last executing test programs: 3m42.29409205s ago: executing program 32 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) 3m22.330649675s ago: executing program 33 (id=800): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3m17.746018139s ago: executing program 34 (id=1472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 2m59.526806535s ago: executing program 2 (id=1941): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x2, 0xff, 0x3}}, 0x18) close(0x3) 2m59.491169438s ago: executing program 2 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x1}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 2m59.397346905s ago: executing program 2 (id=1948): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0xd4043f9e78e97721}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x24000000) 2m59.367331658s ago: executing program 2 (id=1951): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m59.315267902s ago: executing program 2 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3f8e, &(0x7f0000000340)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000140), &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000000)=""/111, 0x6f}], &(0x7f0000000180)}, 0x20) 2m59.0939445s ago: executing program 2 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) 2m59.081651691s ago: executing program 35 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) 2m16.635726641s ago: executing program 8 (id=3534): timer_create(0x3, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) 2m16.627564932s ago: executing program 8 (id=3537): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) pivot_root(&(0x7f0000001b00)='./file0\x00', 0x0) 2m16.589808114s ago: executing program 8 (id=3538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 2m16.535423809s ago: executing program 8 (id=3540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@grpid}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10f442, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000440)={0x0, 0xce3, 0x11, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 2m16.362483012s ago: executing program 8 (id=3547): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x16, 0x0, 0x4}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 2m16.117443882s ago: executing program 8 (id=3562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") 2m16.063582026s ago: executing program 36 (id=3562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") 2m6.32102862s ago: executing program 7 (id=3937): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x1}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) 2m6.19467567s ago: executing program 7 (id=3942): pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='fG'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2m6.103771127s ago: executing program 7 (id=3949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m6.018384064s ago: executing program 7 (id=3954): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 2m5.693992669s ago: executing program 7 (id=3967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffe42}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000021000200130003"], 0x78}, 0x1, 0x7}, 0x0) 2m5.43265689s ago: executing program 7 (id=3983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m5.370679975s ago: executing program 37 (id=3983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1m7.941220485s ago: executing program 6 (id=5829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x9c40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xb6b5c95fd317821}, 0x18144, 0x81, 0x800, 0xe, 0x9, 0x1, 0x77c, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x801}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 1m7.800825596s ago: executing program 6 (id=5835): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) 1m7.800568076s ago: executing program 6 (id=5836): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1m7.782247647s ago: executing program 6 (id=5837): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000500)='./file0/file0\x00', 0x240) 1m7.766239219s ago: executing program 6 (id=5838): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m7.326745414s ago: executing program 6 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1m7.326601044s ago: executing program 38 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1m4.766703547s ago: executing program 9 (id=5931): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300004e, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x840, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1m4.6050583s ago: executing program 9 (id=5933): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r1) 1m4.422398364s ago: executing program 9 (id=5939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000002}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffeffff, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0xfffffffd, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 1m4.368363379s ago: executing program 9 (id=5949): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000500)='./file0/file0\x00', 0x240) 1m4.267926297s ago: executing program 9 (id=5942): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 1m3.498810658s ago: executing program 9 (id=5962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1m3.425959533s ago: executing program 39 (id=5962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 3.543063119s ago: executing program 5 (id=7545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 3.52484086s ago: executing program 5 (id=7546): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r0, 0x823, &(0x7f00000001c0)=[{0x0}], 0x1}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 3.485315903s ago: executing program 5 (id=7547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 3.428643308s ago: executing program 5 (id=7551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) 3.376972432s ago: executing program 5 (id=7557): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000016c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000004c0)="ff9f5623c1") 2.736732373s ago: executing program 0 (id=7575): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 2.588174345s ago: executing program 0 (id=7579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x800, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.561808317s ago: executing program 0 (id=7580): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.447776796s ago: executing program 0 (id=7583): r0 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) 1.472707873s ago: executing program 0 (id=7605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/44, 0x2c}], 0x2, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 1.309226296s ago: executing program 5 (id=7613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.25608551s ago: executing program 0 (id=7624): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000016c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000004c0)="ff9f5623c1") 953.602944ms ago: executing program 3 (id=7622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 938.290926ms ago: executing program 3 (id=7623): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 920.701997ms ago: executing program 3 (id=7625): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 758.51408ms ago: executing program 3 (id=7629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 721.926803ms ago: executing program 3 (id=7630): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000080)='signal_generate\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) personality(0x5000002) 664.009677ms ago: executing program 3 (id=7631): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$packet(0x11, 0x3, 0x300) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x5, 0x24, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x3b69}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06106b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) 316.078275ms ago: executing program 1 (id=7639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r0, 0x0, 0x2000000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 190.172325ms ago: executing program 1 (id=7641): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) 144.041588ms ago: executing program 4 (id=7642): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000000c00000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008008000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 143.836528ms ago: executing program 4 (id=7643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 143.712708ms ago: executing program 1 (id=7644): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 143.573968ms ago: executing program 4 (id=7645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 133.369619ms ago: executing program 4 (id=7646): syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@acl}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xfffffffffffffff7}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobarrier}, {@oldalloc}, {@nombcache}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 108.959481ms ago: executing program 1 (id=7647): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 57.307705ms ago: executing program 1 (id=7648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 57.112825ms ago: executing program 1 (id=7649): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7885a8f24", 0x5) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 56.994645ms ago: executing program 4 (id=7650): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=7651): r0 = epoll_create1(0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0x10000001}) syz_open_dev$usbfs(0x0, 0x77, 0x141341) kernel console output (not intermixed with test programs): ) [ 182.523277][T17746] xt_hashlimit: max too large, truncated to 1048576 [ 182.577962][T17752] loop9: detected capacity change from 0 to 512 [ 182.619498][T17752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.649297][T17752] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.4954: invalid block [ 182.664874][T17752] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4954: invalid indirect mapped block 4294967295 (level 1) [ 182.679141][T17752] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4954: invalid indirect mapped block 4294967295 (level 1) [ 182.693646][T17752] EXT4-fs (loop9): 2 truncates cleaned up [ 182.699808][T17752] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.719269][T17752] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.9.4954: path /260/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 182.773630][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.784074][T17763] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 182.851613][T17773] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.867064][T17773] bond1: (slave lo): Enslaving as an active interface with an up link [ 182.879204][T17773] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 183.243700][T17806] macvtap0: refused to change device tx_queue_len [ 183.355770][T15771] Bluetooth: hci1: Frame reassembly failed (-84) [ 183.411567][T17834] netlink: 'syz.1.4992': attribute type 21 has an invalid length. [ 183.419517][T17834] netlink: 'syz.1.4992': attribute type 1 has an invalid length. [ 183.698007][T17851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.788866][T17860] SELinux: failed to load policy [ 184.278187][T17912] netlink: 'syz.3.5027': attribute type 4 has an invalid length. [ 184.289385][T17912] netlink: 'syz.3.5027': attribute type 4 has an invalid length. [ 184.571569][T14136] Bluetooth: hci0: command 0x1003 tx timeout [ 184.571780][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.127460][T17961] loop6: detected capacity change from 0 to 512 [ 185.142828][T17961] EXT4-fs: dax option not supported [ 185.349741][T18000] __nla_validate_parse: 5 callbacks suppressed [ 185.349761][T18000] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5054'. [ 185.371518][ T3564] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 185.559221][ T982] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.461425][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 186.461441][ T29] audit: type=1400 audit(698.441:3655): avc: denied { create } for pid=18127 comm="syz.1.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 186.487740][ T29] audit: type=1400 audit(698.461:3656): avc: denied { write } for pid=18127 comm="syz.1.5065" path="socket:[50947]" dev="sockfs" ino=50947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 186.555705][ T29] audit: type=1326 audit(698.531:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.579054][ T29] audit: type=1326 audit(698.531:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.602027][ T29] audit: type=1326 audit(698.531:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.625158][ T29] audit: type=1326 audit(698.531:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.648285][ T29] audit: type=1326 audit(698.531:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.671555][ T29] audit: type=1326 audit(698.531:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.694483][ T29] audit: type=1326 audit(698.531:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.717640][ T29] audit: type=1326 audit(698.541:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18133 comm="syz.1.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37747f749 code=0x7ffc0000 [ 186.778168][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5072'. [ 186.842238][T18150] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 187.188130][T18176] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 187.244148][T18183] loop6: detected capacity change from 0 to 1024 [ 187.291948][T18183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.319266][T18183] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.5091: Allocating blocks 385-513 which overlap fs metadata [ 187.339047][T18196] vlan2: entered allmulticast mode [ 187.346265][T18183] EXT4-fs (loop6): pa ffff8881079c9b60: logic 16, phys. 129, len 24 [ 187.354358][T18183] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 187.391865][T18183] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 187.404294][T18183] EXT4-fs (loop6): This should not happen!! Data will be lost [ 187.404294][T18183] [ 187.413992][T18183] EXT4-fs (loop6): Total free blocks count 0 [ 187.419989][T18183] EXT4-fs (loop6): Free/Dirty block details [ 187.425928][T18183] EXT4-fs (loop6): free_blocks=128 [ 187.431100][T18183] EXT4-fs (loop6): dirty_blocks=0 [ 187.436158][T18183] EXT4-fs (loop6): Block reservation details [ 187.442164][T18183] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 187.456825][T18183] syz.6.5091 (18183) used greatest stack depth: 9056 bytes left [ 187.517098][T18206] loop6: detected capacity change from 0 to 256 [ 187.609020][T18212] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 187.617736][ T3564] Bluetooth: hci0: command 0x1003 tx timeout [ 187.623803][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.892641][T18256] netlink: 'syz.6.5122': attribute type 1 has an invalid length. [ 187.939229][T18256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.968884][T18265] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.998175][T18265] bond1: (slave batadv1): making interface the new active one [ 188.010248][T18265] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 188.104421][T18272] wireguard0: entered promiscuous mode [ 188.110023][T18272] wireguard0: entered allmulticast mode [ 188.216242][T18278] loop6: detected capacity change from 0 to 8192 [ 188.306564][T18289] loop9: detected capacity change from 0 to 512 [ 188.321420][T18289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.345277][T18289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.379734][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.740998][T18327] SELinux: security_context_str_to_sid (ÛO*3Äö!ÛL;‚¹Ò(xë?8°€>${ÓSº¡7®#ÊîßÈ!g’³.&[nÙ¦ú»9ì£P9\E±T•WqÁ›3¨H*Ø8çÆYYL¤œÖäGœRÃ!IªÆ*·¹ò' õæœCDÊÙX [ 188.740998][T18327] êÁs0dnîphóòë5L0µÙë| qòÎü–õD8) failed with errno=-22 [ 188.813716][T11162] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.961461][T18363] loop9: detected capacity change from 0 to 512 [ 188.981454][T18363] EXT4-fs: Ignoring removed oldalloc option [ 188.998716][T18363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.062451][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.199247][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5184'. [ 189.208464][T18395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5184'. [ 189.217588][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5184'. [ 189.228758][T18395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5184'. [ 189.237760][T18395] netlink: 'syz.6.5184': attribute type 6 has an invalid length. [ 189.292825][T18403] loop6: detected capacity change from 0 to 512 [ 189.300684][T18403] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 189.318483][T18408] loop9: detected capacity change from 0 to 512 [ 189.326154][T18408] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 189.341776][T18408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 189.349876][T18408] System zones: 1-12 [ 189.354247][T18408] EXT4-fs (loop9): 1 truncate cleaned up [ 189.360415][T18408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.444982][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.634548][T18442] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.692372][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5204'. [ 190.286946][T18474] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.891407][T14136] Bluetooth: hci0: command 0x1003 tx timeout [ 190.897517][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.211402][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 191.217464][ T3564] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 191.248927][T18699] 9p: Bad value for 'source' [ 191.510511][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 191.510527][ T29] audit: type=1400 audit(703.481:3980): avc: denied { create } for pid=18749 comm="syz.4.5246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.537693][ T29] audit: type=1400 audit(703.481:3981): avc: denied { write } for pid=18749 comm="syz.4.5246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.674283][T18780] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 191.706554][ T29] audit: type=1400 audit(703.681:3982): avc: denied { write } for pid=18785 comm="syz.9.5255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.736420][ T29] audit: type=1400 audit(703.681:3983): avc: denied { connect } for pid=18785 comm="syz.9.5255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.755583][ T29] audit: type=1400 audit(703.681:3984): avc: denied { name_connect } for pid=18785 comm="syz.9.5255" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 191.778113][ T29] audit: type=1400 audit(703.741:3985): avc: denied { shutdown } for pid=18785 comm="syz.9.5255" lport=34943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.810796][ T29] audit: type=1400 audit(703.761:3986): avc: denied { open } for pid=18789 comm="syz.1.5257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.829722][ T29] audit: type=1400 audit(703.761:3987): avc: denied { kernel } for pid=18789 comm="syz.1.5257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.859777][ T29] audit: type=1400 audit(703.831:3988): avc: denied { create } for pid=18794 comm="syz.9.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.883170][ T29] audit: type=1400 audit(703.861:3989): avc: denied { read } for pid=18794 comm="syz.9.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.904344][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5260'. [ 192.260873][T18847] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.521717][ T2967] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 192.536553][T18859] rdma_op ffff88811ebc6180 conn xmit_rdma 0000000000000000 [ 192.545227][ T2967] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.093798][T18906] loop9: detected capacity change from 0 to 2048 [ 193.123831][T18906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 193.137716][T18913] rdma_op ffff88811ebc6980 conn xmit_rdma 0000000000000000 [ 193.150388][T18906] EXT4-fs (loop9): shut down requested (0) [ 193.193320][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 193.237611][T18929] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 193.238965][T18928] IPVS: stopping master sync thread 18929 ... [ 193.262301][T18931] rdma_rxe: rxe_newlink: failed to add lo [ 193.309780][T18940] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5318'. [ 193.324134][T18940] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5318'. [ 193.592068][T18975] netlink: 'syz.9.5333': attribute type 29 has an invalid length. [ 193.627399][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.794544][T18996] SELinux: failed to load policy [ 193.998892][T19023] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 194.048153][T19030] bridge0: port 3(batadv1) entered blocking state [ 194.054720][T19030] bridge0: port 3(batadv1) entered disabled state [ 194.061838][T19030] batadv1: entered allmulticast mode [ 194.069636][T19030] batadv1: entered promiscuous mode [ 194.344252][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5374'. [ 194.464972][ T3511] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 194.473588][ T3511] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.551321][ T982] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 194.560578][ T982] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 194.571361][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5385'. [ 194.724997][T19122] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.770875][T19124] loop9: detected capacity change from 0 to 1024 [ 194.779046][T19124] ext4: Unknown parameter 'hash' [ 194.994480][T19167] netlink: 'syz.9.5401': attribute type 39 has an invalid length. [ 195.143620][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5405'. [ 195.186962][T19177] macvlan2: entered promiscuous mode [ 195.297840][T19192] loop6: detected capacity change from 0 to 512 [ 195.322499][T19192] EXT4-fs (loop6): too many log groups per flexible block group [ 195.336004][T19192] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 195.343343][T19192] EXT4-fs (loop6): mount failed [ 195.517161][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5419'. [ 196.360537][T19200] syz.3.5420 (19200) used greatest stack depth: 7040 bytes left [ 197.158273][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 197.158292][ T29] audit: type=1326 audit(709.131:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.9.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 197.187386][ T29] audit: type=1326 audit(709.131:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.9.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 197.301298][ T29] audit: type=1326 audit(709.131:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.9.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 197.324336][ T29] audit: type=1326 audit(709.131:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.9.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 197.347277][ T29] audit: type=1326 audit(709.141:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.9.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 197.370325][ T29] audit: type=1326 audit(709.211:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 197.393281][ T29] audit: type=1326 audit(709.211:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 197.416295][ T29] audit: type=1326 audit(709.211:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 197.439359][ T29] audit: type=1326 audit(709.211:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 197.462276][ T29] audit: type=1326 audit(709.211:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 198.021644][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5492'. [ 198.194058][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5502'. [ 198.465472][T19634] vlan2: entered allmulticast mode [ 198.496130][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5513'. [ 198.626651][T19656] Invalid ELF header len 8 [ 198.852576][T19682] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 199.400207][T19705] loop9: detected capacity change from 0 to 1024 [ 199.434007][T19710] SELinux: unknown common r [ 199.434986][T19705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.438960][T19710] SELinux: failed to load policy [ 199.488193][T19718] SET target dimension over the limit! [ 199.535457][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.406080][T19777] syz_tun: entered allmulticast mode [ 200.406481][T19776] syz_tun: left allmulticast mode [ 200.472376][T19784] loop6: detected capacity change from 0 to 512 [ 200.474400][T19784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.522073][T19784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 200.522102][T19784] System zones: 1-12 [ 200.522527][T19784] EXT4-fs (loop6): 1 truncate cleaned up [ 200.523005][T19784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.567085][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.673885][T19805] SELinux: security_context_str_to_sid (ÛO*3Äö!ÛL;‚¹Ò(xë?8°€>${ÓSº¡7®#ÊîßÈ!g’³.&[nÙ¦ú»9ì£P9\E±T•WqÁ›3¨H*Ø8çÆYYL¤œÖäGœRÃ!IªÆ*·¹ò' õæœCDÊÙX [ 200.673885][T19805] êÁs0dnîphóòë5L0µÙë| qòÎü–õD8) failed with errno=-22 [ 200.742625][T19803] loop9: detected capacity change from 0 to 128 [ 200.765727][T19810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.782235][T19810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.856876][T19803] bio_check_eod: 104 callbacks suppressed [ 200.856894][T19803] syz.9.5577: attempt to access beyond end of device [ 200.856894][T19803] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 200.890132][T19803] syz.9.5577: attempt to access beyond end of device [ 200.890132][T19803] loop9: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 200.905129][T19803] syz.9.5577: attempt to access beyond end of device [ 200.905129][T19803] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 200.920125][T19803] syz.9.5577: attempt to access beyond end of device [ 200.920125][T19803] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 200.934966][T19803] syz.9.5577: attempt to access beyond end of device [ 200.934966][T19803] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 200.948808][T19803] syz.9.5577: attempt to access beyond end of device [ 200.948808][T19803] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 200.972667][T19803] syz.9.5577: attempt to access beyond end of device [ 200.972667][T19803] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 200.989095][T19803] syz.9.5577: attempt to access beyond end of device [ 200.989095][T19803] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 201.003338][T19803] syz.9.5577: attempt to access beyond end of device [ 201.003338][T19803] loop9: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 201.017528][T19803] syz.9.5577: attempt to access beyond end of device [ 201.017528][T19803] loop9: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 201.334403][T19843] SELinux: security_context_str_to_sid (ÛO*3Äö!ÛL;‚¹Ò(xë?8°€>${ÓSº¡7®#ÊîßÈ!g’³.&[nÙ¦ú»9ì£P9\E±T•WqÁ›3¨H*Ø8çÆYYL¤œÖäGœRÃ!IªÆ*·¹ò' õæœCDÊÙX [ 201.334403][T19843] êÁs0dnîphóòë5L0µÙë| qòÎü–õD8) failed with errno=-22 [ 201.760677][T19912] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 201.792921][T19912] SELinux: failed to load policy [ 201.901792][T19936] loop6: detected capacity change from 0 to 512 [ 201.936186][T19936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.172398][T19975] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 202.193605][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.273739][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5611'. [ 202.883660][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 202.883678][ T29] audit: type=1326 audit(714.861:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 202.913427][ T29] audit: type=1326 audit(714.861:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 202.936424][ T29] audit: type=1326 audit(714.861:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 202.959361][ T29] audit: type=1326 audit(714.901:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 202.982400][ T29] audit: type=1326 audit(714.901:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 203.005366][ T29] audit: type=1326 audit(714.901:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 203.028681][ T29] audit: type=1326 audit(714.901:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 203.051610][ T29] audit: type=1326 audit(714.901:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 203.074492][ T29] audit: type=1326 audit(714.901:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 203.097531][ T29] audit: type=1326 audit(714.961:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 203.152381][T20095] loop6: detected capacity change from 0 to 1024 [ 203.159076][T20095] EXT4-fs: inline encryption not supported [ 203.165077][T20095] EXT4-fs: Ignoring removed orlov option [ 203.171622][T20095] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 203.188817][T20093] SELinux: failed to load policy [ 203.209907][T20095] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 203.218079][T20095] System zones: 0-1, 3-12 [ 203.223036][T20095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.235421][T20095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.249436][T20095] xt_hashlimit: max too large, truncated to 1048576 [ 204.274793][T20174] loop9: detected capacity change from 0 to 1024 [ 204.283988][T20174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.318521][T20174] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 204.363136][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.589487][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5670'. [ 204.589516][T20201] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 204.655812][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5673'. [ 204.944933][T20229] loop9: detected capacity change from 0 to 1024 [ 204.945287][T20229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.972529][T20229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.005598][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.141977][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5687'. [ 205.181637][T20249] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 205.208271][T20254] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5702'. [ 205.359869][T20273] wireguard0: entered promiscuous mode [ 205.365445][T20273] wireguard0: entered allmulticast mode [ 206.360105][T20345] smc: net device bond0 applied user defined pnetid SYZ0 [ 206.368146][T20345] smc: net device bond0 erased user defined pnetid SYZ0 [ 206.410045][T20348] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 206.478799][T20363] netlink: 'syz.1.5725': attribute type 83 has an invalid length. [ 206.881151][T20416] smc: net device bond0 applied user defined pnetid SYZ0 [ 206.881562][T20416] smc: net device bond0 erased user defined pnetid SYZ0 [ 206.918631][T20418] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5735'. [ 206.930951][T20418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.943721][T20418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.946182][T20418] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 206.947935][T20418] bond0 (unregistering): Released all slaves [ 206.974595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.450497][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5765'. [ 207.653417][T20497] loop6: detected capacity change from 0 to 32768 [ 208.236628][T20612] loop9: detected capacity change from 0 to 32768 [ 208.402259][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 208.402276][ T29] audit: type=1400 audit(720.381:4327): avc: denied { connect } for pid=20669 comm="syz.3.5779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.505260][ T29] audit: type=1400 audit(720.411:4328): avc: denied { ioctl } for pid=20669 comm="syz.3.5779" path="socket:[56635]" dev="sockfs" ino=56635 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.576087][T20694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5787'. [ 208.764035][ T29] audit: type=1326 audit(720.741:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.804091][ T29] audit: type=1326 audit(720.771:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.827152][ T29] audit: type=1326 audit(720.771:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.850042][ T29] audit: type=1326 audit(720.771:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.873032][ T29] audit: type=1326 audit(720.771:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.896236][ T29] audit: type=1326 audit(720.771:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.919150][ T29] audit: type=1326 audit(720.771:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 208.942200][ T29] audit: type=1326 audit(720.771:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.9.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1fc4f749 code=0x7ffc0000 [ 209.108024][T20760] usb usb1: usbfs: process 20760 (syz.1.5807) did not claim interface 63 before use [ 209.184080][T20773] loop9: detected capacity change from 0 to 128 [ 209.197956][T20773] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 209.211094][T20773] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 209.219263][T20773] FAT-fs (loop9): Filesystem has been set read-only [ 209.237126][T20773] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 209.342209][T20793] SELinux: failed to load policy [ 209.466602][ T3511] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 209.475351][ T3511] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.495519][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5828'. [ 209.512897][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.520355][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.527790][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.535996][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.543451][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.551007][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.558511][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.566006][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.573416][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 209.591760][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.01 Device [syz0] on syz0 [ 209.742681][T20858] SELinux: failed to load policy [ 210.065851][T20127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.092026][T20889] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 210.127691][T20127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.205257][T20127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.258495][T20127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.411720][T20127] bridge_slave_1: left allmulticast mode [ 210.417395][T20127] bridge_slave_1: left promiscuous mode [ 210.423128][T20127] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.452096][T20127] bridge_slave_0: left allmulticast mode [ 210.457780][T20127] bridge_slave_0: left promiscuous mode [ 210.463606][T20127] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.673693][T20127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.684391][T20127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.698415][T20127] bond0 (unregistering): Released all slaves [ 210.718470][T20127] bond1 (unregistering): (slave batadv1): Releasing active interface [ 210.734243][T20127] bond1 (unregistering): Released all slaves [ 210.744145][T20954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20954 comm=syz.4.5874 [ 210.882152][T20127] hsr_slave_0: left promiscuous mode [ 210.887939][T20127] hsr_slave_1: left promiscuous mode [ 210.916999][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.924614][T20127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.944623][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.952142][T20127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.964872][T20985] netlink: 'syz.4.5876': attribute type 29 has an invalid length. [ 210.983713][T20127] veth1_macvtap: left promiscuous mode [ 210.989275][T20127] veth0_macvtap: left promiscuous mode [ 210.995597][T20127] veth1_vlan: left promiscuous mode [ 211.000876][T20127] veth0_vlan: left promiscuous mode [ 211.121676][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5879'. [ 211.171964][T20127] team0 (unregistering): Port device team_slave_1 removed [ 211.183423][T20127] team0 (unregistering): Port device team_slave_0 removed [ 211.317311][T21055] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5887'. [ 211.361550][T20894] chnl_net:caif_netlink_parms(): no params data found [ 211.400617][T21102] rdma_op ffff88810092d580 conn xmit_rdma 0000000000000000 [ 211.571857][T20894] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.578949][T20894] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.611636][T20894] bridge_slave_0: entered allmulticast mode [ 211.622340][T20894] bridge_slave_0: entered promiscuous mode [ 211.649686][T20894] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.656912][T20894] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.674415][T20894] bridge_slave_1: entered allmulticast mode [ 211.685089][T20894] bridge_slave_1: entered promiscuous mode [ 211.711076][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5900'. [ 211.725245][T20894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.752437][T21205] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 211.826333][T20894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.890924][T20894] team0: Port device team_slave_0 added [ 211.902566][T20894] team0: Port device team_slave_1 added [ 211.954098][T20894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.961121][T20894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.987105][T20894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.999933][T20894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.006948][T20894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.033167][T20894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.142546][T21276] bridge0: port 4(batadv2) entered blocking state [ 212.149014][T21276] bridge0: port 4(batadv2) entered disabled state [ 212.174757][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5913'. [ 212.200337][T21276] batadv2: entered allmulticast mode [ 212.218069][T21276] batadv2: entered promiscuous mode [ 212.245949][T21287] macvlan2: entered promiscuous mode [ 212.279771][T20894] hsr_slave_0: entered promiscuous mode [ 212.291541][T20894] hsr_slave_1: entered promiscuous mode [ 212.311506][T20894] debugfs: 'hsr0' already exists in 'hsr' [ 212.317307][T20894] Cannot create hsr debugfs directory [ 212.371801][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5917'. [ 212.401594][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5917'. [ 212.439049][T21379] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5920'. [ 212.577518][T21411] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 212.581335][ T982] batman_adv: batadv2: IGMP Querier appeared [ 212.591617][ T982] batman_adv: batadv2: MLD Querier appeared [ 212.640296][T21420] loop9: detected capacity change from 0 to 1024 [ 212.659841][T21420] EXT4-fs: Ignoring removed oldalloc option [ 212.665943][T21420] EXT4-fs: Ignoring removed bh option [ 212.733138][T21422] netlink: 'syz.3.5932': attribute type 13 has an invalid length. [ 212.782027][T21420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.811087][T21422] gretap0: refused to change device tx_queue_len [ 212.817547][T21422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.834447][T14260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.852340][T20894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.872265][T20894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.897064][T20894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.906850][T20894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.000616][T20894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.026044][T20894] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.054210][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.061402][T11162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.084490][T20127] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.091621][T20127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.132010][T20894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.142501][T20894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.306706][T20894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.423220][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 213.423237][ T29] audit: type=1326 audit(725.401:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.513708][ T29] audit: type=1326 audit(725.431:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.536764][ T29] audit: type=1326 audit(725.431:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.559685][ T29] audit: type=1326 audit(725.431:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.582711][ T29] audit: type=1326 audit(725.441:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.605704][ T29] audit: type=1326 audit(725.441:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.628675][ T29] audit: type=1326 audit(725.441:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.651712][ T29] audit: type=1326 audit(725.441:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.674645][ T29] audit: type=1326 audit(725.441:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.697630][ T29] audit: type=1326 audit(725.441:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21506 comm="syz.3.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 213.809222][T21526] netlink: 'syz.4.5961': attribute type 6 has an invalid length. [ 213.841746][T20894] veth0_vlan: entered promiscuous mode [ 213.854098][T20894] veth1_vlan: entered promiscuous mode [ 213.885000][T20894] veth0_macvtap: entered promiscuous mode [ 213.894799][T20894] veth1_macvtap: entered promiscuous mode [ 213.906792][T20894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.917748][T20894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.929211][T20127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.953291][T20127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.973678][ T385] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.984081][ T385] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.022982][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.043191][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.096425][ T385] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.106873][ T385] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.141983][T21550] netlink: 'syz.3.5977': attribute type 1 has an invalid length. [ 214.226508][ T385] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.236917][ T385] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.310138][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5980'. [ 214.333075][ T385] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.343488][ T385] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.490802][T21540] chnl_net:caif_netlink_parms(): no params data found [ 214.538905][ T385] batadv1: left allmulticast mode [ 214.544105][ T385] batadv1: left promiscuous mode [ 214.549220][ T385] bridge0: port 3(batadv1) entered disabled state [ 214.565556][ T385] bridge_slave_1: left allmulticast mode [ 214.571353][ T385] bridge_slave_1: left promiscuous mode [ 214.577024][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.614968][ T385] bridge_slave_0: left promiscuous mode [ 214.621156][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.948168][ T6415] hid_parser_main: 23 callbacks suppressed [ 214.948194][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.961590][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.969043][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.015414][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.022895][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.030362][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.037836][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.045314][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.052894][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.060300][ T6415] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.068805][ T6415] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.01 Device [syz0] on syz0 [ 215.084435][ T385] bond1 (unregistering): (slave lo): Releasing backup interface [ 215.093141][ T385] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 215.113717][ T385] bond1 (unregistering): Released all slaves [ 215.140758][T21767] dummy0: entered allmulticast mode [ 215.183226][T21767] dummy0: left allmulticast mode [ 215.194175][T21540] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.201420][T21540] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.261119][T21540] bridge_slave_0: entered allmulticast mode [ 215.272035][T21540] bridge_slave_0: entered promiscuous mode [ 215.280976][T21540] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.288277][T21540] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.327166][T21540] bridge_slave_1: entered allmulticast mode [ 215.334997][T21540] bridge_slave_1: entered promiscuous mode [ 215.347678][ T385] hsr_slave_0: left promiscuous mode [ 215.359165][ T385] hsr_slave_1: left promiscuous mode [ 215.365207][ T385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.372645][ T385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.388088][ T385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.395583][ T385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.407691][ T385] veth1_macvtap: left promiscuous mode [ 215.423445][ T385] veth0_macvtap: left promiscuous mode [ 215.429188][ T385] veth1_vlan: left promiscuous mode [ 215.434629][ T385] veth0_vlan: left promiscuous mode [ 215.513279][ T385] team0 (unregistering): Port device team_slave_1 removed [ 215.527408][ T385] team0 (unregistering): Port device team_slave_0 removed [ 215.582082][T21540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.592668][T21540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.616337][T21540] team0: Port device team_slave_0 added [ 215.623593][T21540] team0: Port device team_slave_1 added [ 215.650762][T21540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.657993][T21540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.684030][T21540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.696380][T21540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.703362][T21540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.729317][T21540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.763091][T21540] hsr_slave_0: entered promiscuous mode [ 215.769332][T21540] hsr_slave_1: entered promiscuous mode [ 215.775297][T21540] debugfs: 'hsr0' already exists in 'hsr' [ 215.781040][T21540] Cannot create hsr debugfs directory [ 215.842690][T21540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.980895][T21540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.044418][T21540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.094817][T21540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.176184][T21540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.185182][T21540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.194566][T21540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.203678][T21540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.270369][T21540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.283538][T21540] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.293285][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.300370][T12224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.320534][T21540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.330957][T21540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.345839][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.352928][T12224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.413931][T21540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.488949][T21540] veth0_vlan: entered promiscuous mode [ 216.499819][T21540] veth1_vlan: entered promiscuous mode [ 216.516979][T21540] veth0_macvtap: entered promiscuous mode [ 216.524801][T21540] veth1_macvtap: entered promiscuous mode [ 216.536422][T21540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.548420][T21540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.560353][T21075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.575335][T21075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.588731][T21075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.605728][T21075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.762986][T22067] usb usb1: usbfs: process 22067 (syz.5.6003) did not claim interface 63 before use [ 216.942977][T22093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6017'. [ 216.962053][T22095] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6018'. [ 216.984605][T22095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.002647][T22095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.036803][T22095] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 217.049270][T22095] bond0 (unregistering): Released all slaves [ 217.788603][T22188] netlink: 'syz.1.6046': attribute type 3 has an invalid length. [ 217.806611][T22188] netlink: 'syz.1.6046': attribute type 3 has an invalid length. [ 217.979024][T22205] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6053'. [ 218.001875][T22205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.029907][T22205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.041601][T22205] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 218.065237][T22205] bond0 (unregistering): Released all slaves [ 218.091658][ T9] syz1: Port: 1 Link DOWN [ 218.131211][T22247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=22247 comm=syz.5.6057 [ 218.491762][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.795747][T22263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.805483][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 218.805498][ T29] audit: type=1400 audit(730.771:4592): avc: denied { bind } for pid=22267 comm="syz.4.6073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.959241][T22278] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6069'. [ 219.383940][T22299] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6076'. [ 219.421804][T22299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.434893][T22299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.473296][T22299] bond0 (unregistering): Released all slaves [ 219.568871][ T29] audit: type=1400 audit(731.541:4593): avc: denied { ioctl } for pid=22337 comm="syz.5.6081" path="socket:[60179]" dev="sockfs" ino=60179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.691542][ T29] audit: type=1326 audit(731.661:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 219.729407][ T29] audit: type=1326 audit(731.671:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 219.752392][ T29] audit: type=1326 audit(731.691:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 219.775588][ T29] audit: type=1326 audit(731.701:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22345 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78cecb2005 code=0x7ffc0000 [ 219.798574][ T29] audit: type=1326 audit(731.701:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 219.837141][ T29] audit: type=1326 audit(731.741:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 219.860703][ T29] audit: type=1326 audit(731.741:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 219.883800][ T29] audit: type=1326 audit(731.741:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.4.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 220.752296][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6097'. [ 221.397097][T22400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.437588][T22400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.833892][T22458] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 224.075381][T22508] SELinux: failed to load policy [ 224.138333][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 224.138353][ T29] audit: type=1400 audit(736.111:4631): avc: denied { firmware_load } for pid=22513 comm="+}[@" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 224.376746][ T29] audit: type=1400 audit(736.351:4632): avc: denied { create } for pid=22520 comm="syz.5.6151" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 224.465527][ T29] audit: type=1400 audit(736.381:4633): avc: denied { prog_load } for pid=22516 comm="syz.3.6144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.484293][ T29] audit: type=1400 audit(736.381:4634): avc: denied { bpf } for pid=22516 comm="syz.3.6144" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.504386][ T29] audit: type=1400 audit(736.381:4635): avc: denied { perfmon } for pid=22516 comm="syz.3.6144" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.524822][ T29] audit: type=1400 audit(736.411:4636): avc: denied { module_request } for pid=22520 comm="syz.5.6151" kmod="arptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 224.546000][ T29] audit: type=1400 audit(736.411:4637): avc: denied { prog_run } for pid=22516 comm="syz.3.6144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.564551][ T29] audit: type=1400 audit(736.421:4638): avc: denied { create } for pid=22528 comm="syz.1.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.584657][ T29] audit: type=1400 audit(736.431:4639): avc: denied { write } for pid=22528 comm="syz.1.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.631611][ T29] audit: type=1400 audit(736.591:4640): avc: denied { map_create } for pid=22531 comm="syz.1.6155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 225.190149][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6180'. [ 225.275391][T22577] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6172'. [ 225.448576][T22593] xt_hashlimit: max too large, truncated to 1048576 [ 225.574817][T22602] xt_hashlimit: max too large, truncated to 1048576 [ 225.647711][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6186'. [ 225.706180][T22616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6199'. [ 225.726861][T22618] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6187'. [ 225.940810][T22629] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6192'. [ 225.975982][T22629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.998007][T22629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.017992][T22629] bond0 (unregistering): Released all slaves [ 226.304694][T22682] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6201'. [ 226.635112][T22702] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 226.660892][T20696] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.766785][T22712] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 226.807961][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6218'. [ 227.321830][T22724] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6220'. [ 227.322185][T22720] netlink: 'syz.3.6230': attribute type 2 has an invalid length. [ 227.338748][T22720] netlink: 'syz.3.6230': attribute type 1 has an invalid length. [ 227.346586][T22720] netlink: 'syz.3.6230': attribute type 1 has an invalid length. [ 227.356349][T22724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.366709][T22724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.376559][T22722] 9pnet: p9_errstr2errno: server reported unknown error  [ 227.384685][T22724] bond0 (unregistering): Released all slaves [ 227.483277][T22765] netlink: 'syz.1.6225': attribute type 1 has an invalid length. [ 227.668628][T22803] netlink: 'syz.3.6241': attribute type 7 has an invalid length. [ 227.676979][T22803] netlink: 'syz.3.6241': attribute type 7 has an invalid length. [ 228.085559][T22842] syzkaller1: entered promiscuous mode [ 228.092022][T22842] syzkaller1: entered allmulticast mode [ 228.654456][ T6415] IPVS: starting estimator thread 0... [ 228.733934][ T3564] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.740096][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 228.751752][T22883] IPVS: using max 2208 ests per chain, 110400 per kthread [ 229.046088][T22928] macvlan2: entered promiscuous mode [ 229.051542][T22928] macvlan2: entered allmulticast mode [ 229.056934][T22928] gretap0: entered allmulticast mode [ 229.294187][T22957] ref_ctr_offset mismatch. inode: 0x941 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 229.328430][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 229.328449][ T29] audit: type=1404 audit(741.301:4745): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 229.381341][ T29] audit: type=1400 audit(741.301:4746): avc: denied { bpf } for pid=22958 comm="syz.0.6298" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 229.401497][ T29] audit: type=1400 audit(741.301:4747): avc: denied { prog_run } for pid=22958 comm="syz.0.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 229.420003][ T29] audit: type=1400 audit(741.311:4748): avc: denied { map_create } for pid=22958 comm="syz.0.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 229.438719][ T29] audit: type=1400 audit(741.311:4749): avc: denied { map_create } for pid=22958 comm="syz.0.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 229.457557][ T29] audit: type=1400 audit(741.311:4750): avc: denied { prog_load } for pid=22958 comm="syz.0.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 229.476296][ T29] audit: type=1404 audit(741.321:4751): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 229.505799][ T29] audit: type=1400 audit(741.361:4752): avc: denied { create } for pid=22962 comm="syz.0.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.525807][ T29] audit: type=1400 audit(741.361:4753): avc: denied { map_create } for pid=22962 comm="syz.0.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.544679][ T29] audit: type=1400 audit(741.361:4754): avc: denied { map_read map_write } for pid=22962 comm="syz.0.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.025794][T23014] random: crng reseeded on system resumption [ 230.267815][T23037] __nla_validate_parse: 7 callbacks suppressed [ 230.267836][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6331'. [ 230.516394][T23071] xt_hashlimit: max too large, truncated to 1048576 [ 230.545211][T23071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6343'. [ 230.555996][T23075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.566382][T23075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.627841][T23075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.638246][T23075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.746087][T23075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.756528][T23075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.767372][T23104] netlink: 'syz.5.6352': attribute type 10 has an invalid length. [ 230.837679][T23104] team0: Port device dummy0 added [ 230.852293][T23104] netlink: 'syz.5.6352': attribute type 10 has an invalid length. [ 230.876834][T23104] team0: Port device dummy0 removed [ 230.895168][T23075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.905564][T23075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.040511][ T982] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.048841][ T982] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.085049][ T982] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.093356][ T982] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.101899][ T982] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.110130][ T982] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.163879][T23131] xt_hashlimit: max too large, truncated to 1048576 [ 231.201500][ T982] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.209785][ T982] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.243012][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 231.253323][T23136] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6361'. [ 231.262502][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 231.375474][T23186] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6365'. [ 231.777139][T23249] netlink: 'syz.4.6387': attribute type 3 has an invalid length. [ 231.857302][T23266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23266 comm=syz.3.6395 [ 231.870109][T23266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23266 comm=syz.3.6395 [ 231.872047][T23262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6393'. [ 231.891583][T23262] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6393'. [ 231.903746][T23267] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 231.921440][T23262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6393'. [ 231.930509][T23262] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6393'. [ 231.943764][T23267] SELinux: failed to load policy [ 232.193536][T11162] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 233.049134][T23322] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.220990][T23356] netlink: 'syz.5.6430': attribute type 83 has an invalid length. [ 233.272520][T23362] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.286155][T23364] block device autoloading is deprecated and will be removed. [ 233.354535][T23382] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 233.477076][T23405] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 233.491468][T23401] block device autoloading is deprecated and will be removed. [ 233.525178][T23411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.550690][T23418] netlink: 'syz.1.6458': attribute type 1 has an invalid length. [ 234.048422][T23511] loop3: detected capacity change from 0 to 1024 [ 234.055842][T23511] EXT4-fs: Ignoring removed oldalloc option [ 234.056045][T23510] netlink: 'syz.0.6498': attribute type 13 has an invalid length. [ 234.061980][T23511] EXT4-fs: Ignoring removed bh option [ 234.089416][T23510] gretap0: refused to change device tx_queue_len [ 234.095883][T23510] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.124911][T23511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.209249][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.262303][T23540] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.326151][T23554] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 234.353045][T23560] netlink: 'syz.4.6518': attribute type 13 has an invalid length. [ 234.393819][T23560] gretap0: refused to change device tx_queue_len [ 234.400202][T23560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.420137][T23567] netlink: 'syz.0.6521': attribute type 1 has an invalid length. [ 234.436598][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 234.436614][ T29] audit: type=1400 audit(746.411:5001): avc: denied { write } for pid=23568 comm="syz.5.6522" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 234.652664][T23607] netlink: 'syz.5.6538': attribute type 13 has an invalid length. [ 234.663884][T23609] netlink: 'syz.3.6540': attribute type 1 has an invalid length. [ 234.674179][T23607] gretap0: refused to change device tx_queue_len [ 234.680620][T23607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.753142][T23614] netlink: 'syz.3.6542': attribute type 1 has an invalid length. [ 234.786306][T23614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.823031][T23614] bond0: (slave geneve2): making interface the new active one [ 234.842264][T23614] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 235.001464][ T29] audit: type=1400 audit(746.961:5002): avc: denied { validate_trans } for pid=23659 comm="syz.0.6549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 235.028231][T23663] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 235.028231][T23663] program syz.1.6550 not setting count and/or reply_len properly [ 235.059365][ T29] audit: type=1400 audit(746.981:5003): avc: denied { shutdown } for pid=23664 comm="syz.3.6551" laddr=fe80::12 lport=39192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.091911][ T29] audit: type=1326 audit(747.071:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.115212][ T29] audit: type=1326 audit(747.091:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.138252][ T29] audit: type=1326 audit(747.091:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.161228][ T29] audit: type=1326 audit(747.091:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.184769][ T29] audit: type=1326 audit(747.161:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.207834][ T29] audit: type=1326 audit(747.161:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.230837][ T29] audit: type=1326 audit(747.161:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 235.272616][T23676] netlink: 'syz.1.6553': attribute type 13 has an invalid length. [ 235.291970][T23674] netlink: 'syz.5.6554': attribute type 1 has an invalid length. [ 235.343157][T23676] gretap0: refused to change device tx_queue_len [ 235.349649][T23676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.416505][T23692] bridge0: port 3(vlan2) entered blocking state [ 235.422982][T23692] bridge0: port 3(vlan2) entered disabled state [ 235.430035][T23692] vlan2: entered allmulticast mode [ 235.435317][T23692] bridge0: entered allmulticast mode [ 235.442069][T23692] vlan2: left allmulticast mode [ 235.446927][T23692] bridge0: left allmulticast mode [ 235.475721][T23698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.486744][T23700] __nla_validate_parse: 18 callbacks suppressed [ 235.486764][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6565'. [ 235.512403][T23736] bond0: (slave geneve3): making interface the new active one [ 235.540674][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6568'. [ 235.542718][T23736] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 235.652812][T23759] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 235.722616][T23764] block device autoloading is deprecated and will be removed. [ 235.818786][T23780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.871506][T23780] bond0: (slave geneve3): making interface the new active one [ 235.871797][T23821] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 235.871797][T23821] program syz.3.6594 not setting count and/or reply_len properly [ 235.905425][T23780] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 235.953492][T23832] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 235.975710][T23834] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 236.056932][T23837] bridge0: port 4(vlan2) entered blocking state [ 236.063462][T23837] bridge0: port 4(vlan2) entered disabled state [ 236.080505][T23848] block device autoloading is deprecated and will be removed. [ 236.091379][T23837] vlan2: entered allmulticast mode [ 236.096597][T23837] bridge0: entered allmulticast mode [ 236.105352][T23837] vlan2: left allmulticast mode [ 236.110365][T23837] bridge0: left allmulticast mode [ 236.244509][T23873] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 236.616248][T23925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.639566][T23925] bond0: (slave geneve2): making interface the new active one [ 236.649388][T23925] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 236.779141][T23968] loop3: detected capacity change from 0 to 1024 [ 236.786186][T23968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.823389][T23968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.876453][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.079092][T24014] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 237.159056][T24032] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 237.309956][T24062] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 237.559459][T24094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.583220][T24094] bond0: (slave geneve2): making interface the new active one [ 237.592451][T24094] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 237.707224][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6685'. [ 237.991789][T24165] openvswitch: netlink: Missing key (keys=40, expected=100) [ 238.084146][T24179] SELinux: Context @ is not valid (left unmapped). [ 238.130056][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6700'. [ 238.270750][T24196] bridge0: port 4(vlan2) entered blocking state [ 238.277209][T24196] bridge0: port 4(vlan2) entered disabled state [ 238.284705][T24196] vlan2: entered allmulticast mode [ 238.290625][T24196] vlan2: left allmulticast mode [ 238.384652][T24215] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 238.450576][T24224] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 238.475931][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6714'. [ 238.669140][T24259] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 238.708615][T24268] validate_nla: 12 callbacks suppressed [ 238.708713][T24268] netlink: 'syz.0.6734': attribute type 1 has an invalid length. [ 239.025441][T24326] openvswitch: netlink: Missing key (keys=40, expected=100) [ 239.542469][T24348] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6753'. [ 239.558062][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 239.558078][ T29] audit: type=1326 audit(751.531:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24350 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 239.589057][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6751'. [ 239.609509][ T29] audit: type=1326 audit(751.561:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24350 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 239.609620][ T29] audit: type=1326 audit(751.561:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24350 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 239.609693][ T29] audit: type=1326 audit(751.561:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24350 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 239.665493][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6757'. [ 239.744048][T24373] wireguard0: entered promiscuous mode [ 239.749578][T24373] wireguard0: entered allmulticast mode [ 239.875349][ T29] audit: type=1400 audit(751.851:5084): avc: denied { getopt } for pid=24387 comm="syz.5.6768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.912634][T24390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6769'. [ 239.940754][T24396] netlink: 'syz.4.6771': attribute type 1 has an invalid length. [ 239.972189][T24402] dummy0: entered allmulticast mode [ 239.977956][T24402] dummy0: left allmulticast mode [ 239.992810][T24404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=24404 comm=syz.4.6774 [ 240.054631][ T29] audit: type=1326 audit(752.031:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.5.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e3f8f749 code=0x7ffc0000 [ 240.077817][ T29] audit: type=1326 audit(752.031:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.5.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e3f8f749 code=0x7ffc0000 [ 240.100901][ T29] audit: type=1326 audit(752.031:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.5.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f03e3f8f749 code=0x7ffc0000 [ 240.123972][ T29] audit: type=1326 audit(752.031:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.5.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e3f8f749 code=0x7ffc0000 [ 240.147270][ T29] audit: type=1326 audit(752.051:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.5.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e3f8f749 code=0x7ffc0000 [ 240.197718][T24417] netlink: 'syz.5.6780': attribute type 1 has an invalid length. [ 240.243744][T24421] netlink: 'syz.5.6782': attribute type 1 has an invalid length. [ 240.261416][T24412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.317356][T24429] dummy0: entered allmulticast mode [ 240.323905][T24429] dummy0: left allmulticast mode [ 240.356918][T24433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=24433 comm=syz.0.6787 [ 240.388382][T24437] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6788'. [ 240.519268][T24448] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 240.657261][T24458] 0ªX¹¦À: left allmulticast mode [ 240.662363][T24458] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 240.723094][T24470] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6802'. [ 240.774037][T24474] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6804'. [ 240.785315][T24476] netlink: 'syz.0.6806': attribute type 2 has an invalid length. [ 240.793175][T24476] netlink: 'syz.0.6806': attribute type 1 has an invalid length. [ 240.801065][T24476] netlink: 'syz.0.6806': attribute type 1 has an invalid length. [ 240.809007][T24476] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6806'. [ 241.087201][T24507] syzkaller1: entered promiscuous mode [ 241.092849][T24507] syzkaller1: entered allmulticast mode [ 241.106778][T24504] 9pnet: p9_errstr2errno: server reported unknown error  [ 241.345806][T24537] netlink: 'syz.0.6831': attribute type 1 has an invalid length. [ 241.431938][T24541] 9pnet: p9_errstr2errno: server reported unknown error  [ 241.752489][T24564] macvlan3: entered promiscuous mode [ 241.757865][T24564] macvlan3: entered allmulticast mode [ 241.763348][T24564] gretap0: entered allmulticast mode [ 241.949129][T24576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.272163][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6876'. [ 242.550963][T24651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6870'. [ 242.575379][T24655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.598051][T24655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.833757][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6874'. [ 242.982447][T24672] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6878'. [ 243.301570][T24691] loop3: detected capacity change from 0 to 512 [ 243.319369][T24691] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6882: error while reading EA inode 32 err=-116 [ 243.341572][T24691] EXT4-fs (loop3): Remounting filesystem read-only [ 243.348216][T24691] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 243.368779][T24691] EXT4-fs (loop3): 1 orphan inode deleted [ 243.375544][T24691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.389829][T24691] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.482274][T24707] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.6890'. [ 243.522132][T24711] random: crng reseeded on system resumption [ 244.360304][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6903'. [ 244.582936][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 244.582954][ T29] audit: type=1326 audit(756.561:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.4.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.631308][ T29] audit: type=1326 audit(756.561:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.4.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.654253][ T29] audit: type=1326 audit(756.561:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.4.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.677245][ T29] audit: type=1326 audit(756.561:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.4.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.712408][ T29] audit: type=1326 audit(756.691:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.744520][ T29] audit: type=1326 audit(756.691:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.767629][ T29] audit: type=1326 audit(756.691:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.790582][ T29] audit: type=1326 audit(756.691:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.813533][ T29] audit: type=1326 audit(756.691:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.836573][ T29] audit: type=1326 audit(756.691:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 244.944300][T24788] netlink: 'syz.1.6913': attribute type 10 has an invalid length. [ 244.967753][T24788] team0: Port device dummy0 added [ 244.978646][T24788] netlink: 'syz.1.6913': attribute type 10 has an invalid length. [ 244.990430][T24788] team0: Port device dummy0 removed [ 246.065933][T24823] xt_hashlimit: max too large, truncated to 1048576 [ 246.076642][T24825] __nla_validate_parse: 1 callbacks suppressed [ 246.076663][T24825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6920'. [ 246.100672][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6937'. [ 246.296824][T24859] xt_hashlimit: max too large, truncated to 1048576 [ 246.536696][T24883] netlink: 'syz.1.6952': attribute type 3 has an invalid length. [ 246.588230][T24887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24887 comm=syz.1.6954 [ 246.601063][T24887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24887 comm=syz.1.6954 [ 247.136643][T24910] xt_hashlimit: max too large, truncated to 1048576 [ 247.147295][T24910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6959'. [ 247.248519][T24924] netlink: 'syz.3.6966': attribute type 10 has an invalid length. [ 247.261688][T24924] team0: Port device dummy0 added [ 247.271022][T24924] netlink: 'syz.3.6966': attribute type 10 has an invalid length. [ 247.283513][T24924] team0: Port device dummy0 removed [ 248.028276][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6982'. [ 248.037552][T24969] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6982'. [ 248.046722][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6982'. [ 248.420559][T24986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.432459][T24987] loop3: detected capacity change from 0 to 512 [ 248.443060][T24987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6987: bg 0: block 248: padding at end of block bitmap is not set [ 248.457626][T24987] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6987: Failed to acquire dquot type 1 [ 248.481468][T24986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.535575][T24987] EXT4-fs (loop3): 1 truncate cleaned up [ 248.553614][T24986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.567865][T24987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.585000][T24987] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6987: Failed to acquire dquot type 1 [ 248.610252][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.622714][T24986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.680577][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.724160][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.746694][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.777167][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.091289][T25079] sctp: [Deprecated]: syz.0.7001 (pid 25079) Use of int in max_burst socket option deprecated. [ 249.091289][T25079] Use struct sctp_assoc_value instead [ 249.604350][T25105] loop3: detected capacity change from 0 to 764 [ 249.614198][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 249.614216][ T29] audit: type=1400 audit(761.591:5185): avc: denied { remount } for pid=25104 comm="syz.3.7009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 249.686280][T25119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7013'. [ 249.758007][T25128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7016'. [ 249.941551][T25136] wireguard0: entered promiscuous mode [ 249.947097][T25136] wireguard0: entered allmulticast mode [ 249.983277][T25147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.993749][T25147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.075650][T25147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.086070][T25147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.172641][T25147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.183112][T25147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.245833][T25147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.256293][T25147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.318377][ T31] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.326681][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.351327][ T31] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.359611][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.368325][ T31] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.376585][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.385308][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.393673][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.659233][T25201] sctp: [Deprecated]: syz.1.7035 (pid 25201) Use of int in max_burst socket option deprecated. [ 250.659233][T25201] Use struct sctp_assoc_value instead [ 250.715286][T25209] wireguard0: entered promiscuous mode [ 250.720792][T25209] wireguard0: entered allmulticast mode [ 250.729279][T25214] sctp: [Deprecated]: syz.5.7048 (pid 25214) Use of int in max_burst socket option deprecated. [ 250.729279][T25214] Use struct sctp_assoc_value instead [ 250.814131][T25221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.876076][T25221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.890704][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7045'. [ 250.900396][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7045'. [ 250.956033][T25221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.984329][T25247] wireguard0: entered promiscuous mode [ 250.989874][T25247] wireguard0: entered allmulticast mode [ 251.012933][T25221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.099972][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.141161][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.160739][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.169258][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.200122][T25269] sctp: [Deprecated]: syz.3.7051 (pid 25269) Use of int in max_burst socket option deprecated. [ 251.200122][T25269] Use struct sctp_assoc_value instead [ 251.293053][ T29] audit: type=1400 audit(763.271:5186): avc: denied { connect } for pid=25271 comm="syz.3.7053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.584427][T25298] wireguard0: entered promiscuous mode [ 251.589970][T25298] wireguard0: entered allmulticast mode [ 251.625893][T25302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.723245][T25302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.757934][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7068'. [ 251.770807][T25322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7068'. [ 251.783995][ T29] audit: type=1400 audit(763.761:5187): avc: denied { read } for pid=25321 comm="syz.3.7068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.805592][T25302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.832212][ T29] audit: type=1326 audit(763.811:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 251.883973][ T29] audit: type=1326 audit(763.831:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 251.907255][ T29] audit: type=1326 audit(763.831:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 251.930269][ T29] audit: type=1326 audit(763.831:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 251.953364][ T29] audit: type=1326 audit(763.831:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 251.976453][ T29] audit: type=1326 audit(763.831:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 251.999353][ T29] audit: type=1326 audit(763.831:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25327 comm="syz.3.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 252.024324][T25302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.109507][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.123818][T20127] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.192412][T20696] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.203679][T20696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.430010][T25367] wireguard0: entered promiscuous mode [ 252.435554][T25367] wireguard0: entered allmulticast mode [ 252.816300][T25386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7087'. [ 252.890666][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7092'. [ 252.908137][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7092'. [ 253.013945][T25429] program syz.0.7101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.100056][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7106'. [ 253.120920][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7106'. [ 253.159168][T25456] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.169141][T25456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.243763][T25456] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.253618][T25456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.351740][T25456] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.361765][T25456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.414666][T25456] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.424484][T25456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.442564][T25491] netlink: 'syz.0.7122': attribute type 1 has an invalid length. [ 253.450388][T25491] netlink: 'syz.0.7122': attribute type 4 has an invalid length. [ 253.458219][T25491] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7122'. [ 253.671486][T25501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7125'. [ 253.680602][T25499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7124'. [ 253.823392][T25539] program syz.3.7134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.171514][ T2967] page_pool_release_retry() stalled pool shutdown: id 171, 1 inflight 60 sec [ 256.407161][T23948] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.415627][T23948] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.427252][T23948] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.435548][T23948] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.447190][T23948] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.455445][T23948] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.466796][T23948] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.475065][T23948] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.509524][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 256.509544][ T29] audit: type=1326 audit(768.481:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.3.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 256.550798][ T29] audit: type=1326 audit(768.511:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.3.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 256.573808][ T29] audit: type=1326 audit(768.511:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.3.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 256.811039][T25613] netlink: 'syz.1.7147': attribute type 1 has an invalid length. [ 256.819028][T25613] netlink: 'syz.1.7147': attribute type 4 has an invalid length. [ 256.826897][T25613] __nla_validate_parse: 3 callbacks suppressed [ 256.826912][T25613] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7147'. [ 257.022931][ T29] audit: type=1400 audit(768.971:5242): avc: denied { write } for pid=25626 comm="syz.3.7156" path="socket:[69018]" dev="sockfs" ino=69018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.150399][T25634] loop3: detected capacity change from 0 to 2048 [ 257.181849][ T29] audit: type=1326 audit(769.161:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.0.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb174f6f749 code=0x7ffc0000 [ 257.229851][T25639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7160'. [ 257.239007][T25639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7160'. [ 257.258334][ T29] audit: type=1326 audit(769.181:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.0.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb174f6f749 code=0x7ffc0000 [ 257.281397][ T29] audit: type=1326 audit(769.181:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.0.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb174f6f749 code=0x7ffc0000 [ 257.282429][T25634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.304352][ T29] audit: type=1326 audit(769.181:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.0.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb174f6f749 code=0x7ffc0000 [ 257.304390][ T29] audit: type=1326 audit(769.181:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.0.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb174f6f749 code=0x7ffc0000 [ 257.304422][ T29] audit: type=1326 audit(769.181:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb174f6f749 code=0x7ffc0000 [ 257.562474][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.596667][T25656] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.611435][T25664] netlink: 'syz.3.7169': attribute type 1 has an invalid length. [ 257.619347][T25664] netlink: 'syz.3.7169': attribute type 4 has an invalid length. [ 257.627186][T25664] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7169'. [ 257.653698][T25656] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.677554][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7165'. [ 257.706242][T25656] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.750857][T25666] team0 (unregistering): Port device team_slave_0 removed [ 257.774803][T25666] team0 (unregistering): Port device team_slave_1 removed [ 257.803795][T25656] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.878984][ T7878] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.899803][ T7878] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.908534][ T7878] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.926834][ T7878] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.931853][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7175'. [ 261.940957][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7175'. [ 262.081742][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 262.081759][ T29] audit: type=1326 audit(774.061:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.120497][T25772] loop3: detected capacity change from 0 to 256 [ 262.121144][ T29] audit: type=1326 audit(774.091:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.149716][ T29] audit: type=1326 audit(774.091:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.172653][ T29] audit: type=1326 audit(774.091:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.195634][ T29] audit: type=1326 audit(774.091:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.218560][ T29] audit: type=1326 audit(774.091:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.241492][ T29] audit: type=1326 audit(774.091:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.264463][ T29] audit: type=1326 audit(774.091:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.287465][ T29] audit: type=1326 audit(774.091:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f903bdaf749 code=0x7ffc0000 [ 262.310503][ T29] audit: type=1326 audit(774.091:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25771 comm="syz.3.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f903bdaf783 code=0x7ffc0000 [ 262.622978][T25780] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.630396][T25780] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.736737][T25800] netlink: 'syz.0.7192': attribute type 1 has an invalid length. [ 262.817624][T25780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.862594][T25780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.131357][T23948] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 263.233228][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7186'. [ 263.242388][T25784] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7186'. [ 263.269425][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7186'. [ 263.281654][T25784] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7186'. [ 263.290779][T25784] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7186'. [ 263.320744][ T31] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.329224][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.368777][ T31] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.377276][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.469082][ T31] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.477608][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.514849][ T31] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.523370][ T31] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.629038][T25852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.636349][T25852] IPv6: NLM_F_CREATE should be set when creating new route [ 263.669761][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7212'. [ 263.678865][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7212'. [ 263.851109][T25886] vlan2: entered allmulticast mode [ 263.857254][T25886] dummy0: entered allmulticast mode [ 263.961603][T25903] wireguard0: entered promiscuous mode [ 264.151722][T25975] ip6gre0: entered promiscuous mode [ 264.174618][T25975] team0: Device ip6gre0 is of different type [ 264.345986][T25988] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7241'. [ 265.036017][T26033] hsr_slave_1 (unregistering): left promiscuous mode [ 265.182539][T26053] sd 0:0:1:0: device reset [ 265.199229][T26055] smc: net device bond0 applied user defined pnetid SYZ0 [ 265.233861][T26055] smc: net device bond0 erased user defined pnetid SYZ0 [ 265.291657][T26065] serio: Serial port ptm0 [ 265.476352][T26084] SELinux: ebitmap: truncated map [ 265.482476][T26084] SELinux: failed to load policy [ 265.548847][T26095] gre3: entered promiscuous mode [ 265.972395][T26173] netlink: 'syz.0.7313': attribute type 10 has an invalid length. [ 266.221773][T26200] serio: Serial port ptm0 [ 266.238578][T26201] team0 (unregistering): Port device team_slave_0 removed [ 266.273226][T26201] team0 (unregistering): Port device team_slave_1 removed [ 266.412904][T26254] sd 0:0:1:0: device reset [ 266.446675][T26258] loop3: detected capacity change from 0 to 1024 [ 266.465336][T26258] EXT4-fs: Ignoring removed bh option [ 266.471889][T26258] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 266.522664][T26258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.579072][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.696769][T26284] team0 (unregistering): Port device team_slave_0 removed [ 266.697108][T26280] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 266.732528][T26280] SELinux: failed to load policy [ 266.739813][T26284] team0 (unregistering): Port device team_slave_1 removed [ 266.832089][T26327] hsr_slave_1 (unregistering): left promiscuous mode [ 267.051818][T26357] sd 0:0:1:0: device reset [ 267.252040][T26376] __nla_validate_parse: 8 callbacks suppressed [ 267.252057][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7361'. [ 267.332203][T26386] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7364'. [ 267.352900][T26376] team0 (unregistering): Port device team_slave_0 removed [ 267.374702][T26376] team0 (unregistering): Port device team_slave_1 removed [ 267.463384][T26386] hsr_slave_1 (unregistering): left promiscuous mode [ 267.822061][T26456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7377'. [ 267.831074][T26456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7377'. [ 267.993964][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 267.993983][ T29] audit: type=1326 audit(779.971:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78cec765e7 code=0x7ffc0000 [ 268.024925][ T29] audit: type=1326 audit(779.971:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78cec1b829 code=0x7ffc0000 [ 268.047933][ T29] audit: type=1326 audit(779.971:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78cec765e7 code=0x7ffc0000 [ 268.070776][ T29] audit: type=1326 audit(779.971:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78cec1b829 code=0x7ffc0000 [ 268.093706][ T29] audit: type=1326 audit(779.971:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 268.116739][ T29] audit: type=1326 audit(779.971:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 268.139838][ T29] audit: type=1326 audit(780.001:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 268.163035][ T29] audit: type=1326 audit(780.001:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 268.185974][ T29] audit: type=1326 audit(780.001:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 268.209068][ T29] audit: type=1326 audit(780.001:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 268.844831][T26515] vlan2: entered allmulticast mode [ 268.870070][T26515] dummy0: entered allmulticast mode [ 268.926649][T26519] netlink: 'syz.4.7404': attribute type 1 has an invalid length. [ 269.013718][T26521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7405'. [ 269.022768][T26521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7405'. [ 269.114297][T26530] ip6gre0: entered promiscuous mode [ 269.440115][T26566] vlan2: entered allmulticast mode [ 269.452256][T26566] dummy0: entered allmulticast mode [ 269.464135][T26564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7420'. [ 269.473209][T26564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7420'. [ 269.559675][T26576] ip6gre0: entered promiscuous mode [ 269.644902][T26593] loop3: detected capacity change from 0 to 512 [ 269.665872][T26593] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 269.688758][T26593] EXT4-fs (loop3): invalid journal inode [ 269.700142][T26593] EXT4-fs (loop3): can't get journal size [ 269.707880][T26593] EXT4-fs (loop3): 1 truncate cleaned up [ 269.714295][T26593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.957596][T26619] vlan2: entered allmulticast mode [ 269.981714][T26619] dummy0: entered allmulticast mode [ 270.022583][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.333019][T26665] loop3: detected capacity change from 0 to 1024 [ 270.342514][T26665] EXT4-fs: Ignoring removed orlov option [ 270.353193][T26665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.473719][T26673] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.7452: failed to insert inode 12: doubly allocated? [ 270.499775][T26673] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 270.555018][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.595437][T26683] wireguard0: entered promiscuous mode [ 271.817298][T26746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.311142][T26771] netlink: 'syz.5.7490': attribute type 10 has an invalid length. [ 272.435388][T25790] page_pool_release_retry() stalled pool shutdown: id 178, 1 inflight 60 sec [ 272.519535][T26780] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.712538][T26794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7500'. [ 273.016165][T26803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7506'. [ 273.091879][T26825] block device autoloading is deprecated and will be removed. [ 273.270467][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 273.270487][ T29] audit: type=1326 audit(785.241:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.300248][ T29] audit: type=1326 audit(785.241:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.323202][ T29] audit: type=1326 audit(785.241:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.346226][ T29] audit: type=1326 audit(785.241:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.369160][ T29] audit: type=1326 audit(785.241:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.392069][ T29] audit: type=1326 audit(785.241:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.415095][ T29] audit: type=1326 audit(785.241:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.438025][ T29] audit: type=1326 audit(785.241:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.460956][ T29] audit: type=1326 audit(785.241:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.483937][ T29] audit: type=1326 audit(785.241:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26840 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f78cec7f749 code=0x7ffc0000 [ 273.615360][T26864] program syz.1.7523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.641931][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7525'. [ 273.658114][T26869] smc: net device bond0 applied user defined pnetid SYZ0 [ 273.669275][T26869] smc: net device bond0 erased user defined pnetid SYZ0 [ 273.744505][T26888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26888 comm=syz.4.7528 [ 273.864965][T26905] vlan3: entered allmulticast mode [ 273.990226][T26925] netlink: 'syz.5.7551': attribute type 1 has an invalid length. [ 274.024016][T23948] Bluetooth: hci0: Frame reassembly failed (-84) [ 274.030884][T26930] loop0: detected capacity change from 0 to 2048 [ 274.043948][T26930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 274.065139][T26930] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 274.133158][T26930] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 274.145921][T26930] EXT4-fs (loop0): This should not happen!! Data will be lost [ 274.145921][T26930] [ 274.155641][T26930] EXT4-fs (loop0): Total free blocks count 0 [ 274.161674][T26930] EXT4-fs (loop0): Free/Dirty block details [ 274.167587][T26930] EXT4-fs (loop0): free_blocks=2415919104 [ 274.173582][T26930] EXT4-fs (loop0): dirty_blocks=32 [ 274.178725][T26930] EXT4-fs (loop0): Block reservation details [ 274.184881][T26930] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 274.193795][T26947] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000900. [ 274.365430][T26960] loop0: detected capacity change from 0 to 1024 [ 274.373062][T26960] EXT4-fs: inline encryption not supported [ 274.379060][T26960] EXT4-fs: Ignoring removed orlov option [ 274.385285][T26960] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 274.402852][T26960] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 274.415027][T26960] System zones: 0-1, 3-12 [ 274.427387][T26960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.473353][T21540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.535793][T26973] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7569'. [ 274.544924][T26973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7569'. [ 274.714584][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7575'. [ 274.723636][T26990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7575'. [ 274.732662][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7575'. [ 274.742619][T26990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7575'. [ 274.751640][T26990] netlink: 'syz.0.7575': attribute type 6 has an invalid length. [ 275.897497][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7601'. [ 276.091434][ T3564] Bluetooth: hci0: command 0x1003 tx timeout [ 276.097667][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.144666][T27102] serio: Serial port ptm0 [ 276.150464][T27104] loop0: detected capacity change from 0 to 512 [ 276.161648][T23948] Bluetooth: hci0: Frame reassembly failed (-84) [ 276.951305][T27155] netlink: 'syz.1.7632': attribute type 1 has an invalid length. [ 276.959178][T27155] netlink: 'syz.1.7632': attribute type 4 has an invalid length. [ 277.272659][T27180] vlan3: entered allmulticast mode [ 277.436042][T27199] ================================================================== [ 277.444169][T27199] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 277.452801][T27199] [ 277.455125][T27199] write to 0xffff888105071768 of 8 bytes by task 27194 on cpu 0: [ 277.462853][T27199] shmem_file_splice_read+0x470/0x600 [ 277.468297][T27199] splice_direct_to_actor+0x26f/0x680 [ 277.473690][T27199] do_splice_direct+0xda/0x150 [ 277.478468][T27199] do_sendfile+0x380/0x650 [ 277.482902][T27199] __x64_sys_sendfile64+0x105/0x150 [ 277.488125][T27199] x64_sys_call+0x2db1/0x3000 [ 277.492826][T27199] do_syscall_64+0xd8/0x2c0 [ 277.497360][T27199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.503268][T27199] [ 277.505593][T27199] write to 0xffff888105071768 of 8 bytes by task 27199 on cpu 1: [ 277.513329][T27199] shmem_file_splice_read+0x470/0x600 [ 277.518736][T27199] splice_direct_to_actor+0x26f/0x680 [ 277.524109][T27199] do_splice_direct+0xda/0x150 [ 277.528873][T27199] do_sendfile+0x380/0x650 [ 277.533307][T27199] __x64_sys_sendfile64+0x105/0x150 [ 277.538516][T27199] x64_sys_call+0x2db1/0x3000 [ 277.543215][T27199] do_syscall_64+0xd8/0x2c0 [ 277.547750][T27199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.553647][T27199] [ 277.555974][T27199] value changed: 0x000000000000558c -> 0x000000000000559b [ 277.563105][T27199] [ 277.565443][T27199] Reported by Kernel Concurrency Sanitizer on: [ 277.571619][T27199] CPU: 1 UID: 0 PID: 27199 Comm: syz.1.7649 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 277.583007][T27199] Tainted: [W]=WARN [ 277.586816][T27199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.596888][T27199] ================================================================== [ 278.171259][ T3564] Bluetooth: hci0: command 0x1003 tx timeout [ 278.171332][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110