845][ T29] audit: type=1326 audit(222.028:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29391 comm="syz.6.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 217.031084][T19324] bridge_slave_0: left allmulticast mode [ 217.036973][T19324] bridge_slave_0: left promiscuous mode [ 217.042814][T19324] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.184327][T19324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.199719][T19324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.211819][T19324] bond0 (unregistering): Released all slaves [ 217.262759][T19324] hsr_slave_0: left promiscuous mode [ 217.268614][T19324] hsr_slave_1: left promiscuous mode [ 217.274465][T19324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.281891][T19324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.290371][T19324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.297906][T19324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.310020][T19324] veth1_macvtap: left promiscuous mode [ 217.315744][T19324] veth0_macvtap: left promiscuous mode [ 217.321340][T19324] veth1_vlan: left promiscuous mode [ 217.326639][T19324] veth0_vlan: left promiscuous mode [ 217.401184][T19324] team0 (unregistering): Port device team_slave_1 removed [ 217.411648][T19324] team0 (unregistering): Port device team_slave_0 removed [ 217.574962][T29359] chnl_net:caif_netlink_parms(): no params data found [ 217.623796][T29359] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.631049][T29359] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.638555][T29359] bridge_slave_0: entered allmulticast mode [ 217.645502][T29359] bridge_slave_0: entered promiscuous mode [ 217.652272][T29359] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.659386][T29359] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.667701][T29359] bridge_slave_1: entered allmulticast mode [ 217.675092][T29359] bridge_slave_1: entered promiscuous mode [ 217.695374][T29359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.714414][T29359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.740183][T29359] team0: Port device team_slave_0 added [ 217.746981][T29359] team0: Port device team_slave_1 added [ 217.781288][T29664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29664 comm=syz.6.6535 [ 217.794066][T29664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29664 comm=syz.6.6535 [ 217.816508][T29359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.823565][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.849600][T29359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.883845][T29359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.890844][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.917333][T29359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.956943][T29359] hsr_slave_0: entered promiscuous mode [ 217.963322][T29359] hsr_slave_1: entered promiscuous mode [ 218.153732][T29812] netlink: 'syz.1.6548': attribute type 1 has an invalid length. [ 218.317323][T29359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.346946][T29359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.364762][T29359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.375163][T29359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.437669][T29359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.452261][T29359] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.487901][T19324] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.495038][T19324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.505924][T19324] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.513076][T19324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.613267][T29897] loop4: detected capacity change from 0 to 1024 [ 218.623603][T29359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.623979][T29897] EXT4-fs: Ignoring removed orlov option [ 218.650947][T29897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.719621][T29359] veth0_vlan: entered promiscuous mode [ 218.728163][T29359] veth1_vlan: entered promiscuous mode [ 218.746913][T29359] veth0_macvtap: entered promiscuous mode [ 218.757402][T29359] veth1_macvtap: entered promiscuous mode [ 218.767437][T29359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.777907][T29359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.786753][T29359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.795825][T29359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.804686][T29359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.813472][T29359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.896958][T29924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 218.896958][T29924] program syz.1.6573 not setting count and/or reply_len properly [ 218.951724][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.982388][T29930] loop4: detected capacity change from 0 to 2048 [ 219.000547][T29930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.013183][T29932] loop2: detected capacity change from 0 to 256 [ 219.021537][T29932] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 219.047678][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.091175][T29952] vhci_hcd: invalid port number 96 [ 219.096517][T29952] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 219.111200][T29954] netlink: 87 bytes leftover after parsing attributes in process `syz.4.6582'. [ 219.156491][T29964] netlink: 'syz.2.6587': attribute type 1 has an invalid length. [ 219.225722][T29982] xt_hashlimit: max too large, truncated to 1048576 [ 219.340015][T29995] loop2: detected capacity change from 0 to 512 [ 219.368527][T29995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.386695][T29995] EXT4-fs (loop2): 1 truncate cleaned up [ 219.393125][T29995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.418700][T29995] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.606234][T30041] netlink: 'syz.8.6612': attribute type 1 has an invalid length. [ 219.637755][T30041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.000153][T30116] serio: Serial port ptm0 [ 220.076255][T30126] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 220.076255][T30126] program syz.8.6642 not setting count and/or reply_len properly [ 220.274129][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 220.274144][ T29] audit: type=1400 audit(225.492:5403): avc: denied { write } for pid=30150 comm="syz.8.6633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.380056][T30159] pim6reg9: entered allmulticast mode [ 220.480208][T30175] __nla_validate_parse: 6 callbacks suppressed [ 220.480227][T30175] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6643'. [ 220.502035][T30177] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 220.616928][ T29] audit: type=1326 audit(225.849:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30191 comm="syz.1.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e026ae9a9 code=0x7ffc0000 [ 220.640018][ T29] audit: type=1326 audit(225.849:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30191 comm="syz.1.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e026ae9a9 code=0x7ffc0000 [ 220.667070][ T29] audit: type=1326 audit(225.912:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30191 comm="syz.1.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2e026ae9a9 code=0x7ffc0000 [ 220.692641][ T29] audit: type=1326 audit(225.912:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30191 comm="syz.1.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e026ae9a9 code=0x7ffc0000 [ 220.715845][ T29] audit: type=1326 audit(225.912:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30191 comm="syz.1.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e026ae9a9 code=0x7ffc0000 [ 220.918759][T30244] netlink: 'syz.6.6662': attribute type 3 has an invalid length. [ 221.039203][T30286] bridge_slave_0: left allmulticast mode [ 221.044914][T30286] bridge_slave_0: left promiscuous mode [ 221.050724][T30286] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.068426][T30151] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 221.079935][T30286] bridge_slave_1: left allmulticast mode [ 221.085814][T30286] bridge_slave_1: left promiscuous mode [ 221.091585][T30286] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.103100][ T29] audit: type=1400 audit(226.374:5409): avc: denied { ioctl } for pid=30290 comm="syz.2.6668" path="socket:[66160]" dev="sockfs" ino=66160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.136321][T30286] bond0: (slave bond_slave_0): Releasing backup interface [ 221.148185][T30286] bond0: (slave bond_slave_1): Releasing backup interface [ 221.179978][T30286] team0: Port device team_slave_0 removed [ 221.201182][T30286] team0: Port device team_slave_1 removed [ 221.215093][ T29] audit: type=1400 audit(226.469:5410): avc: denied { relabelfrom } for pid=30301 comm="syz.8.6672" name="" dev="pipefs" ino=65143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 221.218944][T30286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.244520][T30286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.273275][T30286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.280869][T30286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.359124][T30299] wireguard0: entered promiscuous mode [ 221.364887][T30299] wireguard0: entered allmulticast mode [ 221.393664][T30316] bond0: entered promiscuous mode [ 221.398875][T30316] bond_slave_0: entered promiscuous mode [ 221.404759][T30316] bond_slave_1: entered promiscuous mode [ 221.675050][ T29] audit: type=1400 audit(226.973:5411): avc: denied { bind } for pid=30369 comm="syz.1.6688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 221.695259][T30360] loop8: detected capacity change from 0 to 256 [ 221.702170][T30360] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 221.748121][ T29] audit: type=1326 audit(227.046:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30378 comm="syz.2.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b369e9a9 code=0x7ffc0000 [ 221.826963][T30385] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 221.971113][T30416] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6698'. [ 222.274288][T30437] syzkaller0: entered promiscuous mode [ 222.279900][T30437] syzkaller0: entered allmulticast mode [ 222.288068][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6707'. [ 222.289767][T30437] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 222.500939][T30469] netlink: 'syz.1.6719': attribute type 13 has an invalid length. [ 222.515198][T30469] gretap0: refused to change device tx_queue_len [ 222.523459][T30469] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.996408][T30540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30540 comm=syz.2.6732 [ 223.055823][ T3392] kernel write not supported for file /191/clear_refs (pid: 3392 comm: kworker/1:3) [ 223.079754][T30550] xt_hashlimit: max too large, truncated to 1048576 [ 223.117500][T30559] netlink: 'syz.8.6741': attribute type 21 has an invalid length. [ 223.125418][T30559] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6741'. [ 223.137305][T30561] loop4: detected capacity change from 0 to 128 [ 223.445631][T30619] bond0: left promiscuous mode [ 223.450647][T30619] bond_slave_0: left promiscuous mode [ 223.456221][T30619] bond_slave_1: left promiscuous mode [ 223.477003][T30619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.491986][T30619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.550472][T30652] loop4: detected capacity change from 0 to 128 [ 223.561971][T30652] EXT4-fs: Ignoring removed nobh option [ 223.577174][T30652] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.668359][T27089] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.683698][T30670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30670 comm=syz.8.6778 [ 223.747887][T30703] 9pnet: p9_errstr2errno: server reported unknown error len=2 size == 0 [ 223.747887][T30703] [ 223.998815][T30730] vlan2: entered allmulticast mode [ 224.004307][T30730] dummy0: entered allmulticast mode [ 224.234645][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 224.250925][T30760] loop4: detected capacity change from 0 to 512 [ 224.258105][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 224.331039][T30760] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.6805: bg 0: block 5: invalid block bitmap [ 224.357686][T30775] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6812'. [ 224.387986][T30760] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 224.403485][T30760] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6805: invalid indirect mapped block 3 (level 2) [ 224.419758][T30775] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6812'. [ 224.429430][T30760] EXT4-fs (loop4): 2 truncates cleaned up [ 224.438044][T30760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.509654][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.648542][T30821] loop8: detected capacity change from 0 to 1024 [ 224.700257][T30821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.738861][T30821] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.6830: Allocating blocks 481-513 which overlap fs metadata [ 224.770631][T30821] EXT4-fs (loop8): pa ffff888106dcdaf0: logic 352, phys. 465, len 3 [ 224.778760][T30821] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 224.870305][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.982490][T30871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6850'. [ 225.056073][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 225.056092][ T29] audit: type=1326 audit(230.500:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.085300][ T29] audit: type=1326 audit(230.500:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.108201][ T29] audit: type=1326 audit(230.500:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.131007][ T29] audit: type=1326 audit(230.500:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.153886][ T29] audit: type=1326 audit(230.500:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.176801][ T29] audit: type=1326 audit(230.500:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.199746][ T29] audit: type=1326 audit(230.500:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.222895][ T29] audit: type=1326 audit(230.500:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 225.246208][ T29] audit: type=1326 audit(230.500:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.8.6854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 225.312929][ T29] audit: type=1400 audit(230.783:5564): avc: denied { read } for pid=30883 comm="syz.4.6856" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 225.473600][T30897] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6861'. [ 225.587102][T30902] loop4: detected capacity change from 0 to 2048 [ 225.611784][T30902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.847513][T30909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30909 comm=syz.1.6866 [ 225.889916][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.448212][T30977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6891'. [ 226.481196][T30977] bridge0: port 4(macvlan2) entered blocking state [ 226.487809][T30977] bridge0: port 4(macvlan2) entered disabled state [ 226.513937][T30977] macvlan2: entered allmulticast mode [ 226.519439][T30977] bridge0: entered allmulticast mode [ 226.551809][T30977] macvlan2: left allmulticast mode [ 226.556987][T30977] bridge0: left allmulticast mode [ 226.593243][T30979] ipip0: entered promiscuous mode [ 226.603440][T30992] loop4: detected capacity change from 0 to 512 [ 226.620960][T30992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.648036][T30992] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 226.656003][T30992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 226.665895][T30992] System zones: 0-1, 15-15, 18-18, 34-34 [ 226.671810][T30992] EXT4-fs (loop4): orphan cleanup on readonly fs [ 226.710588][T30992] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.725219][T30992] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 226.803402][T31000] SELinux: ebitmap: truncated map [ 226.811106][T30992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6884: bg 0: block 40: padding at end of block bitmap is not set [ 226.847798][T31000] SELinux: failed to load policy [ 226.852913][T30992] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 226.880330][T30992] EXT4-fs (loop4): 1 truncate cleaned up [ 226.886541][T30992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.041799][T31008] SELinux: ebitmap: truncated map [ 227.047384][T31008] SELinux: failed to load policy [ 227.125721][T31013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6900'. [ 227.145382][T31013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6900'. [ 227.172632][T31015] loop8: detected capacity change from 0 to 512 [ 227.189081][T31015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.223844][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.389482][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.439163][T31056] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6910'. [ 227.570104][T31071] pim6reg1: entered promiscuous mode [ 227.575509][T31071] pim6reg1: entered allmulticast mode [ 227.595870][T31077] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6915'. [ 227.632781][T31077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.681647][T31077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.714563][T31077] bond0 (unregistering): Released all slaves [ 227.722007][T31090] netlink: 664 bytes leftover after parsing attributes in process `syz.6.6920'. [ 227.839717][T31129] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6923'. [ 227.972886][T31157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31157 comm=syz.4.6932 [ 228.141009][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6942'. [ 228.167962][T31201] bridge0: port 3(macvlan2) entered blocking state [ 228.174621][T31201] bridge0: port 3(macvlan2) entered disabled state [ 228.190754][T31201] macvlan2: entered allmulticast mode [ 228.196190][T31201] bridge0: entered allmulticast mode [ 228.211619][T31201] macvlan2: left allmulticast mode [ 228.216785][T31201] bridge0: left allmulticast mode [ 228.274413][T31209] pim6reg1: entered promiscuous mode [ 228.280575][T31209] pim6reg1: entered allmulticast mode [ 228.384689][T31220] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 228.859965][T31296] loop8: detected capacity change from 0 to 512 [ 228.867758][T31296] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 228.882809][T31299] atomic_op ffff888102fb1d28 conn xmit_atomic 0000000000000000 [ 228.907722][T31296] EXT4-fs (loop8): 1 truncate cleaned up [ 228.914482][T31296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.928626][T31296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.984802][T31308] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6973'. [ 228.998509][T31308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.011433][T31308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.027190][T31308] bond0 (unregistering): Released all slaves [ 229.144336][T31362] bridge0: port 3(macvlan2) entered blocking state [ 229.151014][T31362] bridge0: port 3(macvlan2) entered disabled state [ 229.165485][T31362] macvlan2: entered allmulticast mode [ 229.170989][T31362] bridge0: entered allmulticast mode [ 229.182321][T31362] macvlan2: left allmulticast mode [ 229.187615][T31362] bridge0: left allmulticast mode [ 229.453044][T31392] netlink: 'syz.8.6993': attribute type 83 has an invalid length. [ 229.488621][T31394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.500810][T31394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.873058][T31386] syz.4.6991 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 229.884099][T31386] CPU: 0 UID: 0 PID: 31386 Comm: syz.4.6991 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 229.884159][T31386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.884172][T31386] Call Trace: [ 229.884179][T31386] [ 229.884188][T31386] __dump_stack+0x1d/0x30 [ 229.884211][T31386] dump_stack_lvl+0xe8/0x140 [ 229.884258][T31386] dump_stack+0x15/0x1b [ 229.884274][T31386] dump_header+0x81/0x220 [ 229.884323][T31386] oom_kill_process+0x334/0x3f0 [ 229.884397][T31386] out_of_memory+0x979/0xb80 [ 229.884433][T31386] try_charge_memcg+0x5e6/0x9e0 [ 229.884515][T31386] charge_memcg+0x51/0xc0 [ 229.884568][T31386] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 229.884611][T31386] __read_swap_cache_async+0x1df/0x350 [ 229.884668][T31386] swap_cluster_readahead+0x277/0x3e0 [ 229.884710][T31386] swapin_readahead+0xde/0x6f0 [ 229.884765][T31386] ? __filemap_get_folio+0x4f7/0x6b0 [ 229.884859][T31386] ? __rcu_read_unlock+0x34/0x70 [ 229.884882][T31386] ? swap_cache_get_folio+0x77/0x200 [ 229.884941][T31386] do_swap_page+0x301/0x2430 [ 229.884964][T31386] ? css_rstat_updated+0xcd/0x5b0 [ 229.885027][T31386] ? __pfx_default_wake_function+0x10/0x10 [ 229.885108][T31386] handle_mm_fault+0x9a5/0x2be0 [ 229.885132][T31386] ? mas_walk+0xf2/0x120 [ 229.885168][T31386] do_user_addr_fault+0x636/0x1090 [ 229.885218][T31386] exc_page_fault+0x62/0xa0 [ 229.885251][T31386] asm_exc_page_fault+0x26/0x30 [ 229.885273][T31386] RIP: 0033:0x7fa7ce9953fc [ 229.885400][T31386] Code: 66 0f 1f 44 00 00 69 3d b6 02 e8 00 e8 03 00 00 48 8d 1d b7 0b 35 00 e8 12 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 229.885418][T31386] RSP: 002b:00007ffd499bda70 EFLAGS: 00010287 [ 229.885435][T31386] RAX: 0000000000000000 RBX: 00007fa7cece7040 RCX: 0000000000000000 [ 229.885450][T31386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555575a0808 [ 229.885465][T31386] RBP: 00007fa7cece7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 229.885479][T31386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000039907 [ 229.885494][T31386] R13: 00007ffd499bdb60 R14: ffffffffffffffff R15: 00007ffd499bdb80 [ 229.885602][T31386] [ 230.099105][T31386] memory: usage 307200kB, limit 307200kB, failcnt 306 [ 230.106639][T31386] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 230.114698][T31386] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 230.122017][T31386] Memory cgroup stats for /syz4: [ 230.122179][T31386] cache 0 [ 230.130182][T31386] rss 0 [ 230.132943][T31386] shmem 0 [ 230.135903][T31386] mapped_file 0 [ 230.139360][T31386] dirty 0 [ 230.142309][T31386] writeback 0 [ 230.145614][T31386] workingset_refault_anon 75 [ 230.150283][T31386] workingset_refault_file 0 [ 230.154831][T31386] swap 376832 [ 230.158201][T31386] swapcached 0 [ 230.161584][T31386] pgpgin 154651 [ 230.165067][T31386] pgpgout 154647 [ 230.168613][T31386] pgfault 156636 [ 230.172183][T31386] pgmajfault 42 [ 230.175646][T31386] inactive_anon 0 [ 230.179278][T31386] active_anon 0 [ 230.182870][T31386] inactive_file 16384 [ 230.186899][T31386] active_file 0 [ 230.190362][T31386] unevictable 0 [ 230.193906][T31386] hierarchical_memory_limit 314572800 [ 230.199350][T31386] hierarchical_memsw_limit 9223372036854771712 [ 230.205530][T31386] total_cache 0 [ 230.209061][T31386] total_rss 0 [ 230.212383][T31386] total_shmem 0 [ 230.215820][T31386] total_mapped_file 0 [ 230.219848][T31386] total_dirty 0 [ 230.223335][T31386] total_writeback 0 [ 230.227121][T31386] total_workingset_refault_anon 75 [ 230.232227][T31386] total_workingset_refault_file 0 [ 230.237226][T31386] total_swap 376832 [ 230.241030][T31386] total_swapcached 0 [ 230.244901][T31386] total_pgpgin 154651 [ 230.248919][T31386] total_pgpgout 154647 [ 230.253077][T31386] total_pgfault 156636 [ 230.257226][T31386] total_pgmajfault 42 [ 230.261334][T31386] total_inactive_anon 0 [ 230.265547][T31386] total_active_anon 0 [ 230.269543][T31386] total_inactive_file 16384 [ 230.274037][T31386] total_active_file 0 [ 230.278066][T31386] total_unevictable 0 [ 230.282078][T31386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6991,pid=31386,uid=0 [ 230.297057][T31386] Memory cgroup out of memory: Killed process 31386 (syz.4.6991) total-vm:95808kB, anon-rss:1052kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 230.360034][T31413] __nla_validate_parse: 1 callbacks suppressed [ 230.360052][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7000'. [ 230.376586][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 230.376602][ T29] audit: type=1326 audit(236.106:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31405 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e026ae9a9 code=0x7fc00000 [ 230.405836][ T29] audit: type=1326 audit(236.106:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31405 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e026ae9a9 code=0x7fc00000 [ 230.448466][T31413] bridge0: port 5(macvlan0) entered blocking state [ 230.455302][T31413] bridge0: port 5(macvlan0) entered disabled state [ 230.473109][T31413] macvlan0: entered allmulticast mode [ 230.478690][T31413] bridge0: entered allmulticast mode [ 230.495292][T31413] macvlan0: left allmulticast mode [ 230.500615][T31413] bridge0: left allmulticast mode [ 230.505286][T31423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7004'. [ 230.511013][ T29] audit: type=1326 audit(236.211:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.537723][ T29] audit: type=1326 audit(236.211:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.560774][ T29] audit: type=1326 audit(236.211:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.583845][ T29] audit: type=1326 audit(236.211:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.606996][ T29] audit: type=1326 audit(236.211:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.629887][ T29] audit: type=1326 audit(236.211:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.653142][ T29] audit: type=1326 audit(236.211:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.676051][ T29] audit: type=1326 audit(236.211:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.8.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 230.719998][T31423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.754072][T31423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.775978][T31423] bond0 (unregistering): Released all slaves [ 230.998841][T31487] loop4: detected capacity change from 0 to 256 [ 230.999975][T31490] netlink: 'syz.8.7016': attribute type 1 has an invalid length. [ 231.036989][T31487] FAT-fs (loop4): Directory bread(block 64) failed [ 231.057502][T31491] netlink: 'syz.6.7017': attribute type 13 has an invalid length. [ 231.058053][T31487] FAT-fs (loop4): Directory bread(block 65) failed [ 231.095996][T31487] FAT-fs (loop4): Directory bread(block 66) failed [ 231.103505][T31487] FAT-fs (loop4): Directory bread(block 67) failed [ 231.103548][T31490] netlink: 'syz.8.7016': attribute type 1 has an invalid length. [ 231.118403][T31491] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.126935][T31491] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.133186][T31487] FAT-fs (loop4): Directory bread(block 68) failed [ 231.135473][T31491] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.142069][T31487] FAT-fs (loop4): Directory bread(block 69) failed [ 231.150422][T31491] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.167645][T31487] FAT-fs (loop4): Directory bread(block 70) failed [ 231.174308][T31487] FAT-fs (loop4): Directory bread(block 71) failed [ 231.180948][T31487] FAT-fs (loop4): Directory bread(block 72) failed [ 231.187471][T31487] FAT-fs (loop4): Directory bread(block 73) failed [ 231.214918][T31529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7020'. [ 231.245327][T31535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.254143][T31535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.348882][T31549] loop4: detected capacity change from 0 to 1024 [ 231.451994][T31549] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 231.473445][T31549] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 231.525426][T31565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=31565 comm=syz.4.7030 [ 231.547021][T31565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=31565 comm=syz.4.7030 [ 231.604773][T19344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.670816][T19344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.727146][T19344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.795005][T19344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.932229][T31586] chnl_net:caif_netlink_parms(): no params data found [ 231.963599][T19344] bridge_slave_1: left allmulticast mode [ 231.969278][T19344] bridge_slave_1: left promiscuous mode [ 231.975178][T19344] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.994804][T19344] bridge_slave_0: left allmulticast mode [ 232.000628][T19344] bridge_slave_0: left promiscuous mode [ 232.006317][T19344] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.183567][T31586] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.190731][T31586] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.200528][T31586] bridge_slave_0: entered allmulticast mode [ 232.207576][T31586] bridge_slave_0: entered promiscuous mode [ 232.221708][T19344] hsr_slave_0: left promiscuous mode [ 232.227753][T19344] hsr_slave_1: left promiscuous mode [ 232.233742][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.241266][T19344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.251198][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.258677][T19344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.273343][T19344] veth1_macvtap: left promiscuous mode [ 232.282166][T19344] veth0_macvtap: left promiscuous mode [ 232.287925][T19344] veth1_vlan: left promiscuous mode [ 232.293202][T19344] veth0_vlan: left promiscuous mode [ 232.367420][T19344] team0 (unregistering): Port device team_slave_1 removed [ 232.380939][T19344] team0 (unregistering): Port device team_slave_0 removed [ 232.418255][T31586] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.425528][T31586] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.433854][T31586] bridge_slave_1: entered allmulticast mode [ 232.442496][T31586] bridge_slave_1: entered promiscuous mode [ 232.457022][T31798] bond1: entered promiscuous mode [ 232.462226][T31798] bond1: entered allmulticast mode [ 232.467840][T31798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.478634][T31798] bond1 (unregistering): Released all slaves [ 232.508161][T31586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.522699][T31586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.575209][T31586] team0: Port device team_slave_0 added [ 232.587236][T31586] team0: Port device team_slave_1 added [ 232.617023][T31586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.624082][T31586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.650134][T31586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.661519][T31586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.668581][T31586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.694581][T31586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.739477][T31986] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7065'. [ 232.754415][T31986] bond0 (unregistering): Released all slaves [ 232.773548][T31586] hsr_slave_0: entered promiscuous mode [ 232.779474][T31586] hsr_slave_1: entered promiscuous mode [ 233.135137][T31586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.145184][T31586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.155220][T31586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.164194][T31586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.193999][T31586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.202668][T32157] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7073'. [ 233.216214][T31586] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.226418][T19344] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.233553][T19344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.245230][T19326] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.252377][T19326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.338651][T31586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.421775][T31586] veth0_vlan: entered promiscuous mode [ 233.431154][T31586] veth1_vlan: entered promiscuous mode [ 233.449248][T31586] veth0_macvtap: entered promiscuous mode [ 233.459145][T31586] veth1_macvtap: entered promiscuous mode [ 233.470377][T31586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.479553][T31586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.491212][T31586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.500118][T31586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.508853][T31586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.517594][T31586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.552233][T32194] netlink: 620 bytes leftover after parsing attributes in process `syz.4.7084'. [ 233.606489][T32207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7089'. [ 233.638627][T32208] loop4: detected capacity change from 0 to 128 [ 233.647134][T32208] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.688855][T32215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7090'. [ 233.765871][T27089] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.780530][T32225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7094'. [ 233.827511][T32225] bridge0: port 5(macvlan0) entered blocking state [ 233.834138][T32225] bridge0: port 5(macvlan0) entered disabled state [ 233.842510][T32225] macvlan0: entered allmulticast mode [ 233.847979][T32225] bridge0: entered allmulticast mode [ 233.854348][T32225] macvlan0: left allmulticast mode [ 233.859682][T32225] bridge0: left allmulticast mode [ 234.001181][T32241] Falling back ldisc for ttyS3. [ 234.380539][T32286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7113'. [ 234.432574][T32286] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 234.695842][T32305] bridge_slave_1: left allmulticast mode [ 234.701565][T32305] bridge_slave_1: left promiscuous mode [ 234.707881][T32305] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.735347][T32305] bridge_slave_0: left allmulticast mode [ 234.741151][T32305] bridge_slave_0: left promiscuous mode [ 234.747043][T32305] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.832724][T32317] random: crng reseeded on system resumption [ 234.871481][T32328] netlink: 'syz.1.7129': attribute type 1 has an invalid length. [ 234.961815][T32243] syz.8.7102 (32243) used greatest stack depth: 5904 bytes left [ 235.036806][T32339] loop4: detected capacity change from 0 to 2048 [ 235.102628][T32339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.127146][T32351] netlink: 'syz.6.7136': attribute type 1 has an invalid length. [ 235.137150][T32339] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 235.166196][T32339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 235.178820][T32339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.178820][T32339] [ 235.188643][T32339] EXT4-fs (loop4): Total free blocks count 0 [ 235.194716][T32339] EXT4-fs (loop4): Free/Dirty block details [ 235.200627][T32339] EXT4-fs (loop4): free_blocks=66060288 [ 235.206345][T32339] EXT4-fs (loop4): dirty_blocks=32 [ 235.211715][T32339] EXT4-fs (loop4): Block reservation details [ 235.217772][T32339] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 235.224399][T32349] loop8: detected capacity change from 0 to 2048 [ 235.242423][T32349] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.256265][T19314] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 235.304691][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.338639][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 235.338655][ T29] audit: type=1400 audit(241.313:5867): avc: denied { cpu } for pid=32374 comm="syz.8.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.364081][ T29] audit: type=1400 audit(241.323:5868): avc: denied { write } for pid=32374 comm="syz.8.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.387952][T32383] ip6tnl0: entered promiscuous mode [ 235.393849][T32381] ip6tnl0: left promiscuous mode [ 235.768258][ T29] audit: type=1400 audit(241.764:5869): avc: denied { create } for pid=32412 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.841759][ T29] audit: type=1400 audit(241.838:5870): avc: denied { write } for pid=32412 comm="syz.6.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.139244][ T29] audit: type=1400 audit(242.153:5871): avc: denied { setopt } for pid=32437 comm="syz.6.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.166399][ T29] audit: type=1400 audit(242.153:5872): avc: denied { connect } for pid=32437 comm="syz.6.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.226612][ T29] audit: type=1400 audit(242.247:5873): avc: denied { mount } for pid=32443 comm="syz.1.7170" name="/" dev="ramfs" ino=70254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 236.314837][ T29] audit: type=1400 audit(242.321:5874): avc: granted { setsecparam } for pid=32448 comm="syz.8.7173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 236.348120][T32452] netlink: 'syz.6.7175': attribute type 10 has an invalid length. [ 236.357914][T32452] dummy0: left allmulticast mode [ 236.362897][T32452] dummy0: left promiscuous mode [ 236.368018][T32452] bridge0: port 4(dummy0) entered disabled state [ 236.369363][ T29] audit: type=1400 audit(242.394:5875): avc: denied { getopt } for pid=32455 comm="syz.8.7176" lport=53187 faddr=::ffff:100.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 236.400698][T32452] : (slave dummy0): Enslaving as an active interface with an up link [ 236.628949][T32476] syzkaller0: entered allmulticast mode [ 237.005885][ T29] audit: type=1400 audit(243.066:5876): avc: denied { mount } for pid=32534 comm="syz.1.7198" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 237.124961][T32537] Falling back ldisc for ttyS3. [ 237.281801][T32558] bond4: entered promiscuous mode [ 237.287042][T32558] bond4: entered allmulticast mode [ 237.296398][T32558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.319580][T32558] bond4 (unregistering): Released all slaves [ 237.408809][T32629] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 237.408809][T32629] program syz.1.7209 not setting count and/or reply_len properly [ 237.446836][T32633] __nla_validate_parse: 2 callbacks suppressed [ 237.446855][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7211'. [ 237.467303][T32633] bridge0: port 1(macvlan2) entered blocking state [ 237.474086][T32633] bridge0: port 1(macvlan2) entered disabled state [ 237.490428][T32633] macvlan2: entered allmulticast mode [ 237.495929][T32633] bridge0: entered allmulticast mode [ 237.504207][T32633] macvlan2: left allmulticast mode [ 237.509466][T32633] bridge0: left allmulticast mode [ 237.517430][T32641] netlink: 'syz.4.7214': attribute type 10 has an invalid length. [ 237.613739][T32653] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7219'. [ 237.648967][ T3367] kernel write not supported for file /1275/attr/exec (pid: 3367 comm: kworker/1:2) [ 237.697110][T32669] bond0: entered promiscuous mode [ 237.702182][T32669] bond0: entered allmulticast mode [ 237.707890][T32669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.733485][T32669] bond0 (unregistering): Released all slaves [ 237.895791][ T307] loop4: detected capacity change from 0 to 128 [ 237.912586][ T307] EXT4-fs: Ignoring removed oldalloc option [ 237.924383][ T307] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.947070][ T328] 9pnet_fd: Insufficient options for proto=fd [ 237.964744][T19314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.029590][T19314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.047310][T27089] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.090205][T19314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.141750][ T351] bond2: entered promiscuous mode [ 238.147210][ T351] bond2: entered allmulticast mode [ 238.152904][ T351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.165502][ T351] bond2 (unregistering): Released all slaves [ 238.207702][ T426] ref_ctr increment failed for inode: 0x46d offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810ace2680 [ 238.221791][ T425] uprobe: syz.1.7254:425 failed to unregister, leaking uprobe [ 238.232584][T19314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.245920][ T428] IPVS: stopping master sync thread 432 ... [ 238.322035][ T330] chnl_net:caif_netlink_parms(): no params data found [ 238.490196][T19314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.501290][T19314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.515668][T19314] bond0 (unregistering): Released all slaves [ 238.584666][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.592083][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.601690][ T330] bridge_slave_0: entered allmulticast mode [ 238.608506][ T330] bridge_slave_0: entered promiscuous mode [ 238.623192][T19314] hsr_slave_0: left promiscuous mode [ 238.631137][ T634] netlink: 'syz.8.7270': attribute type 1 has an invalid length. [ 238.639059][T19314] hsr_slave_1: left promiscuous mode [ 238.645945][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.653528][T19314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.669219][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.676719][T19314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.719371][T19314] veth1_macvtap: left promiscuous mode [ 238.740616][T19314] veth0_macvtap: left promiscuous mode [ 238.747320][T19314] veth1_vlan: left promiscuous mode [ 238.752635][T19314] veth0_vlan: left promiscuous mode [ 238.877418][T19314] team0 (unregistering): Port device team_slave_1 removed [ 238.897567][T19314] team0 (unregistering): Port device team_slave_0 removed [ 238.953273][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.960533][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.968975][ T330] bridge_slave_1: entered allmulticast mode [ 238.977360][ T330] bridge_slave_1: entered promiscuous mode [ 238.983734][ T644] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7273'. [ 238.993176][ T640] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7274'. [ 239.011559][ T662] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.019803][ T662] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.028186][ T662] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.036473][ T662] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.074669][ T330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.111697][ T330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.162591][ T330] team0: Port device team_slave_0 added [ 239.193226][ T330] team0: Port device team_slave_1 added [ 239.225960][ T750] loop8: detected capacity change from 0 to 128 [ 239.237201][ T750] EXT4-fs: Ignoring removed nobh option [ 239.244103][ T330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.251256][ T330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.277401][ T330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.292423][ T330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.299521][ T330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.325546][ T330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.365844][ T330] hsr_slave_0: entered promiscuous mode [ 239.372215][ T750] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.374222][ T330] hsr_slave_1: entered promiscuous mode [ 239.393922][ T750] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.505874][ T3392] kernel write not supported for file /430/attr/exec (pid: 3392 comm: kworker/1:3) [ 239.576292][ T886] netlink: 'syz.8.7306': attribute type 10 has an invalid length. [ 239.584237][ T886] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7306'. [ 239.595016][ T884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.609734][ T886] batman_adv: batadv0: Adding interface: macvlan0 [ 239.616497][ T886] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.642817][ T886] batman_adv: batadv0: Interface activated: macvlan0 [ 239.674005][ T884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.694707][ T896] loop8: detected capacity change from 0 to 1024 [ 239.702104][ T896] EXT4-fs: Ignoring removed orlov option [ 239.707904][ T896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.736400][ T896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.803025][ T884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.814001][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.837253][ T913] netlink: 376 bytes leftover after parsing attributes in process `syz.8.7309'. [ 239.879527][ T884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.915576][ T917] loop8: detected capacity change from 0 to 512 [ 239.927892][ T917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.947248][ T917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7311'. [ 239.962997][ T330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.982234][ T330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.002290][ T884] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.011582][ T330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.014296][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.033649][ T884] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.045166][ T330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.059705][ T884] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.077425][ T884] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.154614][ T330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.171608][ T330] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.185500][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.192634][T19313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.219949][ T330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.230560][ T330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.247589][T19313] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.254986][T19313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.350978][ T330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.479285][ T1002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7321'. [ 240.511965][ T1005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7322'. [ 240.553065][ T330] veth0_vlan: entered promiscuous mode [ 240.570524][ T330] veth1_vlan: entered promiscuous mode [ 240.598517][ T330] veth0_macvtap: entered promiscuous mode [ 240.611971][ T330] veth1_macvtap: entered promiscuous mode [ 240.643869][ T330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.689707][ T330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.711043][ T330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.719880][ T330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.728681][ T330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.737514][ T330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.763098][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 240.763114][ T29] audit: type=1326 audit(247.003:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 240.821681][ T29] audit: type=1326 audit(247.003:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 240.844615][ T29] audit: type=1326 audit(247.003:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 240.867642][ T29] audit: type=1326 audit(247.003:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 240.971045][ T1033] openvswitch: netlink: Message has 6 unknown bytes. [ 241.150671][ T29] audit: type=1400 audit(247.412:5977): avc: denied { create } for pid=1056 comm="syz.8.7343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 241.316110][ T29] audit: type=1400 audit(247.444:5978): avc: denied { ioctl } for pid=1056 comm="syz.8.7343" path="socket:[72066]" dev="sockfs" ino=72066 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 241.375118][ T1066] rdma_op ffff88813cad4980 conn xmit_rdma 0000000000000000 [ 241.428292][ T1070] ref_ctr increment failed for inode: 0x1e80 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810ace1600 [ 241.447122][ T1064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7346'. [ 241.463366][ T1069] uprobe: syz.6.7349:1069 failed to unregister, leaking uprobe [ 241.485140][ T1064] macvtap2: entered promiscuous mode [ 241.490753][ T1064] macvtap2: entered allmulticast mode [ 241.549116][ T29] audit: type=1326 audit(247.832:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1079 comm="syz.8.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 241.584387][ T29] audit: type=1326 audit(247.864:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1079 comm="syz.8.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 241.607342][ T29] audit: type=1326 audit(247.864:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1079 comm="syz.8.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 241.630290][ T29] audit: type=1326 audit(247.864:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1079 comm="syz.8.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca39be9a9 code=0x7ffc0000 [ 242.023575][ T1121] Cannot find del_set index 0 as target [ 243.370520][ T1181] loop4: detected capacity change from 0 to 1024 [ 243.512742][ T1181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.557199][ T1181] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 243.586180][ T1181] EXT4-fs (loop4): Remounting filesystem read-only [ 243.609547][T19314] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 243.655377][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.368815][ T1259] vlan0: entered allmulticast mode [ 244.373984][ T1259] : entered allmulticast mode [ 244.378907][ T1259] bond_slave_0: entered allmulticast mode [ 244.384658][ T1254] SELinux: ebitmap: truncated map [ 244.387334][ T1254] SELinux: failed to load policy [ 244.389684][ T1259] bond_slave_1: entered allmulticast mode [ 244.389704][ T1259] geneve1: entered allmulticast mode [ 244.441804][ T1259] dummy0: entered allmulticast mode [ 244.739133][ T1300] loop8: detected capacity change from 0 to 1024 [ 244.749214][ T1300] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 244.781177][ T1309] serio: Serial port ptm0 [ 244.831126][ T1320] __nla_validate_parse: 3 callbacks suppressed [ 244.831145][ T1320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7441'. [ 244.859076][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7442'. [ 244.869979][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7442'. [ 244.890033][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7445'. [ 244.899784][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7445'. [ 244.918751][ T1332] loop8: detected capacity change from 0 to 128 [ 244.934578][ T1332] EXT4-fs: Ignoring removed nobh option [ 244.946243][ T1332] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.195869][T19360] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.767805][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 245.767821][ T29] audit: type=1400 audit(252.241:6090): avc: denied { write } for pid=1397 comm="syz.1.7464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.793865][ T29] audit: type=1400 audit(252.241:6091): avc: denied { read } for pid=1397 comm="syz.1.7464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.835287][ T1402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7466'. [ 245.861805][ T29] audit: type=1400 audit(252.367:6092): avc: denied { setopt } for pid=1403 comm="syz.1.7467" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.924078][ T29] audit: type=1400 audit(252.367:6093): avc: denied { create } for pid=1403 comm="syz.1.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.943885][ T29] audit: type=1400 audit(252.367:6094): avc: denied { write } for pid=1403 comm="syz.1.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.963405][ T29] audit: type=1400 audit(252.367:6095): avc: denied { nlmsg_write } for pid=1403 comm="syz.1.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.983672][ T29] audit: type=1400 audit(252.399:6096): avc: denied { bind } for pid=1407 comm="syz.4.7470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.002487][ T29] audit: type=1400 audit(252.399:6097): avc: denied { name_bind } for pid=1407 comm="syz.4.7470" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 246.023872][ T29] audit: type=1400 audit(252.399:6098): avc: denied { node_bind } for pid=1407 comm="syz.4.7470" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 246.045342][ T29] audit: type=1400 audit(252.399:6099): avc: denied { name_connect } for pid=1407 comm="syz.4.7470" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 246.074912][ T1412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.150162][ T1412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.232034][ T1412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.287903][ T1412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.325738][ T1431] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 246.381034][ T1412] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.411747][ T1412] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.456099][ T1412] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.477722][ T1412] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.534307][ T1471] loop4: detected capacity change from 0 to 1024 [ 246.562499][ T1471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.602399][ T1471] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.7489: Allocating blocks 385-513 which overlap fs metadata [ 246.633819][ T1471] EXT4-fs (loop4): pa ffff888106e8a460: logic 16, phys. 129, len 24 [ 246.641962][ T1471] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 246.668754][ T1486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7492'. [ 246.768662][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.806583][ T1501] Invalid ELF header magic: != ELF [ 246.928695][ T1518] netlink: 'syz.1.7503': attribute type 10 has an invalid length. [ 246.936644][ T1518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7503'. [ 246.963922][ T1518] dummy0: entered promiscuous mode [ 246.970240][ T1518] bridge0: port 1(dummy0) entered blocking state [ 246.976737][ T1518] bridge0: port 1(dummy0) entered disabled state [ 247.047597][ T1518] dummy0: entered allmulticast mode [ 247.129042][ T1518] bridge0: port 1(dummy0) entered blocking state [ 247.135507][ T1518] bridge0: port 1(dummy0) entered forwarding state [ 247.306747][ T1561] loop8: detected capacity change from 0 to 1024 [ 247.339792][ T1565] Invalid ELF header magic: != ELF [ 247.350774][ T1561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.393889][ T1572] binfmt_misc: register: failed to install interpreter file ./file0 [ 247.410456][ T1561] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.7518: Allocating blocks 385-513 which overlap fs metadata [ 247.453048][ T1561] EXT4-fs (loop8): pa ffff888106e8a4d0: logic 16, phys. 129, len 24 [ 247.461277][ T1561] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 247.496075][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.670341][ T1603] program syz.8.7530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.682566][T19313] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x35 [ 247.904710][ T1631] loop4: detected capacity change from 0 to 164 [ 247.913449][ T1631] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 247.923328][ T1631] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 247.932830][ T1631] Symlink component flag not implemented [ 247.938524][ T1631] Symlink component flag not implemented [ 247.950274][ T1631] Symlink component flag not implemented (7) [ 247.956415][ T1631] Symlink component flag not implemented (116) [ 248.142054][ T1653] loop4: detected capacity change from 0 to 164 [ 248.149606][ T1653] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 248.160181][ T1653] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 248.172067][ T1653] Symlink component flag not implemented [ 248.177800][ T1653] Symlink component flag not implemented [ 248.184207][ T1653] Symlink component flag not implemented (7) [ 248.190242][ T1653] Symlink component flag not implemented (116) [ 248.916831][ T1643] syz.1.7542 (1643) used greatest stack depth: 5896 bytes left [ 249.223279][ T1722] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7572'. [ 249.341017][ T1736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7579'. [ 249.653052][ T1777] team0: Port device team_slave_0 removed [ 249.734456][ T1785] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7598'. [ 249.838817][ T1803] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7605'. [ 249.878004][ T1803] bridge0: entered promiscuous mode [ 249.883770][ T1803] bridge0: port 4(macvlan0) entered blocking state [ 249.890598][ T1803] bridge0: port 4(macvlan0) entered disabled state [ 249.907989][ T1814] serio: Serial port ptm0 [ 249.913178][ T1803] macvlan0: entered allmulticast mode [ 249.918754][ T1803] bridge0: entered allmulticast mode [ 249.925742][ T1803] macvlan0: left allmulticast mode [ 249.930982][ T1803] bridge0: left allmulticast mode [ 249.940368][ T1803] bridge0: left promiscuous mode [ 250.102020][ T1840] sd 0:0:1:0: device reset [ 250.116134][ T1846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7620'. [ 250.162132][ T1854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7624'. [ 250.251164][ T1869] serio: Serial port ptm0 [ 250.531045][ T1911] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.581285][ T1911] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.583829][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 250.583845][ T29] audit: type=1400 audit(257.312:6317): avc: denied { create } for pid=1910 comm="syz.6.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.633367][ T29] audit: type=1400 audit(257.364:6318): avc: denied { write } for pid=1910 comm="syz.6.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.653134][ T29] audit: type=1400 audit(257.364:6319): avc: denied { nlmsg_write } for pid=1910 comm="syz.6.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.674444][ T1911] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.752253][ T1911] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.814513][ T29] audit: type=1400 audit(257.564:6320): avc: denied { create } for pid=1953 comm="syz.0.7651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.833649][ T1957] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.836719][ T29] audit: type=1400 audit(257.585:6321): avc: denied { bind } for pid=1953 comm="syz.0.7651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.841903][ T1957] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 250.859875][ T29] audit: type=1400 audit(257.585:6322): avc: denied { read } for pid=1953 comm="syz.0.7651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.888662][ T29] audit: type=1326 audit(257.627:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 250.911649][ T29] audit: type=1326 audit(257.627:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 250.934692][ T29] audit: type=1326 audit(257.637:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 250.957689][ T29] audit: type=1326 audit(257.637:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 250.987636][ T1911] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.014358][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.021875][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.029312][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.030649][ T1911] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.037047][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.052777][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.060219][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.067921][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.072598][ T1962] serio: Serial port ptm0 [ 251.075532][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.087289][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.094850][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.102435][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.110069][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.117664][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.129349][ T1911] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.138157][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.145581][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.151355][ T1911] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.153057][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.168551][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.176065][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.183468][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.190909][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.198329][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.205766][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.213180][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.220657][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.228144][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.235583][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.242998][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.250488][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.261467][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 251.283475][ T1985] loop8: detected capacity change from 0 to 1024 [ 251.292406][ T1985] EXT4-fs: Ignoring removed oldalloc option [ 251.328781][ T2003] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 251.362399][ T1985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.415535][ T2002] vhci_hcd: invalid port number 96 [ 251.420727][ T2002] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 251.448323][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.496051][ T2044] loop8: detected capacity change from 0 to 128 [ 251.558814][ T2051] SELinux: failed to load policy [ 251.584834][ T2044] syz.8.7667: attempt to access beyond end of device [ 251.584834][ T2044] loop8: rw=0, sector=97, nr_sectors = 120 limit=128 [ 251.662715][T19326] kworker/u8:37: attempt to access beyond end of device [ 251.662715][T19326] loop8: rw=1, sector=217, nr_sectors = 824 limit=128 [ 251.802380][ T2101] program syz.8.7688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.803210][ T2104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7689'. [ 251.826217][ T2104] bridge0: entered promiscuous mode [ 251.833408][ T2104] bridge0: port 3(macvlan2) entered blocking state [ 251.839962][ T2104] bridge0: port 3(macvlan2) entered disabled state [ 251.852808][ T2101] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 251.868771][ T2104] macvlan2: entered allmulticast mode [ 251.874260][ T2104] bridge0: entered allmulticast mode [ 251.905710][ T2104] macvlan2: left allmulticast mode [ 251.910916][ T2104] bridge0: left allmulticast mode [ 251.935033][ T2104] bridge0: left promiscuous mode [ 252.243440][ T2139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.314379][ T2139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.369282][ T2139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.421986][ T2183] serio: Serial port ptm0 [ 252.430462][ T2139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.509170][ T2195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=2195 comm=syz.1.7720 [ 252.529296][ T2139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.542632][ T2139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.558786][ T2139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.579463][ T2139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.660110][ T2217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7718'. [ 252.670230][ T2217] IPVS: Error joining to the multicast group [ 252.708141][ T2221] loop8: detected capacity change from 0 to 512 [ 252.722898][ T2221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.736869][ T2221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.768266][ T2221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.783426][ T2221] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 252.908517][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.983165][ T2254] loop8: detected capacity change from 0 to 2048 [ 252.996673][ T2254] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.7730: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 253.031035][ T2254] EXT4-fs (loop8): Remounting filesystem read-only [ 253.037656][ T2254] EXT4-fs (loop8): get root inode failed [ 253.043342][ T2254] EXT4-fs (loop8): mount failed [ 253.122144][ T2287] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7739'. [ 253.136193][ T2287] bridge0: entered promiscuous mode [ 253.144490][ T2287] bridge0: port 4(macvlan2) entered blocking state [ 253.151240][ T2287] bridge0: port 4(macvlan2) entered disabled state [ 253.161093][ T2287] macvlan2: entered allmulticast mode [ 253.166676][ T2287] bridge0: entered allmulticast mode [ 253.182183][ T2287] macvlan2: left allmulticast mode [ 253.187621][ T2287] bridge0: left allmulticast mode [ 253.203037][ T2287] bridge0: left promiscuous mode [ 253.236622][ T2301] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7744'. [ 253.255915][ T2301] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 253.270985][ T2301] 0ªî{X¹¦: entered allmulticast mode [ 253.277358][ T2301] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 253.419943][ T2349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7756'. [ 253.437163][ T2349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7756'. [ 253.579520][ T2362] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.656877][ T2362] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.758967][ T2362] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.801296][ T2362] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.854230][ T2362] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.866492][ T2362] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.880109][ T2362] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.886393][ T2393] netlink: 'syz.1.7766': attribute type 4 has an invalid length. [ 253.892922][ T2362] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.159595][ T2433] bridge0: entered promiscuous mode [ 254.166769][ T2433] bridge0: port 3(macvlan2) entered blocking state [ 254.173331][ T2433] bridge0: port 3(macvlan2) entered disabled state [ 254.180219][ T2433] macvlan2: entered allmulticast mode [ 254.185725][ T2433] bridge0: entered allmulticast mode [ 254.191892][ T2433] macvlan2: left allmulticast mode [ 254.197076][ T2433] bridge0: left allmulticast mode [ 254.202532][ T2433] bridge0: left promiscuous mode [ 254.380703][ T2461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 254.509358][ T2498] __nla_validate_parse: 2 callbacks suppressed [ 254.509376][ T2498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7791'. [ 254.549107][ T2498] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.557381][ T2498] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.565586][ T2498] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.573926][ T2498] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.582946][ T2498] vxlan0: entered promiscuous mode [ 255.180478][ T2506] syz.1.7795 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 255.195151][ T2506] CPU: 0 UID: 0 PID: 2506 Comm: syz.1.7795 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 255.195187][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.195208][ T2506] Call Trace: [ 255.195213][ T2506] [ 255.195221][ T2506] __dump_stack+0x1d/0x30 [ 255.195243][ T2506] dump_stack_lvl+0xe8/0x140 [ 255.195309][ T2506] dump_stack+0x15/0x1b [ 255.195329][ T2506] dump_header+0x81/0x220 [ 255.195372][ T2506] oom_kill_process+0x334/0x3f0 [ 255.195411][ T2506] out_of_memory+0x979/0xb80 [ 255.195515][ T2506] try_charge_memcg+0x5e6/0x9e0 [ 255.195635][ T2506] obj_cgroup_charge_pages+0xa6/0x150 [ 255.195674][ T2506] __memcg_kmem_charge_page+0x9f/0x170 [ 255.195705][ T2506] __alloc_frozen_pages_noprof+0x188/0x360 [ 255.195750][ T2506] alloc_pages_mpol+0xb3/0x250 [ 255.195795][ T2506] alloc_pages_noprof+0x90/0x130 [ 255.195833][ T2506] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 255.195880][ T2506] __kvmalloc_node_noprof+0x30f/0x4e0 [ 255.195947][ T2506] ? ip_set_alloc+0x1f/0x30 [ 255.195977][ T2506] ? ip_set_alloc+0x1f/0x30 [ 255.196076][ T2506] ? __kmalloc_cache_noprof+0x189/0x320 [ 255.196171][ T2506] ip_set_alloc+0x1f/0x30 [ 255.196205][ T2506] hash_netiface_create+0x282/0x740 [ 255.196323][ T2506] ? __pfx_hash_netiface_create+0x10/0x10 [ 255.196355][ T2506] ip_set_create+0x3c9/0x960 [ 255.196441][ T2506] ? __nla_parse+0x40/0x60 [ 255.196476][ T2506] nfnetlink_rcv_msg+0x4c6/0x590 [ 255.196527][ T2506] ? selinux_capable+0x1f9/0x270 [ 255.196619][ T2506] netlink_rcv_skb+0x120/0x220 [ 255.196659][ T2506] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 255.196737][ T2506] nfnetlink_rcv+0x16b/0x1690 [ 255.196768][ T2506] ? __kfree_skb+0x109/0x150 [ 255.196800][ T2506] ? nlmon_xmit+0x4f/0x60 [ 255.196827][ T2506] ? consume_skb+0x49/0x150 [ 255.196910][ T2506] ? nlmon_xmit+0x4f/0x60 [ 255.196934][ T2506] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 255.196973][ T2506] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 255.197013][ T2506] ? __dev_queue_xmit+0x182/0x1fb0 [ 255.197129][ T2506] ? ref_tracker_free+0x37d/0x3e0 [ 255.197169][ T2506] ? __netlink_deliver_tap+0x4dc/0x500 [ 255.197289][ T2506] netlink_unicast+0x5a8/0x680 [ 255.197321][ T2506] netlink_sendmsg+0x58b/0x6b0 [ 255.197342][ T2506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.197363][ T2506] __sock_sendmsg+0x145/0x180 [ 255.197468][ T2506] ____sys_sendmsg+0x31e/0x4e0 [ 255.197517][ T2506] ___sys_sendmsg+0x17b/0x1d0 [ 255.197561][ T2506] __x64_sys_sendmsg+0xd4/0x160 [ 255.197631][ T2506] x64_sys_call+0x2999/0x2fb0 [ 255.197657][ T2506] do_syscall_64+0xd2/0x200 [ 255.197746][ T2506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.197778][ T2506] ? clear_bhb_loop+0x40/0x90 [ 255.197806][ T2506] ? clear_bhb_loop+0x40/0x90 [ 255.197834][ T2506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.197879][ T2506] RIP: 0033:0x7f2e026ae9a9 [ 255.197899][ T2506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.197922][ T2506] RSP: 002b:00007f2e00d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.197945][ T2506] RAX: ffffffffffffffda RBX: 00007f2e028d5fa0 RCX: 00007f2e026ae9a9 [ 255.197996][ T2506] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 255.198012][ T2506] RBP: 00007f2e02730ca1 R08: 0000000000000000 R09: 0000000000000000 [ 255.198076][ T2506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.198091][ T2506] R13: 0000000000000000 R14: 00007f2e028d5fa0 R15: 00007ffde9229ce8 [ 255.198114][ T2506] [ 255.198156][ T2506] memory: usage 307200kB, limit 307200kB, failcnt 197 [ 255.551975][ T2506] memory+swap: usage 307268kB, limit 9007199254740988kB, failcnt 0 [ 255.559917][ T2506] kmem: usage 306872kB, limit 9007199254740988kB, failcnt 0 [ 255.567235][ T2506] Memory cgroup stats for /syz1: [ 255.571537][ T2506] cache 8192 [ 255.579792][ T2506] rss 114688 [ 255.582997][ T2506] shmem 0 [ 255.585960][ T2506] mapped_file 8192 [ 255.589751][ T2506] dirty 4096 [ 255.593057][ T2506] writeback 36864 [ 255.596713][ T2506] workingset_refault_anon 1101 [ 255.601485][ T2506] workingset_refault_file 140 [ 255.606318][ T2506] swap 229376 [ 255.609691][ T2506] swapcached 40960 [ 255.613424][ T2506] pgpgin 99710 [ 255.617011][ T2506] pgpgout 99668 [ 255.620502][ T2506] pgfault 128621 [ 255.624379][ T2506] pgmajfault 194 [ 255.627960][ T2506] inactive_anon 110592 [ 255.632074][ T2506] active_anon 0 [ 255.635606][ T2506] inactive_file 0 [ 255.639336][ T2506] active_file 16384 [ 255.643171][ T2506] unevictable 0 [ 255.646648][ T2506] hierarchical_memory_limit 314572800 [ 255.652060][ T2506] hierarchical_memsw_limit 9223372036854771712 [ 255.658393][ T2506] total_cache 8192 [ 255.662467][ T2506] total_rss 114688 [ 255.666268][ T2506] total_shmem 0 [ 255.669828][ T2506] total_mapped_file 8192 [ 255.674184][ T2506] total_dirty 4096 [ 255.678013][ T2506] total_writeback 36864 [ 255.682179][ T2506] total_workingset_refault_anon 1101 [ 255.687541][ T2506] total_workingset_refault_file 140 [ 255.692917][ T2506] total_swap 229376 [ 255.696736][ T2506] total_swapcached 40960 [ 255.700976][ T2506] total_pgpgin 99710 [ 255.704866][ T2506] total_pgpgout 99668 [ 255.708847][ T2506] total_pgfault 128621 [ 255.713011][ T2506] total_pgmajfault 194 [ 255.717081][ T2506] total_inactive_anon 110592 [ 255.721662][ T2506] total_active_anon 0 [ 255.725662][ T2506] total_inactive_file 0 [ 255.729876][ T2506] total_active_file 16384 [ 255.734188][ T2506] total_unevictable 0 [ 255.738194][ T2506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7795,pid=2503,uid=0 [ 255.739648][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 255.739662][ T29] audit: type=1400 audit(262.729:6478): avc: denied { sqpoll } for pid=2576 comm="syz.0.7826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 255.752830][ T2506] Memory cgroup out of memory: Killed process 2503 (syz.1.7795) total-vm:95676kB, anon-rss:1068kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 255.861462][ T29] audit: type=1400 audit(262.792:6479): avc: denied { ioctl } for pid=2574 comm="syz.4.7825" path="socket:[75290]" dev="sockfs" ino=75290 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.915911][ T2588] ref_ctr_offset mismatch. inode: 0x213 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1004000 [ 255.968255][ T29] audit: type=1400 audit(262.960:6480): avc: denied { associate } for pid=2589 comm="syz.6.7831" name="1602" dev="tmpfs" ino=8267 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 256.024401][ T29] audit: type=1400 audit(263.012:6481): avc: denied { create } for pid=2595 comm="syz.6.7833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 256.043511][ T29] audit: type=1400 audit(263.012:6482): avc: denied { accept } for pid=2595 comm="syz.6.7833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 256.070369][ T29] audit: type=1400 audit(263.075:6483): avc: denied { name_bind } for pid=2593 comm="syz.8.7832" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 256.180605][ T29] audit: type=1400 audit(263.180:6484): avc: denied { watch watch_reads } for pid=2618 comm="syz.8.7840" path="/709" dev="tmpfs" ino=3705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 256.247051][ T2626] loop8: detected capacity change from 0 to 1024 [ 256.260581][ T2585] loop4: detected capacity change from 0 to 764 [ 256.277071][ T29] audit: type=1400 audit(263.296:6485): avc: denied { create } for pid=2627 comm="syz.0.7843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.280803][ T2626] EXT4-fs: Ignoring removed orlov option [ 256.302808][ T2585] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 256.346770][ T29] audit: type=1400 audit(263.296:6486): avc: denied { write } for pid=2627 comm="syz.0.7843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.365906][ T29] audit: type=1400 audit(263.338:6487): avc: denied { mount } for pid=2584 comm="syz.4.7828" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 256.443352][ T2626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.504256][ T2648] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7849'. [ 256.544566][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.711171][ T2672] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 256.719879][ T2672] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 256.728330][ T2672] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 256.760894][ T2672] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 256.769491][ T2672] netlink: '+}[@': attribute type 6 has an invalid length. [ 256.923852][ T2696] loop8: detected capacity change from 0 to 2048 [ 256.977211][ T2704] geneve2: entered promiscuous mode [ 256.996414][ T2696] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.7868: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 257.028641][ T2696] EXT4-fs (loop8): Remounting filesystem read-only [ 257.035369][ T2696] EXT4-fs (loop8): get root inode failed [ 257.041095][ T2696] EXT4-fs (loop8): mount failed [ 257.046490][ T3392] kernel write not supported for file bpf-prog (pid: 3392 comm: kworker/1:3) [ 257.228994][ T2739] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7883'. [ 257.342226][ T2748] netlink: 'syz.4.7886': attribute type 1 has an invalid length. [ 257.350158][ T2748] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7886'. [ 257.391740][ T2729] loop8: detected capacity change from 0 to 764 [ 257.427279][ T2729] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 257.840262][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7899'. [ 257.859180][ T2807] IPVS: Error joining to the multicast group [ 257.984992][ T2822] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 258.142736][ T2842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2842 comm=syz.0.7914 [ 258.155485][ T2842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2842 comm=syz.0.7914 [ 258.607130][ T2879] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.614150][ T23] IPVS: starting estimator thread 0... [ 258.714174][ T2891] IPVS: using max 2496 ests per chain, 124800 per kthread [ 259.041824][ T2916] netlink: 'syz.6.7945': attribute type 1 has an invalid length. [ 259.078030][ T2916] bond4: entered promiscuous mode [ 259.117007][ T2953] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 259.127006][ T2916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.146693][ T2958] : (slave dummy0): Releasing backup interface [ 259.161172][ T2958] dummy0: left allmulticast mode [ 259.174400][ T2923] SELinux: failed to load policy [ 259.197893][ T2958] bond4: (slave dummy0): making interface the new active one [ 259.226653][ T2958] dummy0: entered promiscuous mode [ 259.248776][ T2958] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 259.454409][ T2982] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7954'. [ 259.467547][ T2982] batadv1: entered promiscuous mode [ 259.472896][ T2982] batadv1: entered allmulticast mode [ 259.578749][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7963'. [ 259.587817][ T3007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7963'. [ 259.596958][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7963'. [ 259.606364][ T3007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7963'. [ 259.615357][ T3007] netlink: 'syz.0.7963': attribute type 6 has an invalid length. [ 259.685113][ T3022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7970'. [ 259.772105][ T3059] loop8: detected capacity change from 0 to 512 [ 259.816836][ T3059] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.7978: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 259.862609][ T3075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7983'. [ 259.883137][ T3059] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.7978: Bad quota inode: 3, type: 0 [ 259.906365][ T3059] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 259.954823][ T3059] EXT4-fs (loop8): mount failed [ 260.108241][ T3096] binfmt_misc: register: failed to install interpreter file ./file2 [ 260.125329][ T3102] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 260.125329][ T3102] program syz.8.7993 not setting count and/or reply_len properly [ 260.229573][ T3124] batadv_slave_0: entered promiscuous mode [ 260.237485][ T3120] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 260.246303][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8002'. [ 260.274462][ T3124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.307597][ T3140] loop8: detected capacity change from 0 to 1024 [ 260.315751][ T3124] batadv_slave_0 (unregistering): left promiscuous mode [ 260.322865][ T3124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.340886][ T3140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.368931][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.383596][ T3158] sctp: [Deprecated]: syz.0.8012 (pid 3158) Use of int in maxseg socket option. [ 260.383596][ T3158] Use struct sctp_assoc_value instead [ 260.433487][ T3166] loop8: detected capacity change from 0 to 512 [ 260.459351][ T3166] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 260.480422][ T3166] EXT4-fs (loop8): 1 truncate cleaned up [ 260.488012][ T3166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.541163][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 260.541179][ T29] audit: type=1400 audit(267.778:6637): avc: denied { bind } for pid=3183 comm="syz.0.8021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 260.566372][ T29] audit: type=1400 audit(267.778:6638): avc: denied { name_bind } for pid=3183 comm="syz.0.8021" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 260.586829][ T29] audit: type=1400 audit(267.778:6639): avc: denied { node_bind } for pid=3183 comm="syz.0.8021" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 260.610042][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.630945][ T29] audit: type=1326 audit(267.820:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.8023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 260.654688][ T29] audit: type=1326 audit(267.820:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.8023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 260.677565][ T29] audit: type=1326 audit(267.820:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.8023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 260.700462][ T29] audit: type=1326 audit(267.841:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz.4.8023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 260.797980][ T3206] rdma_op ffff888140b1e580 conn xmit_rdma 0000000000000000 [ 260.818619][ T29] audit: type=1326 audit(268.020:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.6.8027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 260.841521][ T29] audit: type=1326 audit(268.020:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.6.8027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18ad5e9a9 code=0x7ffc0000 [ 260.864416][ T29] audit: type=1326 audit(268.020:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3203 comm="syz.4.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ceabe9a9 code=0x7ffc0000 [ 261.015254][ T3251] loop8: detected capacity change from 0 to 164 [ 261.023591][ T3251] Unsupported NM flag settings (8) [ 261.163448][ T3280] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 261.175535][ T3277] IPVS: stopping master sync thread 3280 ... [ 261.197176][ T3283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 261.229675][ T3283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 261.282134][ T3300] loop4: detected capacity change from 0 to 1024 [ 261.294268][ T3300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.376503][T27089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.470401][ T3343] loop8: detected capacity change from 0 to 164 [ 261.482277][ T3343] syz.8.8075: attempt to access beyond end of device [ 261.482277][ T3343] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 261.498696][ T3343] syz.8.8075: attempt to access beyond end of device [ 261.498696][ T3343] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 261.658848][ T3390] loop8: detected capacity change from 0 to 164 [ 261.673291][ T3390] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 261.751145][ T3403] loop8: detected capacity change from 0 to 512 [ 261.770933][ T3403] EXT4-fs (loop8): orphan cleanup on readonly fs [ 261.783219][ T3403] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8085: Failed to acquire dquot type 1 [ 261.802074][ T3403] EXT4-fs (loop8): 1 truncate cleaned up [ 261.810957][ T3403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.987365][T19360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.018251][ T3449] tipc: Enabling of bearer rejected, already enabled [ 262.344786][ T3485] smc: net device bond0 applied user defined pnetid SYZ2 [ 262.365841][ T3485] smc: net device bond0 erased user defined pnetid SYZ2 [ 262.819462][ T3535] loop8: detected capacity change from 0 to 2048 [ 262.864620][ T3535] loop8: p1 < > p4 [ 262.869604][ T3535] loop8: p4 size 8388608 extends beyond EOD, truncated [ 262.881371][ T3545] serio: Serial port ttyS3 [ 263.007571][ T3569] netlink: 'syz.1.8135': attribute type 1 has an invalid length. [ 263.318714][ T3612] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 263.358337][ T3612] SELinux: failed to load policy [ 263.740104][ T3652] syz.6.8162: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 263.754895][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: syz.6.8162 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 263.754994][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.755088][ T3652] Call Trace: [ 263.755097][ T3652] [ 263.755106][ T3652] __dump_stack+0x1d/0x30 [ 263.755131][ T3652] dump_stack_lvl+0xe8/0x140 [ 263.755152][ T3652] dump_stack+0x15/0x1b [ 263.755170][ T3652] warn_alloc+0x12b/0x1a0 [ 263.755324][ T3652] ? audit_log_end+0x1d7/0x1f0 [ 263.755441][ T3652] ? audit_log_end+0x1d7/0x1f0 [ 263.755480][ T3652] __vmalloc_node_range_noprof+0x9c/0xe00 [ 263.755543][ T3652] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 263.755595][ T3652] ? slow_avc_audit+0x104/0x140 [ 263.755627][ T3652] ? should_fail_ex+0x30/0x280 [ 263.755659][ T3652] ? xskq_create+0x36/0xe0 [ 263.755685][ T3652] vmalloc_user_noprof+0x7d/0xb0 [ 263.755736][ T3652] ? xskq_create+0x80/0xe0 [ 263.755762][ T3652] xskq_create+0x80/0xe0 [ 263.755788][ T3652] xsk_init_queue+0x95/0xf0 [ 263.755811][ T3652] xsk_setsockopt+0x35c/0x510 [ 263.755867][ T3652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 263.755888][ T3652] __sys_setsockopt+0x184/0x200 [ 263.755924][ T3652] __x64_sys_setsockopt+0x64/0x80 [ 263.755961][ T3652] x64_sys_call+0x2bd5/0x2fb0 [ 263.755999][ T3652] do_syscall_64+0xd2/0x200 [ 263.756080][ T3652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.756108][ T3652] ? clear_bhb_loop+0x40/0x90 [ 263.756130][ T3652] ? clear_bhb_loop+0x40/0x90 [ 263.756153][ T3652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.756201][ T3652] RIP: 0033:0x7fc18ad5e9a9 [ 263.756216][ T3652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.756307][ T3652] RSP: 002b:00007fc1893bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.756327][ T3652] RAX: ffffffffffffffda RBX: 00007fc18af85fa0 RCX: 00007fc18ad5e9a9 [ 263.756362][ T3652] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 263.756382][ T3652] RBP: 00007fc18ade0ca1 R08: 0000000000000004 R09: 0000000000000000 [ 263.756395][ T3652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.756428][ T3652] R13: 0000000000000000 R14: 00007fc18af85fa0 R15: 00007ffed3799618 [ 263.756449][ T3652] [ 263.756458][ T3652] Mem-Info: [ 263.985858][ T3652] active_anon:27913 inactive_anon:5569 isolated_anon:0 [ 263.985858][ T3652] active_file:15496 inactive_file:2588 isolated_file:0 [ 263.985858][ T3652] unevictable:0 dirty:265 writeback:0 [ 263.985858][ T3652] slab_reclaimable:3343 slab_unreclaimable:35579 [ 263.985858][ T3652] mapped:40987 shmem:29671 pagetables:1496 [ 263.985858][ T3652] sec_pagetables:0 bounce:0 [ 263.985858][ T3652] kernel_misc_reclaimable:0 [ 263.985858][ T3652] free:1836298 free_pcp:2700 free_cma:0 [ 264.031292][ T3652] Node 0 active_anon:117220kB inactive_anon:22276kB active_file:63028kB inactive_file:10352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166268kB dirty:1060kB writeback:0kB shmem:124252kB writeback_tmp:0kB kernel_stack:4816kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.060825][ T3652] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.089458][ T3652] lowmem_reserve[]: 0 2882 7860 7860 [ 264.094884][ T3652] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 264.125283][ T3652] lowmem_reserve[]: 0 0 4978 4978 [ 264.130499][ T3652] Node 0 Normal free:4360084kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:129632kB inactive_anon:22276kB active_file:63028kB inactive_file:10352kB unevictable:0kB writepending:1060kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:10064kB local_pcp:4120kB free_cma:0kB [ 264.162904][ T3652] lowmem_reserve[]: 0 0 0 0 [ 264.167537][ T3652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.180461][ T3652] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 264.196643][ T3652] Node 0 Normal: 18*4kB (UE) 1039*8kB (U) 439*16kB (UE) 568*32kB (UME) 234*64kB (UE) 221*128kB (UME) 361*256kB (UME) 155*512kB (UM) 71*1024kB (UME) 50*2048kB (UM) 961*4096kB (UM) = 4359984kB [ 264.215811][ T3652] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 264.225182][ T3652] 53259 total pagecache pages [ 264.229890][ T3652] 67 pages in swap cache [ 264.234146][ T3652] Free swap = 80376kB [ 264.238225][ T3652] Total swap = 124996kB [ 264.242382][ T3652] 2097051 pages RAM [ 264.246221][ T3652] 0 pages HighMem/MovableOnly [ 264.250898][ T3652] 80813 pages reserved [ 264.321002][ T3669] __nla_validate_parse: 15 callbacks suppressed [ 264.321047][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 264.336341][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 264.420458][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 264.429525][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 264.451534][ T3676] loop4: detected capacity change from 0 to 128 [ 264.505960][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 264.515209][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 264.988994][ T3719] serio: Serial port ttyS3 [ 265.314083][ T3749] netlink: 'syz.4.8190': attribute type 1 has an invalid length. [ 265.541608][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 265.541622][ T29] audit: type=1326 audit(273.027:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.542370][ T3779] netlink: 51 bytes leftover after parsing attributes in process `syz.1.8206'. [ 265.551432][ T29] audit: type=1326 audit(273.027:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.603975][ T29] audit: type=1326 audit(273.038:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.635572][ T29] audit: type=1326 audit(273.111:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.663582][ T29] audit: type=1326 audit(273.143:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.687221][ T29] audit: type=1326 audit(273.143:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.710194][ T29] audit: type=1326 audit(273.143:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1bd6fd310 code=0x7ffc0000 [ 265.729189][ T3784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8210'. [ 265.733873][ T29] audit: type=1326 audit(273.143:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1bd6fd310 code=0x7ffc0000 [ 265.742176][ T3784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8210'. [ 265.774952][ T29] audit: type=1326 audit(273.143:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.798621][ T29] audit: type=1326 audit(273.143:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bd6fe9a9 code=0x7ffc0000 [ 265.878307][ T3784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8210'. [ 265.971305][ T3806] tipc: New replicast peer: 10.1.1.2 [ 265.976709][ T3806] tipc: Enabled bearer , priority 10 [ 266.576541][ T3865] loop8: detected capacity change from 0 to 512 [ 266.594386][ T3865] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 266.654141][ T3865] EXT4-fs (loop8): 1 truncate cleaned up [ 266.674210][ T3865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.721923][ T3865] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.898100][ T3892] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 267.650401][ T3958] bridge_slave_0: left allmulticast mode [ 267.656156][ T3958] bridge_slave_0: left promiscuous mode [ 267.661919][ T3958] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.679542][ T3958] bridge_slave_1: left allmulticast mode [ 267.685935][ T3958] bridge_slave_1: left promiscuous mode [ 267.691735][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.703602][ T3958] team0: Port device team_slave_0 removed [ 267.712905][ T3958] team0: Port device team_slave_1 removed [ 267.719607][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.727267][ T3958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.735517][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.743490][ T3958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.756890][ T3958] batman_adv: batadv0: Interface deactivated: macvlan0 [ 267.763899][ T3958] batman_adv: batadv0: Removing interface: macvlan0 [ 267.778499][ T3958] batadv1: left allmulticast mode [ 267.783646][ T3958] batadv1: left promiscuous mode [ 267.788814][ T3958] bridge0: port 3(batadv1) entered disabled state [ 267.800588][ T3958] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 267.807882][ T3958] batman_adv: batadv0: Removing interface: ip6gretap1 [ 267.872476][ T3978] loop8: detected capacity change from 0 to 256 [ 267.880085][ T3978] FAT-fs (loop8): bogus number of FAT sectors [ 267.886385][ T3978] FAT-fs (loop8): Can't find a valid FAT filesystem [ 267.995534][ T3996] netlink: 'syz.4.8288': attribute type 1 has an invalid length. [ 268.020359][T19320] ================================================================== [ 268.028461][T19320] BUG: KCSAN: data-race in copy_process / free_pid [ 268.034959][T19320] [ 268.037273][T19320] read-write to 0xffffffff868608e0 of 4 bytes by task 4002 on cpu 1: [ 268.045336][T19320] free_pid+0x77/0x180 [ 268.049400][T19320] free_pids+0x7a/0xb0 [ 268.053462][T19320] release_task+0x9a9/0xb60 [ 268.057972][T19320] do_exit+0xd81/0x1590 [ 268.062127][T19320] call_usermodehelper_exec_async+0x247/0x250 [ 268.068203][T19320] ret_from_fork+0xda/0x150 [ 268.072711][T19320] ret_from_fork_asm+0x1a/0x30 [ 268.077469][T19320] [ 268.079778][T19320] read to 0xffffffff868608e0 of 4 bytes by task 19320 on cpu 0: [ 268.087411][T19320] copy_process+0x1790/0x1f90 [ 268.092086][T19320] kernel_clone+0x16c/0x5b0 [ 268.096588][T19320] user_mode_thread+0x7d/0xb0 [ 268.101270][T19320] call_usermodehelper_exec_work+0x41/0x160 [ 268.107608][T19320] process_scheduled_works+0x4cb/0x9d0 [ 268.113094][T19320] worker_thread+0x582/0x770 [ 268.117696][T19320] kthread+0x489/0x510 [ 268.121761][T19320] ret_from_fork+0xda/0x150 [ 268.126260][T19320] ret_from_fork_asm+0x1a/0x30 [ 268.131023][T19320] [ 268.133334][T19320] value changed: 0x80000144 -> 0x80000143 [ 268.139039][T19320] [ 268.141350][T19320] Reported by Kernel Concurrency Sanitizer on: [ 268.147484][T19320] CPU: 0 UID: 0 PID: 19320 Comm: kworker/u8:32 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 268.160235][T19320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.170382][T19320] Workqueue: events_unbound call_usermodehelper_exec_work [ 268.177510][T19320] ================================================================== [ 268.196306][ T3996] bond0: entered promiscuous mode [ 268.217357][ T3996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.229277][ T4005] bond0: (slave dummy0): making interface the new active one [ 268.238078][ T4005] dummy0: entered promiscuous mode [ 268.244799][ T4005] bond0: (slave dummy0): Enslaving as an active interface with an up link