last executing test programs: 3m38.050082902s ago: executing program 32 (id=522): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x60731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x43, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 2m58.227899277s ago: executing program 33 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) 2m34.110181197s ago: executing program 34 (id=2871): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x9, r2, 0x1, 0x7f, 0x6, @remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x3}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) 2m6.5485097s ago: executing program 0 (id=3620): syz_clone(0x6a084000, &(0x7f0000003940), 0x0, &(0x7f0000003a40), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 2m5.574450044s ago: executing program 0 (id=3648): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) sendto$inet(r1, &(0x7f00000000c0)="f7", 0x1, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) 2m5.495932975s ago: executing program 0 (id=3651): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x77}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x77}, 0x8) 2m5.419764496s ago: executing program 0 (id=3655): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0xc010, 0x0) 2m5.321556498s ago: executing program 0 (id=3659): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 2m4.820549185s ago: executing program 0 (id=3672): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 2m4.741720846s ago: executing program 35 (id=3672): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 1m19.981263835s ago: executing program 2 (id=5109): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0800000000000000b7080000420000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m19.823623948s ago: executing program 2 (id=5113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 1m18.949563031s ago: executing program 2 (id=5110): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) set_mempolicy(0x8006, 0x0, 0x5) 1m17.579275421s ago: executing program 2 (id=5137): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m17.368820174s ago: executing program 2 (id=5150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m17.095144089s ago: executing program 2 (id=5162): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') 1m17.094663009s ago: executing program 8 (id=5163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 1m17.065178869s ago: executing program 36 (id=5162): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') 1m17.023259159s ago: executing program 8 (id=5166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 1m16.189114502s ago: executing program 8 (id=5178): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x3) 1m16.125716313s ago: executing program 8 (id=5181): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$eJzs3U9rHGUcB/DfM9mkf9KaVAStPRgo2IKaNGlFEcEW682DfwqeBGOSltJtG5oItlZsob4DfQGCNy/isYgU9eLVm+ALkGKRNhdvkdnMpNt2N82fTadmPh/YZJ55MjzPZPnuM/vszGwAtTWS/8gi9kbEbIoYaqtrRFE5svR3d25fnlq4fXkqxeLi+/+kSMW68u9T8Xuw2Hh7RPz+c4on+x5sd+7ipTOTzebMhaI8Nn92dmzu4qWXTp+dPDVzaubcxPgr4y8fOTxx5FBP9nN3RPw6erxx7eSb+76f+nbPFz9+dz3F0dhV1LfvR6+MxMjy/6Rd/n99tdeNVaSv2J/2pzg1KuwQa1I+f/0R8XQMRV/cffKG4st3K+0csKkWU8QiUFNJ/qGmyuOA/P1v+aj2iAR4VG4dW5oAuJOW5vYWlvPfWJobjO2tuYGdCynap3VSRPRiZi5vY/b5NJQ/YpPm4YDOrlyNiGc6jf+plc3h1ix+nv/snvxnEfFO8Ttf/9462x+5ryz/8OhsJP8fteX/43W2L/8AAAAAAADQOzeORcSLnT7/y5bP/4kO5/8MRsTRHrT/8M//sps9aAbo4NaxiNcjojz3b6Et/4XhvqK0u3U+QH86ebo5cyginoiIg9G/LS+Pr9DGyL7f+rvWtZ3/lz/y9stzAYt+3Gxsu3eb6cn5yY3sM7Dk1tWIZxud8p+Wx//UYfzPXw9mV9nG4vE3fulW9/D8A5tl8ZuIAx3H/7t3rkgr359jrHU8MFYeFTzosw+v/9CtffmH6uTj/86V8z+c2u/XM7f2Nj7/+88N5L/z8f9AOtG65cxAse7Tyfn5C+MRA+ntB9dPrL3PsBWVeSjzkuf/4P7O7/9XOv7fERFXVtnmiZ/eutatzvgP1cnzP72m8X/tC/s/+Prfbu2vbvw/0hrTDxZrzP/BylYb0Kr7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R1lE7IqUjS4vZ9noaMRgRDwVO7Pm+bn5F06e/+TcdF7X+v7/rPym36Glciq//3+4rTxxX/lwROyJiK/6drTKo1Pnm9NV7zwAAAAAAAAAAAAAAAAAAAA8Jga7XP+f+6uv6t4Bm65RdQeAysg/1Jf8Q33JP9SX/EN9yT/Ul/xDfck/1Jf8Q33JPwAAAAAAbCl7nrvxR4qIK6/taD1yA0Vdf6U9AzZbVnUHgMq4xQ/Ul1N/oL5S1R0AKvew14Ht694SAAAAAAAAAAAAAOiVA3td/w915fp/qK/u1/+7MwBsda7/h/ryHh9w/T8AAAAAAAAAAAAAPP7mLl46M9lszlxY78K2jW1uwUJ9FiL1IHGPaKHqVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD0XwAAAP//dt72Ng==") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m15.987119995s ago: executing program 8 (id=5183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 1m15.346187784s ago: executing program 8 (id=5196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="10", 0x1, 0x8004, &(0x7f00000003c0)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m15.346063394s ago: executing program 37 (id=5196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="10", 0x1, 0x8004, &(0x7f00000003c0)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m11.096453108s ago: executing program 9 (id=5285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111980000000000180000000000000000000000000000009500000002000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1m11.006074649s ago: executing program 9 (id=5288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 1m10.848077102s ago: executing program 9 (id=5295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x30, 0xffffffffffffffff, 0x15b4f000) syz_open_dev$loop(0x0, 0x8, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4000000) 1m10.346863489s ago: executing program 9 (id=5301): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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") open(0x0, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 1m10.258843151s ago: executing program 9 (id=5306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x4d, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$r', 0x2}], 0xfe, &(0x7f0000001a80)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4004804) 1m9.781751018s ago: executing program 9 (id=5325): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880f, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x3}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) 1m9.781430658s ago: executing program 38 (id=5325): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880f, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x3}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) 46.798540401s ago: executing program 5 (id=6102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 46.714105133s ago: executing program 5 (id=6106): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@nouser_xattr}], [{@smackfsroot={'smackfsroot', 0x3d, ':\xb6:'}}, {@permit_directio}, {@fsname={'fsname', 0x3d, ',#-^\x18'}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x80, &(0x7f0000000340), 0x1, 0x57b, &(0x7f0000000d00)="$eJzs3T9sG1UYAPDvzgn9F5EigQSoQwVIRarqJP0DhSldEZUqdUBigchxoypOHMUJNFGGZK8QHRCgLmWDgRHEwIBYGFlZQJ2RKhqB1HQAI8d2mjZ25ITGLrnfTzr73r2zv/fu/D37TndyAJl1vPaQRrwQEZeSiMFNdX3RqDxeX29tdalwf3WpkES1evmPJJKIuLe6VGiunzSej0TEckQ8HxE/9kecTLfGrSwsTo6VSsXZRnlobmpmqLKweOrq1NhEcaI4feb1N86dP3tu5PTI5pfdr24u9e+sr9d/u/HR9Z/funXjq6+PLRc+GUtiNAYadZv78TjVt0l/jK48vPzsXgTroaTXDWBXco08r6XSczEYuUbWt1Id7GrTgD1WPRBRBTIqkf+QUc3fAbXj3+bUzd8fdy7UD0BqcdcaU72mr35uIg6uH5sc/jN56Mikdrx5tJsNZV9aXomI4b6+rZ//pPH5273hx9FA9tQPF+o7auv+TzfGn2gx/gw0z53+R83xb23L+Pcgfq7N+Hepwxh/v3v787bxVyJebBk/2YiftIifRsT7Hca/+c5359vVVb+IOBGt4zcl258fHrpytVQcrj+2jPH9iWNvbtf/w23ij9b7v/4102r7z3TY/29/+ual5W3iv/ry9vu/1fY/FBEfdxj/mXtfvt2u7s5Kcrf2K2Cn+7+27FaH8V8bPf5rh6sCAAAAAAAAAAA7kK5fy5ak+Y35NM3n6/fwPhuH01K5MnfySnl+erx+zdvR6E+bV1oN1stJrTzSuB63WT79SPlMrhEwd2i9nC+US+M97jsAAAAAAAAAAAAAAAAAAAA8KY48cv//X7n1+/9He90uoEva/+U3sN/tIv8NGbBPPJzMSc/aAXSfL3PIrKr8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/wEAAAAAAAAAAAAAAAAAAAAAAAAAYE9cunixNlXvry4VauXxvoX5yfIHp8aLlcn81HwhXyjPzuQnyuWJUjFfKE+1e5+08ZyUyzPDMT1/bWiuWJkbqiwsvjdVnp9u/qdosb8rvQIAAAAAAAAAAAAAAAAAAID/l4H1KUnzjXv4ByJN8/m4faxenVy5WioOR8TTEfFLrv9ArTzS60YDAAAAAAAAAAAAAAAAAADAPlNZWJwcK5WKsxmZ6dvJyhGx/HibUXvHHb+qv7GvnpRtaCYLM+3HjIPdGpwAAAAAAAAAAAAAAAAAACBjHtz02+kr/tnbBgEAAAAAAAAAAAAAAAAAAEAmpb8nEVGbTgy+MvBo7VPJWm79OSI+vHn502tjc3OzI7XldzeWz33WWH66F+0HOtXM02YeAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9UFhYnx0ql4uwezvS6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC78W8AAAD///EJ2OU=") llistxattr(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 46.680888263s ago: executing program 5 (id=6107): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r1, &(0x7f0000001400)="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", 0x101) sendfile(r1, r2, 0x0, 0xe065) 46.653746543s ago: executing program 5 (id=6108): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 46.631661034s ago: executing program 5 (id=6111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 46.414168017s ago: executing program 5 (id=6114): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000e80)={0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f00000001c0)=0x8) 46.413094697s ago: executing program 39 (id=6114): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000e80)={0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f00000001c0)=0x8) 2.603042231s ago: executing program 6 (id=7337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) 2.550030292s ago: executing program 6 (id=7339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 2.504261203s ago: executing program 6 (id=7340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x153b1b1ebdbe3378, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 2.472774183s ago: executing program 6 (id=7342): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.229494937s ago: executing program 4 (id=7366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.152867078s ago: executing program 4 (id=7372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) 1.659887276s ago: executing program 6 (id=7356): symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.427099699s ago: executing program 3 (id=7373): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515b02, 0x52abe154ad664fa4) 1.35012875s ago: executing program 3 (id=7376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) 1.318748591s ago: executing program 4 (id=7378): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 1.264958711s ago: executing program 4 (id=7380): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.255927281s ago: executing program 3 (id=7381): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1.133848323s ago: executing program 7 (id=7383): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x11}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget(0x2, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) 1.042119455s ago: executing program 7 (id=7385): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000008c0)='./file0\x00', 0x244) fallocate(r1, 0x0, 0x0, 0x9) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x4000) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x8, 0x0, 0x2}) 651.566231ms ago: executing program 6 (id=7386): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f00000017c0)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 651.377161ms ago: executing program 7 (id=7387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x200b, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0xff0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 616.178421ms ago: executing program 1 (id=7388): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 595.858152ms ago: executing program 1 (id=7389): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 558.220312ms ago: executing program 7 (id=7390): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 539.444363ms ago: executing program 7 (id=7391): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syslog(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000800)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}], [{@permit_directio}, {@euid_eq}, {@fowner_eq}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") set_mempolicy(0x4000, &(0x7f0000000000)=0x3a3713a1, 0x4) 393.522045ms ago: executing program 7 (id=7392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 371.016965ms ago: executing program 4 (id=7393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301809665036d51de82b1", @ANYRES32, @ANYRES32], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 280.184686ms ago: executing program 1 (id=7394): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x80000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 269.613796ms ago: executing program 3 (id=7395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 227.490817ms ago: executing program 3 (id=7397): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000006c0)={0xf6c447fee59251f4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close_range(r0, r1, 0x0) 159.860378ms ago: executing program 3 (id=7398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 155.919138ms ago: executing program 1 (id=7399): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB='+cpu'], 0x5) 151.930908ms ago: executing program 4 (id=7400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800005, 0x4008031, 0xffffffffffffffff, 0x0) 87.054199ms ago: executing program 1 (id=7401): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x508, 0x3d8, 0x3d8, 0x508, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0xb, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 0s ago: executing program 1 (id=7402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x1, 0x7fe6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0xfffffeed) kernel console output (not intermixed with test programs): h0_macvtap: left promiscuous mode [ 193.037670][ T3835] veth1_vlan: left promiscuous mode [ 193.042970][ T3835] veth0_vlan: left promiscuous mode [ 193.299987][T16430] chnl_net:caif_netlink_parms(): no params data found [ 193.387362][T16337] veth0_vlan: entered promiscuous mode [ 193.395850][T16337] veth1_vlan: entered promiscuous mode [ 193.429498][T16430] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.436789][T16430] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.454393][T16430] bridge_slave_0: entered allmulticast mode [ 193.461001][T16430] bridge_slave_0: entered promiscuous mode [ 193.481494][T16513] bond2: (slave dummy0): Releasing active interface [ 193.490946][T16513] bond0: (slave macvlan1): Releasing backup interface [ 193.500324][T16513] bond1: (slave vcan1): Releasing backup interface [ 193.507198][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.516775][T16513] bond2: (slave veth11): Releasing active interface [ 193.525750][T16430] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.532942][T16430] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.540417][T16430] bridge_slave_1: entered allmulticast mode [ 193.550057][T16430] bridge_slave_1: entered promiscuous mode [ 193.566728][T16515] loop6: detected capacity change from 0 to 8192 [ 193.575923][T16515] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.599571][T16430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.612500][T16337] veth0_macvtap: entered promiscuous mode [ 193.620247][T16337] veth1_macvtap: entered promiscuous mode [ 193.633414][T16430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.649682][T16337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.683813][T16337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.692085][T16430] team0: Port device team_slave_0 added [ 193.699126][T16430] team0: Port device team_slave_1 added [ 193.704756][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.717373][T16337] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.726208][T16337] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.735051][T16337] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.743884][T16337] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.784958][T16430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.792099][T16430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.818519][T16430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.841935][T16430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.849045][T16430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.875110][T16430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.925882][T16430] hsr_slave_0: entered promiscuous mode [ 193.938910][T16430] hsr_slave_1: entered promiscuous mode [ 193.947805][ T29] audit: type=1400 audit(1752359778.817:4052): avc: denied { add_name } for pid=16337 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 193.972660][ T29] audit: type=1400 audit(1752359778.817:4053): avc: denied { associate } for pid=16337 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 193.973162][T16430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.006161][T16430] Cannot create hsr debugfs directory [ 194.025737][T16537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.033872][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5231'. [ 194.109178][T16540] syzkaller0: entered promiscuous mode [ 194.114733][T16540] syzkaller0: entered allmulticast mode [ 194.133814][T16545] : renamed from bond_slave_0 [ 194.138913][ T29] audit: type=1326 audit(1752359779.017:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16546 comm="syz.7.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 194.162763][ T29] audit: type=1326 audit(1752359779.017:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16546 comm="syz.7.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 194.186358][ T29] audit: type=1326 audit(1752359779.017:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16546 comm="syz.7.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 194.209900][ T29] audit: type=1326 audit(1752359779.017:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16546 comm="syz.7.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 194.233456][ T29] audit: type=1326 audit(1752359779.017:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16546 comm="syz.7.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 194.257104][ T29] audit: type=1326 audit(1752359779.017:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16546 comm="syz.7.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 194.362561][T16563] bridge_slave_0: left promiscuous mode [ 194.368367][T16563] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.382309][T16563] bridge_slave_1: left allmulticast mode [ 194.388241][T16563] bridge_slave_1: left promiscuous mode [ 194.394238][T16563] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.407290][T16563] bond0: (slave bond_slave_0): Releasing backup interface [ 194.412466][T16567] loop6: detected capacity change from 0 to 1024 [ 194.421484][T16563] bond0: (slave bond_slave_1): Releasing backup interface [ 194.427351][T16567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.443720][T16563] team0: Port device team_slave_0 removed [ 194.446716][T16567] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #14: comm syz.6.5242: attempt to clear invalid blocks 1886221359 len 1 [ 194.463608][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.463666][T16563] team0: Port device team_slave_1 removed [ 194.477553][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5243'. [ 194.479104][T16563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.486622][T16567] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #14: comm syz.6.5242: invalid indirect mapped block 262147 (level 1) [ 194.507823][T16567] EXT4-fs error (device loop6): ext4_mb_clear_bb:6420: comm syz.6.5242: Freeing blocks in system zone - Block = 0, count = 16 [ 194.507939][T16563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.528638][T16563] batadv1: left allmulticast mode [ 194.533754][T16563] batadv1: left promiscuous mode [ 194.538891][T16563] bridge0: port 3(batadv1) entered disabled state [ 194.548128][T16563] bond1: (slave veth13): Releasing active interface [ 194.554795][T16563] bond1: (slave veth13): the permanent HWaddr of slave - 4e:ba:d5:01:94:29 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 194.572953][T16563] bond1: (slave batadv2): Releasing active interface [ 194.573093][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.579675][T16563] batadv2: left promiscuous mode [ 194.796130][T16430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.818909][T16430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.830340][T16430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.850044][T16430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.907212][T16430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.926935][T16430] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.937641][ T3803] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.944787][ T3803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.958154][ T3861] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.965250][ T3861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.067414][T16430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.164245][T16430] veth0_vlan: entered promiscuous mode [ 195.173608][T16430] veth1_vlan: entered promiscuous mode [ 195.228540][T16430] veth0_macvtap: entered promiscuous mode [ 195.239110][T16430] veth1_macvtap: entered promiscuous mode [ 195.252538][T16430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.266950][T16430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.277869][T16430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.286661][T16430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.295489][T16430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.304280][T16430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.500099][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5255'. [ 195.540119][T16630] batman_adv: batadv0: Removing interface: team0 [ 195.549455][T16630] $H: (slave dummy0): Releasing backup interface [ 195.556363][T16630] dummy0: left promiscuous mode [ 195.562470][T16630] bridge_slave_0: left promiscuous mode [ 195.568370][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.576378][T16630] bridge_slave_1: left allmulticast mode [ 195.582137][T16630] bridge_slave_1: left promiscuous mode [ 195.587859][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.607386][T16630] $H: (slave c1): Releasing backup interface [ 195.625326][T16630] : left promiscuous mode [ 195.634544][T16630] $H: (slave bond_slave_1): Releasing backup interface [ 195.652795][T16630] bond_slave_1: left promiscuous mode [ 195.659534][T16630] team0: Port device team_slave_0 removed [ 195.672678][T16630] team0: Port device team_slave_1 removed [ 195.678605][T16630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.686420][T16630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.694612][T16630] $H: (slave geneve1): Releasing backup interface [ 195.709982][T16630] bond0: (slave veth9): Releasing active interface [ 195.716761][T16630] bond0: (slave veth9): the permanent HWaddr of slave - ea:8b:b1:3f:8f:ba - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 195.733683][T16630] batadv1: entered promiscuous mode [ 195.793647][T16630] bond0: (slave batadv1): Releasing active interface [ 195.805474][T16646] loop9: detected capacity change from 0 to 2048 [ 195.812154][T16646] EXT4-fs: Ignoring removed nobh option [ 195.822036][T16630] batadv1: left promiscuous mode [ 195.853273][T16646] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.255601][T16337] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.333892][T16666] : renamed from bond_slave_0 (while UP) [ 196.756256][T16689] loop6: detected capacity change from 0 to 512 [ 196.771895][T16689] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 196.865133][T16689] EXT4-fs (loop6): failed to open journal device unknown-block(1,255) -6 [ 197.086063][T16722] bridge_slave_0: left allmulticast mode [ 197.091864][T16722] bridge_slave_0: left promiscuous mode [ 197.097525][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.137730][T16722] bridge_slave_1: left allmulticast mode [ 197.143491][T16722] bridge_slave_1: left promiscuous mode [ 197.149253][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.164656][T16722] bond0: (slave c1): Releasing backup interface [ 197.179101][T16722] bond0: (slave bond_slave_1): Releasing backup interface [ 197.193123][T16722] team0: Port device team_slave_0 removed [ 197.202598][T16729] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5308'. [ 197.217736][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.225303][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.232719][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.240964][T16722] team0: Port device team_slave_1 removed [ 197.248326][T16722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.255845][T16722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.263378][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.270836][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.278256][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.285717][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.293152][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.300569][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.307975][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.315460][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.322894][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.330391][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.338543][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.345973][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.353589][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.361763][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.369309][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.376771][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.384238][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.391796][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.399208][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.406726][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.414204][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.421676][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.429126][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.436593][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.444093][ T3385] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 197.453642][T16722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.461154][T16722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.481604][ T3385] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 197.565159][T16737] loop9: detected capacity change from 0 to 128 [ 197.745024][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 197.745042][ T29] audit: type=1326 audit(1752359782.810:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cf9ba58e7 code=0x7ffc0000 [ 197.775084][ T29] audit: type=1326 audit(1752359782.810:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cf9b4ab19 code=0x7ffc0000 [ 197.798685][ T29] audit: type=1326 audit(1752359782.810:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cf9ba58e7 code=0x7ffc0000 [ 197.826612][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5315'. [ 197.833311][ T29] audit: type=1326 audit(1752359782.810:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cf9b4ab19 code=0x7ffc0000 [ 197.838485][T16765] IPVS: Error joining to the multicast group [ 197.858979][ T29] audit: type=1326 audit(1752359782.894:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 197.888773][ T29] audit: type=1326 audit(1752359782.894:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cf9ba58e7 code=0x7ffc0000 [ 197.912251][ T29] audit: type=1326 audit(1752359782.894:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cf9b4ab19 code=0x7ffc0000 [ 197.935829][ T29] audit: type=1326 audit(1752359782.894:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 197.945549][T16774] syz_tun: entered allmulticast mode [ 197.959403][ T29] audit: type=1326 audit(1752359782.894:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cf9ba58e7 code=0x7ffc0000 [ 197.973633][T16773] syz_tun: left allmulticast mode [ 197.988187][ T29] audit: type=1326 audit(1752359782.894:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.4.5314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cf9b4ab19 code=0x7ffc0000 [ 198.040790][T16777] loop6: detected capacity change from 0 to 512 [ 198.082692][ T3832] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.096892][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5324'. [ 198.108043][T16777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.142709][T16777] ext4 filesystem being mounted at /646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.187613][ T3832] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.202538][T16777] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.5321: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 198.209805][T16796] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5329'. [ 198.240430][T16777] EXT4-fs (loop6): Remounting filesystem read-only [ 198.281494][ T3832] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.318286][T16802] syz_tun: entered allmulticast mode [ 198.325084][T16801] syz_tun: left allmulticast mode [ 198.359622][ T3832] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.625574][ T3832] bond0 (unregistering): Released all slaves [ 198.658708][T16792] chnl_net:caif_netlink_parms(): no params data found [ 198.698226][ T3832] hsr_slave_0: left promiscuous mode [ 198.712640][ T3832] hsr_slave_1: left promiscuous mode [ 198.724719][ T3832] veth1_macvtap: left promiscuous mode [ 198.732931][ T3832] veth0_macvtap: left promiscuous mode [ 198.740859][ T3832] veth1_vlan: left promiscuous mode [ 198.747892][ T3832] veth0_vlan: left promiscuous mode [ 198.845281][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.898885][T16841] loop6: detected capacity change from 0 to 1024 [ 198.905763][T16841] EXT4-fs: Ignoring removed nobh option [ 198.931533][T16841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.969476][T16792] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.976717][T16792] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.003691][T16792] bridge_slave_0: entered allmulticast mode [ 199.010342][T16792] bridge_slave_0: entered promiscuous mode [ 199.021455][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.031514][T16792] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.038800][T16792] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.049596][T16792] bridge_slave_1: entered allmulticast mode [ 199.056321][T16792] bridge_slave_1: entered promiscuous mode [ 199.113960][T16792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.124806][T16863] netlink: 'syz.1.5353': attribute type 3 has an invalid length. [ 199.156899][T16792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.225602][T16792] team0: Port device team_slave_0 added [ 199.246656][T16792] team0: Port device team_slave_1 added [ 199.300430][T16792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.307435][T16792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.333488][T16792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.345632][T16792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.352711][T16792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.378752][T16792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.438930][T16792] hsr_slave_0: entered promiscuous mode [ 199.466511][T16792] hsr_slave_1: entered promiscuous mode [ 199.890039][T16792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.911748][T16792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.931138][T16792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.947087][T16792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.986847][T16924] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5376'. [ 200.040185][T16792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.074313][T16792] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.089262][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5381'. [ 200.102317][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.109429][ T3807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.129454][ T3803] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.136635][ T3803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.281749][T16792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.305040][T16957] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5390'. [ 200.433189][T16975] netlink: 'syz.6.5394': attribute type 4 has an invalid length. [ 200.441044][T16975] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5394'. [ 200.457746][T16975] : renamed from $H [ 200.497919][T16792] veth0_vlan: entered promiscuous mode [ 200.515505][T16792] veth1_vlan: entered promiscuous mode [ 200.549960][T16792] veth0_macvtap: entered promiscuous mode [ 200.568160][T16986] pimreg: entered allmulticast mode [ 200.593648][T16792] veth1_macvtap: entered promiscuous mode [ 200.603437][T16986] pimreg: left allmulticast mode [ 200.618759][T16792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.642198][T16792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.667915][T16792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.676721][T16792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.685564][T16792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.694297][T16792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.758671][T16995] netlink: 'syz.7.5402': attribute type 4 has an invalid length. [ 200.796755][T16994] netlink: 'syz.7.5402': attribute type 4 has an invalid length. [ 200.895289][T17003] pim6reg: entered allmulticast mode [ 200.934288][T17007] loop5: detected capacity change from 0 to 2048 [ 200.962264][T17007] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.968828][T17007] EXT4-fs: Ignoring removed i_version option [ 200.991326][T17003] pim6reg: left allmulticast mode [ 201.016469][T17007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.085336][T16792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.160013][T17024] loop5: detected capacity change from 0 to 512 [ 201.278781][T17024] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.318939][T17024] EXT4-fs (loop5): 1 truncate cleaned up [ 201.330589][T17024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.417771][T16792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.444767][T17036] vlan0: entered allmulticast mode [ 201.600070][T17050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5423'. [ 201.781542][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5435'. [ 201.979170][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5446'. [ 202.186362][T17126] pim6reg: entered allmulticast mode [ 202.204013][T17126] pim6reg: left allmulticast mode [ 202.522534][T17164] serio: Serial port ptm0 [ 202.613155][T17167] loop5: detected capacity change from 0 to 512 [ 202.633192][T17167] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 202.689383][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 202.689401][ T29] audit: type=1326 audit(1752359787.999:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.719194][ T29] audit: type=1326 audit(1752359787.999:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.742898][ T29] audit: type=1326 audit(1752359787.999:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.766567][ T29] audit: type=1326 audit(1752359787.999:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.790394][ T29] audit: type=1326 audit(1752359787.999:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.814022][ T29] audit: type=1326 audit(1752359787.999:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.837538][ T29] audit: type=1326 audit(1752359787.999:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.861133][ T29] audit: type=1326 audit(1752359787.999:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.884662][ T29] audit: type=1326 audit(1752359787.999:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.908204][ T29] audit: type=1326 audit(1752359788.010:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 202.908383][T17167] loop5: detected capacity change from 0 to 8192 [ 202.957053][T17174] all: renamed from lo (while UP) [ 202.984528][T17167] loop5: p1 < > p2 < p5 > p3 p4 [ 203.005301][T17167] loop5: p3 start 83890176 is beyond EOD, truncated [ 203.012042][T17167] loop5: p4 size 16776960 extends beyond EOD, truncated [ 203.047581][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5486'. [ 203.056644][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5486'. [ 203.061881][T17167] loop5: p5 size 16776960 extends beyond EOD, truncated [ 203.084828][T17192] loop6: detected capacity change from 0 to 128 [ 203.111291][T17192] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.126939][T17192] ext4 filesystem being mounted at /683/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.331940][T17222] netlink: 'syz.1.5501': attribute type 1 has an invalid length. [ 203.339962][T17222] netlink: 'syz.1.5501': attribute type 2 has an invalid length. [ 203.347879][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5501'. [ 203.565325][T17251] 9pnet_fd: p9_fd_create_tcp (17251): problem connecting socket to 127.0.0.1 [ 203.645134][T17259] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 203.876167][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5526'. [ 203.901353][ T8270] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.466548][T17336] sctp: [Deprecated]: syz.1.5552 (pid 17336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.466548][T17336] Use struct sctp_sack_info instead [ 204.536244][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5554'. [ 204.939923][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5572'. [ 205.015446][T17389] all: renamed from lo [ 205.023962][T17388] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5577'. [ 205.093899][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5583'. [ 205.111215][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5584'. [ 205.115211][T17401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.127794][T17401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.137704][T17401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.145490][T17401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.441059][T17426] all: renamed from lo [ 205.460555][T17422] SELinux: failed to load policy [ 205.537947][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5597'. [ 205.651383][T17443] syz_tun: entered allmulticast mode [ 205.661686][T17442] syz_tun: left allmulticast mode [ 206.333640][T17468] netem: change failed [ 206.424685][T17480] netlink: 'syz.4.5617': attribute type 3 has an invalid length. [ 206.459114][T17486] syz_tun: entered allmulticast mode [ 206.466909][T17485] syz_tun: left allmulticast mode [ 206.699013][T17513] netlink: 'syz.7.5629': attribute type 4 has an invalid length. [ 206.707530][T17513] : renamed from bond0 [ 206.971982][T17549] netlink: 'syz.4.5644': attribute type 4 has an invalid length. [ 206.998114][T17549] : renamed from bond0 (while UP) [ 207.114155][T17564] syz_tun: entered allmulticast mode [ 207.140684][T17563] syz_tun: left allmulticast mode [ 207.374167][T17584] netlink: 'syz.5.5661': attribute type 4 has an invalid length. [ 207.389732][T17584] : renamed from bond0 (while UP) [ 207.504483][T17596] syz_tun: entered allmulticast mode [ 207.514278][T17595] syz_tun: left allmulticast mode [ 207.541400][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 207.541418][ T29] audit: type=1400 audit(1752359793.095:4426): avc: denied { mount } for pid=17599 comm="syz.1.5669" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 207.571863][ T29] audit: type=1400 audit(1752359793.137:4427): avc: denied { search } for pid=17599 comm="syz.1.5669" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.594323][ T29] audit: type=1400 audit(1752359793.137:4428): avc: denied { search } for pid=17599 comm="syz.1.5669" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.616841][ T29] audit: type=1400 audit(1752359793.137:4429): avc: denied { read open } for pid=17599 comm="syz.1.5669" path="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.759969][T17614] wg2: entered promiscuous mode [ 207.764922][T17614] wg2: entered allmulticast mode [ 207.811793][T17620] team0: Mode changed to "loadbalance" [ 207.823270][T17620] netlink: 'syz.6.5678': attribute type 10 has an invalid length. [ 207.834342][T17620] : left promiscuous mode [ 207.845788][T17620] 8021q: adding VLAN 0 to HW filter on device  [ 207.853744][T17620] team0: Port device  added [ 207.861341][T17628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.893133][T17631] netem: incorrect gi model size [ 207.898190][T17631] netem: change failed [ 207.929645][T17628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.984938][T17628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.051739][T17628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.100353][ T29] audit: type=1326 audit(1752359793.683:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17657 comm="syz.1.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 208.125298][ T29] audit: type=1326 audit(1752359793.683:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17657 comm="syz.1.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 208.148945][ T29] audit: type=1326 audit(1752359793.693:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17657 comm="syz.1.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 208.172910][ T29] audit: type=1326 audit(1752359793.693:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17657 comm="syz.1.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 208.196430][ T29] audit: type=1326 audit(1752359793.693:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17657 comm="syz.1.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 208.219942][ T29] audit: type=1326 audit(1752359793.693:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17657 comm="syz.1.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 208.245903][T17661] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.295113][T17668] __nla_validate_parse: 10 callbacks suppressed [ 208.295160][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5700'. [ 208.324623][T17628] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.333360][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5700'. [ 208.363898][T17628] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.392510][T17628] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.431203][T17628] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.441157][T17675] netlink: 1088 bytes leftover after parsing attributes in process `syz.6.5703'. [ 208.510905][T17683] vlan2: entered allmulticast mode [ 208.674728][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5713'. [ 208.843069][T17707] nfs: Unknown parameter '0xffffffffffffffff' [ 208.862477][T17712] netlink: 'syz.6.5718': attribute type 4 has an invalid length. [ 208.870911][T17717] atomic_op ffff888144406d28 conn xmit_atomic 0000000000000000 [ 208.879666][T17712] netlink: 'syz.6.5718': attribute type 4 has an invalid length. [ 208.905083][T17719] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5724'. [ 208.933516][T17719]  (unregistering): Released all slaves [ 208.954478][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5726'. [ 209.028932][T17721] loop5: detected capacity change from 0 to 8192 [ 209.179820][T17744] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.286062][T17757] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.5736'. [ 209.295266][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5736'. [ 209.310739][T17758] bridge_slave_0: left promiscuous mode [ 209.316507][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.334463][T17758] bridge_slave_1: left allmulticast mode [ 209.340198][T17758] bridge_slave_1: left promiscuous mode [ 209.345968][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.368580][T17758] bond0: (slave bond_slave_0): Releasing backup interface [ 209.380569][T17758] bond0: (slave bond_slave_1): Releasing backup interface [ 209.394492][T17758] team0: Port device team_slave_0 removed [ 209.403548][T17758] team0: Port device team_slave_1 removed [ 209.416989][T17766] netlink: 'syz.1.5740': attribute type 10 has an invalid length. [ 209.443061][T17763] team0: Mode changed to "loadbalance" [ 209.457580][T17765] wg2: entered promiscuous mode [ 209.462595][T17765] wg2: entered allmulticast mode [ 209.494197][T17766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.515395][T17766] team0: Port device bond0 added [ 209.596223][T17777] vlan0: entered allmulticast mode [ 209.601567][T17777] bridge_slave_0: entered allmulticast mode [ 210.091659][T17804] bridge_slave_0: left allmulticast mode [ 210.097458][T17804] bridge_slave_0: left promiscuous mode [ 210.103401][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.113862][T17804] bridge_slave_1: left allmulticast mode [ 210.119548][T17804] bridge_slave_1: left promiscuous mode [ 210.125353][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.137172][T17804] : (slave bond_slave_0): Releasing backup interface [ 210.150021][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.166511][T17804] : (slave bond_slave_1): Releasing backup interface [ 210.188805][T17804] team0: Port device team_slave_0 removed [ 210.195253][T17813] netlink: 'syz.5.5759': attribute type 10 has an invalid length. [ 210.209762][T17804] team0: Port device team_slave_1 removed [ 210.224449][T17804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.232048][T17804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.258644][T17804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.266181][T17804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.307455][T17819] loop6: detected capacity change from 0 to 2048 [ 210.338215][T17810] team0: Mode changed to "loadbalance" [ 210.347121][T17819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.364798][T17813] 8021q: adding VLAN 0 to HW filter on device  [ 210.372782][T17813] team0: Port device  added [ 210.412221][ T3838] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.427707][ T3838] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 210.440018][ T3838] EXT4-fs (loop6): This should not happen!! Data will be lost [ 210.440018][ T3838] [ 210.447334][T17833] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.5770'. [ 210.449698][ T3838] EXT4-fs (loop6): Total free blocks count 0 [ 210.458871][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5770'. [ 210.474044][ T3838] EXT4-fs (loop6): Free/Dirty block details [ 210.479971][ T3838] EXT4-fs (loop6): free_blocks=2415919104 [ 210.485224][T17832] atomic_op ffff88814cea3528 conn xmit_atomic 0000000000000000 [ 210.485719][ T3838] EXT4-fs (loop6): dirty_blocks=16 [ 210.498604][ T3838] EXT4-fs (loop6): Block reservation details [ 210.504860][ T3838] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 210.512841][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.581154][T17847] netlink: 'syz.5.5775': attribute type 1 has an invalid length. [ 210.602089][T17847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.630048][T17847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.637764][T17847] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.649801][T17847] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 210.663787][T17855] vlan2: entered allmulticast mode [ 210.766157][T17861] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.920005][T17873] program syz.6.5787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.033831][T17885] loop6: detected capacity change from 0 to 164 [ 211.040993][T17885] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 211.051831][T17885] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 211.060731][T17885] Symlink component flag not implemented [ 211.066469][T17885] Symlink component flag not implemented [ 211.072848][T17885] Symlink component flag not implemented (7) [ 211.078946][T17885] Symlink component flag not implemented (116) [ 211.113818][T17889] loop6: detected capacity change from 0 to 2048 [ 211.131954][T17889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.213357][T17898] validate_nla: 1 callbacks suppressed [ 211.213437][T17898] netlink: 'syz.5.5797': attribute type 3 has an invalid length. [ 211.348177][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.411348][T17912] team0: Port device  removed [ 211.420505][T17912]  (unregistering): Released all slaves [ 211.445584][T17916] loop6: detected capacity change from 0 to 8192 [ 211.986605][T17951] loop6: detected capacity change from 0 to 128 [ 212.093846][T17956] loop6: detected capacity change from 0 to 512 [ 212.123896][T17956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.136864][T17956] ext4 filesystem being mounted at /756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.153387][T17956] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 212.181858][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.201848][T17966] wg2: left promiscuous mode [ 212.206660][T17966] wg2: left allmulticast mode [ 212.215389][T17966] wg2: entered promiscuous mode [ 212.220428][T17966] wg2: entered allmulticast mode [ 212.533663][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 212.533677][ T29] audit: type=1326 audit(1752359798.347:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.565258][ T29] audit: type=1326 audit(1752359798.347:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.589513][ T29] audit: type=1326 audit(1752359798.347:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.613390][ T29] audit: type=1326 audit(1752359798.347:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.637179][ T29] audit: type=1326 audit(1752359798.347:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.660968][ T29] audit: type=1326 audit(1752359798.347:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.680446][T17993] netlink: 'syz.6.5841': attribute type 4 has an invalid length. [ 212.685098][ T29] audit: type=1326 audit(1752359798.347:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.693903][T17993] netlink: 'syz.6.5841': attribute type 4 has an invalid length. [ 212.716169][ T29] audit: type=1326 audit(1752359798.378:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.747833][ T29] audit: type=1326 audit(1752359798.378:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 212.772388][ T29] audit: type=1326 audit(1752359798.400:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17989 comm="syz.6.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f980fe929 code=0x7ffc0000 [ 213.169013][T18023] loop5: detected capacity change from 0 to 8192 [ 213.413133][T18057] __nla_validate_parse: 4 callbacks suppressed [ 213.413153][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'. [ 213.428376][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5868'. [ 213.510604][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5872'. [ 213.522999][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5872'. [ 213.675081][T18079] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5877'. [ 213.870168][T18102] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5886'. [ 213.894472][T18102] team0: Port device bond0 removed [ 213.909178][T18102] bond0 (unregistering): Released all slaves [ 213.997862][T18119] serio: Serial port ptm0 [ 214.898604][T18163] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5913'. [ 214.939888][T18163]  (unregistering): Released all slaves [ 215.107943][T18173] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.5915'. [ 215.117405][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5915'. [ 215.308696][T18203] raw_sendmsg: syz.5.5930 forgot to set AF_INET. Fix it! [ 215.409892][T18213] netlink: 'syz.1.5935': attribute type 4 has an invalid length. [ 215.444827][T18213] netlink: 'syz.1.5935': attribute type 4 has an invalid length. [ 215.455075][T18217] loop5: detected capacity change from 0 to 256 [ 215.463606][T18217] FAT-fs (loop5): bogus number of FAT sectors [ 215.469852][T18217] FAT-fs (loop5): Can't find a valid FAT filesystem [ 215.559288][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5942'. [ 215.583694][T18228] loop5: detected capacity change from 0 to 8192 [ 215.650726][T16792] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 215.658652][T16792] FAT-fs (loop5): Filesystem has been set read-only [ 216.038017][T18272] loop7: detected capacity change from 0 to 16416 [ 216.204299][T18274] loop7: detected capacity change from 16416 to 0 [ 216.334994][T18282] loop6: detected capacity change from 0 to 512 [ 216.352851][T18282] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5963: Failed to acquire dquot type 1 [ 216.368176][T18282] EXT4-fs (loop6): 1 truncate cleaned up [ 216.376843][T18287] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 216.384788][T18282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.407004][T18282] ext4 filesystem being mounted at /778/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.441979][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.451398][T18291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18291 comm=syz.1.5966 [ 216.556997][T18305] loop5: detected capacity change from 0 to 512 [ 216.565315][T18305] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.572685][T18305] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5974: bg 0: block 248: padding at end of block bitmap is not set [ 216.589147][T18305] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5974: Failed to acquire dquot type 1 [ 216.601152][T18305] EXT4-fs (loop5): 1 truncate cleaned up [ 216.613971][T18305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.630949][T18305] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 216.653015][T18305] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 216.673738][T16792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.781416][T18325] ALSA: seq fatal error: cannot create timer (-22) [ 217.195645][T18374] macsec0: entered promiscuous mode [ 217.590406][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 217.590434][ T29] audit: type=1400 audit(1752359803.662:4752): avc: denied { lock } for pid=18406 comm="syz.6.6016" path="socket:[52515]" dev="sockfs" ino=52515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 217.673625][ T29] audit: type=1326 audit(1752359803.746:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18391 comm="syz.7.6009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x0 [ 217.819950][ T29] audit: type=1326 audit(1752359803.893:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 217.843629][ T29] audit: type=1326 audit(1752359803.893:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 217.925519][ T29] audit: type=1326 audit(1752359803.956:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 217.949172][ T29] audit: type=1326 audit(1752359803.956:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 217.972870][ T29] audit: type=1326 audit(1752359803.956:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 217.996423][ T29] audit: type=1326 audit(1752359803.956:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 218.020060][ T29] audit: type=1326 audit(1752359803.956:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 218.043601][ T29] audit: type=1326 audit(1752359803.956:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.5.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63751ce929 code=0x7ffc0000 [ 218.067279][ T3803] nci: nci_rsp_packet: unknown rsp opcode 0x10c [ 218.234830][T18430] __nla_validate_parse: 2 callbacks suppressed [ 218.234860][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6025'. [ 218.306881][T18432] bridge: RTM_NEWNEIGH with invalid ether address [ 218.763535][T18472] loop5: detected capacity change from 0 to 256 [ 218.795283][T18472] FAT-fs (loop5): Directory bread(block 64) failed [ 218.816313][T18472] FAT-fs (loop5): Directory bread(block 65) failed [ 218.827619][T18472] FAT-fs (loop5): Directory bread(block 66) failed [ 218.845835][T18472] FAT-fs (loop5): Directory bread(block 67) failed [ 218.867018][T18472] FAT-fs (loop5): Directory bread(block 68) failed [ 218.886964][T18472] FAT-fs (loop5): Directory bread(block 69) failed [ 218.907346][T18472] FAT-fs (loop5): Directory bread(block 70) failed [ 218.934667][T18472] FAT-fs (loop5): Directory bread(block 71) failed [ 218.955740][T18472] FAT-fs (loop5): Directory bread(block 72) failed [ 218.970556][T18472] FAT-fs (loop5): Directory bread(block 73) failed [ 219.442102][T18510] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 220.267453][T18570] loop6: detected capacity change from 0 to 512 [ 220.282162][T18570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.295566][T18570] ext4 filesystem being mounted at /810/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.325659][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.474074][T18584] netlink: 'syz.6.6089': attribute type 1 has an invalid length. [ 220.606394][T18606] loop5: detected capacity change from 0 to 512 [ 220.625163][T18606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.640374][T18606] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.674891][T16792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.150943][T18627] loop5: detected capacity change from 0 to 4096 [ 221.157723][T18627] EXT4-fs: test_dummy_encryption option not supported [ 221.174410][T18627] loop5: detected capacity change from 0 to 1024 [ 221.181304][T18627] EXT4-fs warning (device loop5): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 221.210143][T18629] loop5: detected capacity change from 0 to 128 [ 221.428859][ T3803] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.490029][ T3803] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.546560][T18657] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6118'. [ 221.558825][ T3803] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.605438][ T3803] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.775954][ T3803] bond0 (unregistering): Released all slaves [ 221.827517][T18653] chnl_net:caif_netlink_parms(): no params data found [ 221.841406][ T3803] hsr_slave_0: left promiscuous mode [ 221.847213][ T3803] hsr_slave_1: left promiscuous mode [ 221.856005][ T3803] veth1_macvtap: left promiscuous mode [ 221.861590][ T3803] veth0_macvtap: left promiscuous mode [ 221.867135][ T3803] veth1_vlan: left promiscuous mode [ 221.872484][ T3803] veth0_vlan: left promiscuous mode [ 221.993557][T18653] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.000635][T18653] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.009153][T18653] bridge_slave_0: entered allmulticast mode [ 222.015770][T18653] bridge_slave_0: entered promiscuous mode [ 222.022613][T18653] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.029780][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.037014][T18653] bridge_slave_1: entered allmulticast mode [ 222.043492][T18653] bridge_slave_1: entered promiscuous mode [ 222.060273][T18653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.070898][T18653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.091149][T18653] team0: Port device team_slave_0 added [ 222.097777][T18653] team0: Port device team_slave_1 added [ 222.113791][T18653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.120824][T18653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.146884][T18653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.158180][T18653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.165263][T18653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.191426][T18653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.218375][T18653] hsr_slave_0: entered promiscuous mode [ 222.224667][T18653] hsr_slave_1: entered promiscuous mode [ 222.435865][T18653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.444575][T18653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.453274][T18653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.462069][T18653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.494660][T18653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.506804][T18653] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.516401][ T3828] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.523556][ T3828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.534504][ T3828] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.541596][ T3828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.599123][T18653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.660475][T18653] veth0_vlan: entered promiscuous mode [ 222.668056][T18653] veth1_vlan: entered promiscuous mode [ 222.682336][T18653] veth0_macvtap: entered promiscuous mode [ 222.689655][T18653] veth1_macvtap: entered promiscuous mode [ 222.700199][T18653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.710878][T18653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.720020][T18653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.728836][T18653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.737650][T18653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.746404][T18653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.774086][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 222.774098][ T29] audit: type=1400 audit(1752359809.103:4806): avc: denied { write } for pid=18653 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 222.837334][ T29] audit: type=1400 audit(1752359809.103:4807): avc: denied { open } for pid=18653 comm="syz-executor" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 223.459761][ T29] audit: type=1326 audit(1752359809.828:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.483404][ T29] audit: type=1326 audit(1752359809.828:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.509024][ T29] audit: type=1326 audit(1752359809.828:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.532817][ T29] audit: type=1326 audit(1752359809.849:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.556402][ T29] audit: type=1326 audit(1752359809.849:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.580178][ T29] audit: type=1326 audit(1752359809.849:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.603913][ T29] audit: type=1326 audit(1752359809.849:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.627642][ T29] audit: type=1326 audit(1752359809.849:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.7.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 223.966991][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6148'. [ 223.989515][T18761] hsr_slave_0 (unregistering): left promiscuous mode [ 224.277789][T18767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6151'. [ 224.371521][T18772] pim6reg1: entered promiscuous mode [ 224.376985][T18772] pim6reg1: entered allmulticast mode [ 224.531863][T18776] loop6: detected capacity change from 0 to 4096 [ 224.555423][T18776] EXT4-fs: test_dummy_encryption option not supported [ 224.596009][T18782] pim6reg1: entered promiscuous mode [ 224.601458][T18782] pim6reg1: entered allmulticast mode [ 224.608305][T18776] loop6: detected capacity change from 0 to 1024 [ 224.618961][T18776] EXT4-fs warning (device loop6): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 224.669450][T18786] netlink: 'syz.6.6160': attribute type 39 has an invalid length. [ 224.739792][T18792] loop3: detected capacity change from 0 to 128 [ 224.754246][T18792] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.800345][T18792] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.910693][T18653] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.005147][T18809] loop3: detected capacity change from 0 to 512 [ 225.022677][T18809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.035403][T18809] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.052329][T18809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.061228][T18809] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 225.080447][T18653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.669495][T18845] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6184'. [ 225.708250][T18850] netlink: 'syz.1.6186': attribute type 39 has an invalid length. [ 225.724278][T18852] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6187'. [ 225.816092][T18865] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6201'. [ 226.194765][T18903] netlink: 'syz.1.6208': attribute type 1 has an invalid length. [ 226.213121][T18903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.237841][T18903] bond0: (slave veth5): Enslaving as an active interface with a down link [ 226.256672][T18903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.264039][T18903] bond0: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 226.377120][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6215'. [ 226.417554][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6218'. [ 226.427112][T18923] sd 0:0:1:0: device reset [ 226.584429][T18945] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 226.631970][T18951] netlink: 'syz.4.6230': attribute type 39 has an invalid length. [ 226.750852][T18960] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 226.750852][T18960] [ 226.777620][T18962] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 226.883939][T18977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18977 comm=syz.6.6242 [ 227.034923][T18984] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6244'. [ 227.138268][T18989] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6245'. [ 227.147497][T18989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6245'. [ 229.507090][T19058] __nla_validate_parse: 2 callbacks suppressed [ 229.507109][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 229.522346][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 229.756509][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 229.756523][ T29] audit: type=1400 audit(1752359816.434:4864): avc: denied { mounton } for pid=19070 comm="syz.7.6279" path="/file0" dev="ramfs" ino=55351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 229.806237][T19075] netlink: 'syz.4.6282': attribute type 21 has an invalid length. [ 229.824021][T19075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6282'. [ 229.857332][T19084] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6285'. [ 229.899070][T19085] SELinux: ebitmap: truncated map [ 229.906738][ T29] audit: type=1400 audit(1752359816.592:4865): avc: denied { mount } for pid=19090 comm="syz.6.6289" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 229.934353][T19085] SELinux: failed to load policy [ 229.966037][T19098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19098 comm=syz.4.6290 [ 229.980369][T19094] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6291'. [ 229.989400][T19094] netem: unknown loss type 0 [ 229.994071][T19094] netem: change failed [ 230.148893][T19125] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6304'. [ 230.244415][T19135] xt_hashlimit: size too large, truncated to 1048576 [ 230.256188][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6307'. [ 230.429708][T19138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.440268][T19138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.480880][T19138] hsr0: entered promiscuous mode [ 230.485950][T19138] hsr0: entered allmulticast mode [ 230.491066][T19138] hsr_slave_0: entered allmulticast mode [ 230.496869][T19138] hsr_slave_1: entered allmulticast mode [ 230.614723][ T29] audit: type=1326 audit(1752359817.338:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.638405][ T29] audit: type=1326 audit(1752359817.338:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.695398][ T29] audit: type=1326 audit(1752359817.390:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.718977][ T29] audit: type=1326 audit(1752359817.390:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.742550][ T29] audit: type=1326 audit(1752359817.390:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.766061][ T29] audit: type=1326 audit(1752359817.401:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.789603][ T29] audit: type=1326 audit(1752359817.401:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.813195][ T29] audit: type=1326 audit(1752359817.401:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19150 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 230.867662][T19157] loop6: detected capacity change from 0 to 8192 [ 231.049760][T19164] syzkaller0: entered promiscuous mode [ 231.055303][T19164] syzkaller0: entered allmulticast mode [ 231.264455][T19183] IPVS: Error connecting to the multicast addr [ 231.323195][ T3385] page_pool_release_retry() stalled pool shutdown: id 96, 1 inflight 60 sec [ 231.386124][T19202] 9p: Unknown access argument : -22 [ 231.528686][T19218] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 231.528686][T19218] [ 232.139088][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6346'. [ 232.210484][T19239] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6352'. [ 232.219699][T19239] netem: unknown loss type 0 [ 232.224342][T19239] netem: change failed [ 232.472770][T19253] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 232.472770][T19253] [ 232.679898][T19270] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6363'. [ 232.694819][ T3366] page_pool_release_retry() stalled pool shutdown: id 97, 1 inflight 60 sec [ 233.503823][T19341] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 233.540645][T19343] loop6: detected capacity change from 0 to 1024 [ 233.566244][T19343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.601660][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.572090][T19408] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 234.631751][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 234.631769][ T29] audit: type=1326 audit(1752359821.560:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.674584][T19367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 234.697085][ T29] audit: type=1326 audit(1752359821.560:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.706062][T19414] Falling back ldisc for ptm0. [ 234.720649][ T29] audit: type=1326 audit(1752359821.560:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.748923][ T29] audit: type=1326 audit(1752359821.560:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.772551][ T29] audit: type=1326 audit(1752359821.560:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.796144][ T29] audit: type=1326 audit(1752359821.560:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.819690][ T29] audit: type=1326 audit(1752359821.560:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.843512][ T29] audit: type=1326 audit(1752359821.560:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.867072][ T29] audit: type=1326 audit(1752359821.560:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 234.890693][ T29] audit: type=1326 audit(1752359821.560:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4cf9bae929 code=0x7ffc0000 [ 235.177579][T19424] dvmrp8: entered allmulticast mode [ 235.249508][T19426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.287684][T19426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.311186][T19429] __nla_validate_parse: 5 callbacks suppressed [ 235.311203][T19429] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.6430'. [ 235.326674][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6430'. [ 235.355431][T19426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.401510][T19426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.453074][T19426] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.466862][T19426] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.469712][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6437'. [ 235.480730][T19426] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.498377][T19426] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.507252][T19443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6437'. [ 235.582397][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6442'. [ 236.084333][T19464] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 236.208559][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6449'. [ 236.224101][T19472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6449'. [ 236.578313][T19483] netlink: 'syz.7.6453': attribute type 1 has an invalid length. [ 236.594926][T19483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.605979][T19486] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 236.617978][T19483] vlan0: entered allmulticast mode [ 236.623159][T19483] bond0: entered allmulticast mode [ 236.748751][T19499] netlink: 'syz.4.6462': attribute type 10 has an invalid length. [ 236.758014][T19499] team0: Port device dummy0 added [ 236.768850][T19499] netlink: 'syz.4.6462': attribute type 10 has an invalid length. [ 236.779444][T19499] team0: Port device dummy0 removed [ 236.844443][T19510] tipc: Started in network mode [ 236.849462][T19510] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 236.858592][T19510] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 236.866712][T19510] tipc: Enabled bearer , priority 10 [ 237.128254][T19540] loop6: detected capacity change from 0 to 1024 [ 237.135091][T19540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.163377][T19542] vlan0: entered allmulticast mode [ 237.171913][T19540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.200821][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.272016][T19554] netlink: 'syz.6.6485': attribute type 13 has an invalid length. [ 237.294260][T19554] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.306933][T19554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.458557][T19573] netlink: 'syz.6.6493': attribute type 1 has an invalid length. [ 237.523725][T19582] bridge: RTM_NEWNEIGH with invalid ether address [ 237.640311][T19602] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 237.809763][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.817280][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.855300][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.862759][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.870209][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.877656][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.885143][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.892564][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.900085][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.907545][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.915043][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.922489][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.945774][ T1035] tipc: Node number set to 1 [ 237.963382][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.970886][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.978402][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.985864][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 237.993366][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.000824][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.008262][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.015745][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.023224][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.030675][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.038081][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.045473][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.052985][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.060389][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.067889][ T3385] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.076118][ T3385] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 238.185811][T19659] netlink: 'syz.7.6531': attribute type 10 has an invalid length. [ 238.195040][T19659] team0: Port device dummy0 added [ 238.201920][T19659] netlink: 'syz.7.6531': attribute type 10 has an invalid length. [ 238.212303][T19659] team0: Port device dummy0 removed [ 238.822194][T19726] 9pnet_fd: p9_fd_create_tcp (19726): problem connecting socket to 127.0.0.1 [ 239.130503][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.145391][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.164656][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.262234][T19758] infiniband syZ2: set down [ 239.266972][T19758] infiniband syZ2: added vxcan1 [ 239.271968][ T3386] vxcan1 speed is unknown, defaulting to 1000 [ 239.304290][T19758] RDS/IB: syZ2: added [ 239.319385][T19758] smc: adding ib device syZ2 with port count 1 [ 239.335364][T19758] smc: ib device syZ2 port 1 has pnetid [ 239.341406][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 239.363141][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.465573][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.683265][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.719857][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.755863][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.795530][T19758] vxcan1 speed is unknown, defaulting to 1000 [ 239.832364][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 239.832380][ T29] audit: type=1326 audit(1752359827.021:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 239.866478][ T29] audit: type=1326 audit(1752359827.021:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 239.890098][ T29] audit: type=1326 audit(1752359827.021:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5404ede963 code=0x7ffc0000 [ 239.913461][ T29] audit: type=1326 audit(1752359827.031:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5404edd3df code=0x7ffc0000 [ 239.936904][ T29] audit: type=1326 audit(1752359827.105:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5404ede9b7 code=0x7ffc0000 [ 239.960447][ T29] audit: type=1326 audit(1752359827.136:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5404edd290 code=0x7ffc0000 [ 239.984008][ T29] audit: type=1326 audit(1752359827.136:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5404edd58a code=0x7ffc0000 [ 240.067721][ T29] audit: type=1326 audit(1752359827.157:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 240.091363][ T29] audit: type=1326 audit(1752359827.157:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 240.114969][ T29] audit: type=1326 audit(1752359827.241:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.1.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 240.118158][T19778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6585'. [ 240.400853][T19822] loop6: detected capacity change from 0 to 512 [ 240.408418][T19822] ext4: Unknown parameter 'obj_type' [ 240.645968][T19845] loop6: detected capacity change from 0 to 512 [ 240.677515][T19845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.690179][T19845] ext4 filesystem being mounted at /919/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.756898][T19858] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6621'. [ 240.859869][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.860394][T19867] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6624'. [ 241.146153][T19884] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 241.240632][T19890] loop3: detected capacity change from 0 to 2048 [ 241.261184][T19888] vxcan1 speed is unknown, defaulting to 1000 [ 241.275077][T19890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.402875][T19890] vxcan1 speed is unknown, defaulting to 1000 [ 241.729039][T18653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.856240][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6647'. [ 241.876055][T19917] ip6gre1: entered allmulticast mode [ 242.160560][T19925] vxcan1 speed is unknown, defaulting to 1000 [ 242.475508][T19942] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6658'. [ 242.888388][T19961] syzkaller0: entered promiscuous mode [ 242.893954][T19961] syzkaller0: entered allmulticast mode [ 242.939573][T19967] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 242.939573][T19967] program syz.1.6670 not setting count and/or reply_len properly [ 242.963247][T19963] vxcan1 speed is unknown, defaulting to 1000 [ 243.663602][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.856109][T20022] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.883326][T20026] tipc: Enabling of bearer rejected, already enabled [ 243.931326][T20022] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.951599][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 243.968659][T20034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.981470][T20034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.002210][T20022] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.090468][T20022] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.146952][T20022] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.160484][T20022] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.173617][T20022] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.185412][T20022] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.254873][T20042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6704'. [ 244.337634][T20052] vxcan1 speed is unknown, defaulting to 1000 [ 244.603476][T20076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.686990][T20076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.754105][T20076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.803505][T20076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.872684][T20076] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.888732][T20076] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.908584][T20076] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.922904][T20076] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.978171][T20093] vxcan1 speed is unknown, defaulting to 1000 [ 245.385760][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 245.385778][ T29] audit: type=1400 audit(1752359832.849:6196): avc: denied { remount } for pid=20119 comm="syz.3.6736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.577019][ T29] audit: type=1326 audit(1752359833.049:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm="syz.3.6747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.609841][T20144] netlink: 'syz.4.6748': attribute type 12 has an invalid length. [ 245.638037][ T29] audit: type=1326 audit(1752359833.049:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm="syz.3.6747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.661793][ T29] audit: type=1326 audit(1752359833.091:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm="syz.3.6747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.685376][ T29] audit: type=1326 audit(1752359833.091:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.708892][ T29] audit: type=1326 audit(1752359833.091:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.732343][ T29] audit: type=1326 audit(1752359833.091:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.755913][ T29] audit: type=1326 audit(1752359833.091:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.779715][ T29] audit: type=1326 audit(1752359833.091:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.803245][ T29] audit: type=1326 audit(1752359833.091:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20141 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff68525e929 code=0x7ffc0000 [ 245.995588][T20158] vxcan1 speed is unknown, defaulting to 1000 [ 246.065033][T20163] netlink: 'syz.6.6756': attribute type 10 has an invalid length. [ 246.075099][T20163] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6756'. [ 246.114314][T20163] geneve1: left promiscuous mode [ 246.149346][T20163] team0: Port device geneve1 added [ 246.186902][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.360002][T20189] vhci_hcd: invalid port number 236 [ 246.365326][T20189] vhci_hcd: invalid port number 236 [ 246.376955][T20187] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.436670][T20187] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.506027][T20187] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.539211][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6776'. [ 246.565687][T20213] loop3: detected capacity change from 0 to 512 [ 246.578256][T20187] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.600975][T20213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.625320][T20213] EXT4-fs (loop3): 1 truncate cleaned up [ 246.632390][T20213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.645388][ T3842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.713420][T18653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.833302][T20230] loop6: detected capacity change from 0 to 256 [ 246.865949][T20234] sch_fq: defrate 2048 ignored. [ 247.069407][T20248] vhci_hcd: invalid port number 236 [ 247.074717][T20248] vhci_hcd: invalid port number 236 [ 247.155428][T20258] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 247.167830][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.208464][T20260] vhci_hcd: invalid port number 96 [ 247.212321][T20262] vxcan1 speed is unknown, defaulting to 1000 [ 247.213620][T20260] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 247.307708][T20268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.316382][T20268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.624761][ T3838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.829937][T20276] loop3: detected capacity change from 0 to 1024 [ 247.845800][T20276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.878376][T18653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.957663][T20293] netlink: 'syz.3.6814': attribute type 1 has an invalid length. [ 248.003593][T20293] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 248.231113][T20187] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.252309][T20187] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.283780][T20187] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.293197][T20313] netlink: 'syz.3.6823': attribute type 4 has an invalid length. [ 248.301016][T20313] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6823'. [ 248.307005][T20187] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.450081][T20323] vlan0: entered allmulticast mode [ 248.539230][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.586005][T20332] netlink: 'syz.3.6832': attribute type 10 has an invalid length. [ 248.594766][T20332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6832'. [ 248.677892][T20332] team0: Port device geneve1 added [ 248.712916][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6835'. [ 248.989228][T20359] 9pnet_fd: Insufficient options for proto=fd [ 249.107382][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6850'. [ 249.159148][T20382] tipc: Enabling of bearer rejected, failed to enable media [ 249.183413][T20384] vxcan1 speed is unknown, defaulting to 1000 [ 249.273335][T20377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6852'. [ 249.500905][T20411] loop6: detected capacity change from 0 to 128 [ 249.554127][T20411] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.578789][T20415] pim6reg: entered allmulticast mode [ 249.592096][T20411] ext4 filesystem being mounted at /972/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.610888][T20415] pim6reg: left allmulticast mode [ 249.743002][T20417] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.784532][T20419] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6870'. [ 249.797312][ T8270] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.827185][T20417] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.860957][ T1035] IPVS: starting estimator thread 0... [ 249.869642][T20417] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.949751][T20417] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.957644][T20429] IPVS: using max 1920 ests per chain, 96000 per kthread [ 249.985384][T20442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6875'. [ 250.032400][T20417] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.050517][T20417] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.063109][T20417] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.086157][T20417] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.183419][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6885'. [ 250.193086][T20458] netlink: 'syz.3.6885': attribute type 6 has an invalid length. [ 250.476689][T20480] netlink: 'syz.4.6893': attribute type 1 has an invalid length. [ 250.492319][T20480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.511372][T20480] macvlan0: entered promiscuous mode [ 250.516745][T20480] macvlan0: entered allmulticast mode [ 250.525244][T20480] bond0: entered promiscuous mode [ 250.530690][T20480] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.541257][T20480] bond0: left promiscuous mode [ 250.723710][T20497] 9pnet_fd: p9_fd_create_tcp (20497): problem connecting socket to 127.0.0.1 [ 250.782740][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 250.782757][ T29] audit: type=1326 audit(1752359838.520:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.848920][ T29] audit: type=1326 audit(1752359838.552:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.872606][ T29] audit: type=1326 audit(1752359838.552:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.896308][ T29] audit: type=1326 audit(1752359838.552:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.919876][ T29] audit: type=1326 audit(1752359838.562:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.943463][ T29] audit: type=1326 audit(1752359838.562:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.967097][ T29] audit: type=1326 audit(1752359838.573:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 250.990953][ T29] audit: type=1326 audit(1752359838.573:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 251.014716][ T29] audit: type=1326 audit(1752359838.573:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 251.038368][ T29] audit: type=1326 audit(1752359838.573:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20498 comm="syz.7.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 251.401419][T20505] vxcan1 speed is unknown, defaulting to 1000 [ 251.495700][T20537] loop3: detected capacity change from 0 to 1024 [ 251.518823][T20537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.534303][T20542] loop6: detected capacity change from 0 to 512 [ 251.554511][T20542] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 251.616156][T20542] EXT4-fs (loop6): invalid journal inode [ 251.637596][T20542] EXT4-fs (loop6): can't get journal size [ 251.646116][T18653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.666748][T20542] EXT4-fs (loop6): 1 truncate cleaned up [ 251.682196][T20542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.718676][T20542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.728297][T20553] vxcan1 speed is unknown, defaulting to 1000 [ 251.809883][T20566] loop6: detected capacity change from 0 to 4096 [ 251.825833][T20566] EXT4-fs: test_dummy_encryption option not supported [ 251.934226][T20577] __nla_validate_parse: 5 callbacks suppressed [ 251.934244][T20577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6930'. [ 252.071230][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6938'. [ 252.080269][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6938'. [ 252.092702][T20602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6942'. [ 252.101715][T20602] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6942'. [ 252.260836][T20622] loop6: detected capacity change from 0 to 1024 [ 252.268497][T20622] EXT4-fs: Ignoring removed nobh option [ 252.275200][T20622] EXT4-fs: Ignoring removed bh option [ 252.294856][T20622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.357120][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.392226][T20637] program syz.6.6958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.411197][T20637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 252.439276][T20643] veth1_macvtap: left promiscuous mode [ 252.445100][T20643] macsec0: entered promiscuous mode [ 252.452968][T20645] syz_tun: entered allmulticast mode [ 252.459606][T20644] syz_tun: left allmulticast mode [ 252.484747][T20648] loop3: detected capacity change from 0 to 512 [ 252.496183][T20651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20651 comm=syz.6.6965 [ 252.510871][T20648] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.519942][T20648] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 252.553972][T20648] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 252.562373][T20648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 252.570694][T20648] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6963: Failed to acquire dquot type 1 [ 252.583735][T20648] EXT4-fs (loop3): Remounting filesystem read-only [ 252.590471][T20648] EXT4-fs (loop3): 1 orphan inode deleted [ 252.597940][T20648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.623436][T20648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.677580][T20676] loop6: detected capacity change from 0 to 256 [ 252.685545][T20676] FAT-fs (loop6): bogus number of FAT sectors [ 252.691775][T20676] FAT-fs (loop6): Can't find a valid FAT filesystem [ 252.802971][T20691] pim6reg1: entered promiscuous mode [ 252.808583][T20691] pim6reg1: entered allmulticast mode [ 252.839189][T20695] $H: renamed from bond0 (while UP) [ 252.855008][T20695] $H: entered promiscuous mode [ 252.860188][T20695] bond_slave_0: entered promiscuous mode [ 252.866054][T20695] bond_slave_1: entered promiscuous mode [ 253.486521][T20781] SELinux: failed to load policy [ 254.070031][T20845] syzkaller0: entered promiscuous mode [ 254.075621][T20845] syzkaller0: entered allmulticast mode [ 254.100368][T20847] vxcan1 speed is unknown, defaulting to 1000 [ 254.166477][T20854] vxcan1 speed is unknown, defaulting to 1000 [ 254.630713][T20904] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7071'. [ 254.669957][T20908] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 254.678276][T20908] team0: Port device batadv1 added [ 254.706905][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7076'. [ 254.852821][T20929] vxcan1 speed is unknown, defaulting to 1000 [ 255.371465][T20959] netlink: 'syz.4.7095': attribute type 13 has an invalid length. [ 255.453330][T20969] veth0_vlan: entered allmulticast mode [ 255.460840][T20969] veth0_vlan: left promiscuous mode [ 255.466161][T20969] veth0_vlan: entered promiscuous mode [ 255.537828][T20971] vxcan1 speed is unknown, defaulting to 1000 [ 255.797514][T21008] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.7108'. [ 255.806755][T21008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7108'. [ 256.267561][T21065] vxcan1 speed is unknown, defaulting to 1000 [ 256.593671][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 256.593739][ T29] audit: type=1400 audit(1752359844.622:6485): avc: denied { getopt } for pid=21088 comm="syz.7.7131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.621966][ T29] audit: type=1326 audit(1752359844.622:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.645726][ T29] audit: type=1326 audit(1752359844.622:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.669355][ T29] audit: type=1326 audit(1752359844.622:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.693017][ T29] audit: type=1326 audit(1752359844.622:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.716721][ T29] audit: type=1326 audit(1752359844.622:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.740296][ T29] audit: type=1326 audit(1752359844.622:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.763942][ T29] audit: type=1326 audit(1752359844.622:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.787577][ T29] audit: type=1326 audit(1752359844.622:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.811115][ T29] audit: type=1326 audit(1752359844.622:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.7.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 256.949734][T21101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7136'. [ 257.002080][T21106] netlink: 'syz.1.7137': attribute type 10 has an invalid length. [ 257.010776][T21106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7137'. [ 257.040739][T21106] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 257.085432][T21109] loop6: detected capacity change from 0 to 512 [ 257.102328][T21109] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 257.113481][T21109] EXT4-fs (loop6): orphan cleanup on readonly fs [ 257.122656][T21109] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.138322][T21109] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 257.145589][T21109] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7138: bg 0: block 40: padding at end of block bitmap is not set [ 257.160156][T21109] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 257.169681][T21109] EXT4-fs (loop6): 1 truncate cleaned up [ 257.175982][T21109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.205283][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.376605][T21134] serio: Serial port ptm0 [ 257.735031][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7155'. [ 257.757085][T21162] vxcan1 speed is unknown, defaulting to 1000 [ 257.930456][T21169] pim6reg: entered allmulticast mode [ 257.938289][T21168] pim6reg: left allmulticast mode [ 258.074231][T21174] loop6: detected capacity change from 0 to 1024 [ 258.109773][T21174] EXT4-fs: Ignoring removed nobh option [ 258.115428][T21174] EXT4-fs: Ignoring removed bh option [ 258.169020][T21174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.189897][T21174] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.7164: Allocating blocks 385-513 which overlap fs metadata [ 258.285404][T21173] EXT4-fs (loop6): pa ffff888106da5930: logic 16, phys. 129, len 24 [ 258.293596][T21173] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 258.306144][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.331165][T21189] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.408380][T21191] loop6: detected capacity change from 0 to 512 [ 258.428432][T21191] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.440545][T21191] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 258.456337][T21191] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 258.471241][T21191] EXT4-fs (loop6): orphan cleanup on readonly fs [ 258.478153][T21191] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7170: Failed to acquire dquot type 1 [ 258.500151][T21191] EXT4-fs (loop6): Remounting filesystem read-only [ 258.507820][T21191] EXT4-fs (loop6): 1 orphan inode deleted [ 258.515731][T21191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.576071][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7174'. [ 258.585160][T21205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7174'. [ 258.594143][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7174'. [ 258.604954][T21205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7174'. [ 258.614086][T21205] netlink: 'syz.4.7174': attribute type 6 has an invalid length. [ 258.627213][T21191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.659882][T21203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21203 comm=syz.3.7184 [ 258.738347][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7176'. [ 258.933357][T21219] team0 (unregistering): Port device  removed [ 258.965879][T21219] team0 (unregistering): Port device geneve1 removed [ 259.164108][T21231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7187'. [ 259.305262][T21239] lo speed is unknown, defaulting to 1000 [ 259.317488][T21239] lo speed is unknown, defaulting to 1000 [ 259.327519][T21239] lo speed is unknown, defaulting to 1000 [ 259.335471][T21239] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 259.346450][T21239] lo speed is unknown, defaulting to 1000 [ 259.353443][T21239] lo speed is unknown, defaulting to 1000 [ 259.360749][T21239] lo speed is unknown, defaulting to 1000 [ 259.367511][T21239] lo speed is unknown, defaulting to 1000 [ 259.373568][T21239] lo speed is unknown, defaulting to 1000 [ 259.504799][T21171] syz.7.7163 (21171) used greatest stack depth: 6040 bytes left [ 260.168990][T21249] vxcan1 speed is unknown, defaulting to 1000 [ 260.207336][T21249] lo speed is unknown, defaulting to 1000 [ 260.314564][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7204'. [ 260.378425][T21275] netlink: 'syz.4.7207': attribute type 3 has an invalid length. [ 260.444092][T21282] team0 (unregistering): Port device batadv1 removed [ 261.029737][T21295] pim6reg: entered allmulticast mode [ 261.037492][T21288] pim6reg: left allmulticast mode [ 261.259374][T21318] tipc: Enabling of bearer rejected, failed to enable media [ 261.380984][T21337] netlink: 'syz.3.7235': attribute type 7 has an invalid length. [ 261.482169][T21350] netem: unknown loss type 0 [ 261.486891][T21350] netem: change failed [ 261.595379][T21358] loop6: detected capacity change from 0 to 1024 [ 261.606486][T21358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.635617][T21344] loop3: detected capacity change from 0 to 4096 [ 261.644671][T21344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.647097][T21358] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.7244: Allocating blocks 449-513 which overlap fs metadata [ 261.685126][T21357] EXT4-fs (loop6): pa ffff888106e733f0: logic 48, phys. 177, len 21 [ 261.693275][T21357] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 261.716706][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.881517][T18653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.949794][T21367] vhci_hcd: invalid port number 96 [ 261.954960][T21367] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 262.130262][T21371] netlink: 'syz.4.7248': attribute type 10 has an invalid length. [ 262.145300][T21371] __nla_validate_parse: 4 callbacks suppressed [ 262.145376][T21371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7248'. [ 262.162441][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7250'. [ 262.180560][T21371] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 262.229445][T21377] vxcan1 speed is unknown, defaulting to 1000 [ 262.293828][T21377] lo speed is unknown, defaulting to 1000 [ 262.330679][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 262.330695][ T29] audit: type=1326 audit(1752359850.649:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 262.360643][ T29] audit: type=1326 audit(1752359850.649:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 262.384402][ T29] audit: type=1326 audit(1752359850.649:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 262.420277][ T29] audit: type=1326 audit(1752359850.733:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 262.444172][ T29] audit: type=1326 audit(1752359850.733:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5404ede963 code=0x7ffc0000 [ 262.467573][ T29] audit: type=1326 audit(1752359850.733:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5404edd3df code=0x7ffc0000 [ 262.491019][ T29] audit: type=1326 audit(1752359850.733:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5404ede9b7 code=0x7ffc0000 [ 262.514528][ T29] audit: type=1326 audit(1752359850.733:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5404edd290 code=0x7ffc0000 [ 262.538184][ T29] audit: type=1326 audit(1752359850.733:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5404edd58a code=0x7ffc0000 [ 262.561692][ T29] audit: type=1326 audit(1752359850.733:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5404ede929 code=0x7ffc0000 [ 262.650226][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7261'. [ 262.656988][T21397] SELinux: ebitmap: truncated map [ 262.672707][T21397] SELinux: failed to load policy [ 262.685073][T21401] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7262'. [ 262.724308][T21405] vxcan1 speed is unknown, defaulting to 1000 [ 262.794322][T21405] lo speed is unknown, defaulting to 1000 [ 262.859692][T21411] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7266'. [ 262.931804][T21426] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 262.935159][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7271'. [ 263.032080][T21441] loop6: detected capacity change from 0 to 128 [ 263.126891][T21454] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7286'. [ 263.139480][T21451] vxcan1 speed is unknown, defaulting to 1000 [ 263.178834][T21451] lo speed is unknown, defaulting to 1000 [ 263.225192][T21463] netlink: 'syz.6.7289': attribute type 1 has an invalid length. [ 263.250359][T21463] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 263.326964][T21472] SELinux: failed to load policy [ 263.388932][T21486] loop6: detected capacity change from 0 to 512 [ 263.407948][T21486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.421517][T21486] ext4 filesystem being mounted at /1066/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.578329][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.724912][T21517] netlink: 'syz.7.7307': attribute type 83 has an invalid length. [ 264.448730][T21537] xt_hashlimit: max too large, truncated to 1048576 [ 264.503376][T21542] loop6: detected capacity change from 0 to 1024 [ 264.538765][T21542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.560022][T21542] ext4 filesystem being mounted at /1071/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.577500][T21542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7317'. [ 264.600288][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.191193][T21577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7333'. [ 265.337527][T21589] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 266.377646][T21660] serio: Serial port ptm0 [ 266.582328][T21675] loop3: detected capacity change from 0 to 8192 [ 267.219557][T21649] syz.6.7356 (21649) used greatest stack depth: 5904 bytes left [ 267.239780][T21705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7396'. [ 267.346638][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 267.346655][ T29] audit: type=1326 audit(1752359855.920:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.376419][ T29] audit: type=1326 audit(1752359855.920:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.410063][ T29] audit: type=1326 audit(1752359855.920:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.433759][ T29] audit: type=1326 audit(1752359855.920:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.457378][ T29] audit: type=1326 audit(1752359855.920:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.480953][ T29] audit: type=1326 audit(1752359855.920:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.504517][ T29] audit: type=1326 audit(1752359855.920:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.528302][ T29] audit: type=1326 audit(1752359855.952:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.551931][ T29] audit: type=1326 audit(1752359855.952:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.575443][ T29] audit: type=1326 audit(1752359855.952:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.7.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226e4e929 code=0x7ffc0000 [ 267.619534][T21723] openvswitch: netlink: Message has 6 unknown bytes. [ 267.645493][T21704] loop6: detected capacity change from 0 to 4096 [ 267.657232][T21704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.671203][T21719] netlink: zone id is out of range [ 267.840924][T21704] ================================================================== [ 267.849056][T21704] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 267.856469][T21704] [ 267.858821][T21704] read-write to 0xffff88811a5fd900 of 8 bytes by task 3858 on cpu 1: [ 267.866913][T21704] __xa_clear_mark+0xf5/0x1e0 [ 267.871627][T21704] __folio_end_writeback+0x177/0x470 [ 267.876950][T21704] folio_end_writeback+0x71/0x3d0 [ 267.882003][T21704] ext4_finish_bio+0x459/0x8c0 [ 267.886798][T21704] ext4_release_io_end+0x9f/0x1f0 [ 267.891852][T21704] ext4_end_io_end+0x18d/0x240 [ 267.896642][T21704] ext4_end_io_rsv_work+0x151/0x1e0 [ 267.901866][T21704] process_scheduled_works+0x4cb/0x9d0 [ 267.907352][T21704] worker_thread+0x582/0x770 [ 267.911969][T21704] kthread+0x489/0x510 [ 267.916048][T21704] ret_from_fork+0xda/0x150 [ 267.920561][T21704] ret_from_fork_asm+0x1a/0x30 [ 267.925340][T21704] [ 267.927675][T21704] read to 0xffff88811a5fd900 of 8 bytes by task 21704 on cpu 0: [ 267.935335][T21704] xas_find_marked+0x218/0x620 [ 267.940112][T21704] find_get_entry+0x5d/0x380 [ 267.944740][T21704] filemap_get_folios_tag+0x13b/0x210 [ 267.950135][T21704] file_write_and_wait_range+0x1ea/0x2c0 [ 267.955797][T21704] generic_buffers_fsync_noflush+0x45/0x120 [ 267.961717][T21704] ext4_sync_file+0x1ab/0x690 [ 267.966408][T21704] vfs_fsync_range+0x10d/0x130 [ 267.971206][T21704] ext4_buffered_write_iter+0x34f/0x3c0 [ 267.976768][T21704] ext4_file_write_iter+0xdbf/0xf00 [ 267.981981][T21704] do_iter_readv_writev+0x41e/0x4c0 [ 267.987217][T21704] vfs_writev+0x2df/0x8b0 [ 267.991570][T21704] __se_sys_pwritev2+0xfc/0x1c0 [ 267.996433][T21704] __x64_sys_pwritev2+0x67/0x80 [ 268.001304][T21704] x64_sys_call+0x1cea/0x2fb0 [ 268.005995][T21704] do_syscall_64+0xd2/0x200 [ 268.010505][T21704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.016408][T21704] [ 268.018745][T21704] value changed: 0xffffffffffffffff -> 0xfffffffffe000000 [ 268.025865][T21704] [ 268.028201][T21704] Reported by Kernel Concurrency Sanitizer on: [ 268.034369][T21704] CPU: 0 UID: 0 PID: 21704 Comm: syz.6.7386 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 268.046892][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.056958][T21704] ================================================================== [ 268.244230][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.