last executing test programs: 1m34.480085723s ago: executing program 32 (id=232): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1m30.304317732s ago: executing program 33 (id=362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 56.904425655s ago: executing program 2 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0), 0x44, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x9) 56.729807177s ago: executing program 2 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) 56.650086118s ago: executing program 2 (id=1539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x1}}, 0x10, 0x0}, 0x0) 56.625098549s ago: executing program 2 (id=1541): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 56.388869682s ago: executing program 2 (id=1545): unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 55.566548874s ago: executing program 2 (id=1571): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2f, 0x0, r2, 0x0, &(0x7f00000014c0)="8ba652e723a588f871f8f9a0dcc598734858c0de56bf9b9e3b23e106863f09f12026fb26af04876d557983e2649f7b704e39e511b93c806ff1b27c", 0x3b, 0x40002160}) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 55.540581375s ago: executing program 34 (id=1571): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2f, 0x0, r2, 0x0, &(0x7f00000014c0)="8ba652e723a588f871f8f9a0dcc598734858c0de56bf9b9e3b23e106863f09f12026fb26af04876d557983e2649f7b704e39e511b93c806ff1b27c", 0x3b, 0x40002160}) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 51.919495376s ago: executing program 4 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 51.918780386s ago: executing program 4 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 51.813739837s ago: executing program 4 (id=1673): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000004080)=0x99, 0x4) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x12}, 0x0) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109029400030109d0050904000000010100000a240105000902010211240605040502000200030006000200030824070602000fd90c240701050006fee6bc1be9090401000001020000090402010101020000090501ef0f0008260507250104000700090402"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 51.109903517s ago: executing program 4 (id=1700): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 51.038365708s ago: executing program 4 (id=1701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1030}}, 0x4c000) 50.772071012s ago: executing program 4 (id=1710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x17, 0x2000, 0x0, 0x0, 0x0}) 50.711884633s ago: executing program 35 (id=1710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x17, 0x2000, 0x0, 0x0, 0x0}) 45.797188702s ago: executing program 7 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, @void, @value}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010121}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 45.758171453s ago: executing program 7 (id=1878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x2b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 45.629556665s ago: executing program 7 (id=1894): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000100)=0x5, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x96, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x45833af96e4b39df, 0x0) 45.591911065s ago: executing program 7 (id=1888): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 45.555609815s ago: executing program 7 (id=1889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 45.475090627s ago: executing program 7 (id=1895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) dup2(r2, r3) 45.459492877s ago: executing program 36 (id=1895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) dup2(r2, r3) 21.717518343s ago: executing program 9 (id=2724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0)={0x0, 0x989680}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 21.688526623s ago: executing program 9 (id=2727): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x200088, &(0x7f0000000140)={[{@nogrpid}, {@nomblk_io_submit}, {@errors_remount}, {@nouser_xattr}, {@jqfmt_vfsold}, {@nouid32}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f00000005c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r2}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20) 21.626993974s ago: executing program 9 (id=2730): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='_pu<=0||!') 21.548917095s ago: executing program 9 (id=2732): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 21.523198235s ago: executing program 9 (id=2733): r0 = gettid() r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 21.433009767s ago: executing program 9 (id=2736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, &(0x7f00000001c0)=0x8000, 0x0, 0x80, 0x1000, 0x3, 0x101, 0x24, 0x100000000}}], 0x58, 0x8004}, 0x0) 21.432727977s ago: executing program 37 (id=2736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, &(0x7f00000001c0)=0x8000, 0x0, 0x80, 0x1000, 0x3, 0x101, 0x24, 0x100000000}}], 0x58, 0x8004}, 0x0) 5.062529468s ago: executing program 1 (id=3232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 5.022463209s ago: executing program 1 (id=3236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x80284504, &(0x7f0000000000)=""/56) 4.897655861s ago: executing program 1 (id=3239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.418775858s ago: executing program 1 (id=3252): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 4.303465899s ago: executing program 1 (id=3247): r0 = socket$inet6(0xa, 0x806, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 4.194803881s ago: executing program 1 (id=3255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 4.171501211s ago: executing program 38 (id=3255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 1.524114468s ago: executing program 8 (id=3338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 1.129127004s ago: executing program 8 (id=3347): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='ext4\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.066145745s ago: executing program 5 (id=3348): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@private2, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x0, 0x0, 0xfffffffffffff0d9}, 0xfffffffc, 0x0, 0x2, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.053468715s ago: executing program 5 (id=3349): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 894.146768ms ago: executing program 5 (id=3351): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x68, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x24000080) 826.034979ms ago: executing program 5 (id=3355): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044084}, 0x0) 799.761589ms ago: executing program 8 (id=3357): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf62, 0x40ffffffff}, 0x1180, 0x5, 0x3a65, 0x5, 0x1, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x30385, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 654.094471ms ago: executing program 8 (id=3360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0f, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000600)="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", 0xa01, 0x6, 0x0) 647.169911ms ago: executing program 0 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 636.617682ms ago: executing program 8 (id=3365): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x405}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f5009500040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 632.706131ms ago: executing program 5 (id=3366): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 583.415282ms ago: executing program 8 (id=3367): r0 = gettid() r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 582.661842ms ago: executing program 0 (id=3377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 480.497093ms ago: executing program 3 (id=3370): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 479.993853ms ago: executing program 3 (id=3371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x2600c054) 398.154174ms ago: executing program 3 (id=3372): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 397.706514ms ago: executing program 3 (id=3373): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) r3 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x12) 380.297835ms ago: executing program 3 (id=3374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 364.272965ms ago: executing program 5 (id=3375): syz_open_dev$usbfs(&(0x7f0000000000), 0x12, 0x141341) epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000001}, 0x0, 0x0) 294.211376ms ago: executing program 0 (id=3376): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 293.764826ms ago: executing program 6 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000200)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 249.399497ms ago: executing program 6 (id=3379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 207.439137ms ago: executing program 6 (id=3380): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 159.607918ms ago: executing program 0 (id=3381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 100.162089ms ago: executing program 6 (id=3382): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 99.585879ms ago: executing program 0 (id=3383): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) rt_sigsuspend(0x0, 0x0) 43.101219ms ago: executing program 6 (id=3384): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 998.69µs ago: executing program 6 (id=3385): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000e40)={0x2, 'hsr0\x00', 0x21}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000006c0)={0x2, 'pimreg1\x00', 0x4}, 0x18) 446.71µs ago: executing program 3 (id=3386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000250900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 0s ago: executing program 0 (id=3395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) setxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), &(0x7f0000000040)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x2) 0s ago: executing program 3 (id=3387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): without journal. Quota mode: none. [ 79.002264][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.054803][ T7416] loop1: detected capacity change from 0 to 512 [ 79.103437][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.114126][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.122371][ T7422] loop6: detected capacity change from 0 to 1024 [ 79.129321][ T7422] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 79.140388][ T7416] EXT4-fs (loop1): 1 orphan inode deleted [ 79.160376][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.173064][ T6298] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 79.204064][ T7416] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.250851][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.262096][ T6298] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 79.277685][ T7433] syz_tun: entered promiscuous mode [ 79.296739][ T7433] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 79.378267][ T7451] block device autoloading is deprecated and will be removed. [ 79.395222][ T7451] syz.6.1686: attempt to access beyond end of device [ 79.395222][ T7451] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.550485][ T7473] lo speed is unknown, defaulting to 1000 [ 79.557497][ T7475] loop6: detected capacity change from 0 to 1024 [ 79.588052][ T7475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.604847][ T7478] loop1: detected capacity change from 0 to 1024 [ 79.630237][ T7478] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1697: Failed to acquire dquot type 0 [ 79.643069][ T7478] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 79.657800][ T7478] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.1697: corrupted inode contents [ 79.674778][ T7478] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.1697: mark_inode_dirty error [ 79.687855][ T7475] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 79.700664][ T7475] EXT4-fs (loop6): This should not happen!! Data will be lost [ 79.700664][ T7475] [ 79.710597][ T7475] EXT4-fs (loop6): Total free blocks count 0 [ 79.716880][ T7475] EXT4-fs (loop6): Free/Dirty block details [ 79.722958][ T7475] EXT4-fs (loop6): free_blocks=0 [ 79.727935][ T7475] EXT4-fs (loop6): dirty_blocks=0 [ 79.730154][ T7478] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.1697: corrupted inode contents [ 79.733028][ T7475] EXT4-fs (loop6): Block reservation details [ 79.733045][ T7475] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 79.746851][ T7478] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.1697: mark_inode_dirty error [ 79.751116][ T7484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=7484 comm=syz.7.1699 [ 79.757109][ T7478] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.1697: corrupted inode contents [ 79.793245][ T7478] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 79.802359][ T7478] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.1697: corrupted inode contents [ 79.815501][ T7478] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.1697: mark_inode_dirty error [ 79.850380][ T7478] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 79.872125][ T7478] EXT4-fs (loop1): 1 truncate cleaned up [ 79.878882][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.880962][ T7478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.916714][ T7486] sd 0:0:1:0: device reset [ 79.941988][ T7492] xt_hashlimit: size too large, truncated to 1048576 [ 80.036708][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.095807][ T7500] openvswitch: netlink: Message has 6 unknown bytes. [ 80.237309][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.285325][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.317575][ T7516] lo speed is unknown, defaulting to 1000 [ 80.361224][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.387295][ T7537] loop6: detected capacity change from 0 to 512 [ 80.401734][ T7537] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.442248][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.458452][ T7537] EXT4-fs (loop6): 1 truncate cleaned up [ 80.468096][ T7537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.482143][ T7516] chnl_net:caif_netlink_parms(): no params data found [ 80.532349][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.584554][ T7558] syz.7.1729: attempt to access beyond end of device [ 80.584554][ T7558] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 80.654758][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.661906][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.675585][ T7516] bridge_slave_0: entered allmulticast mode [ 80.682229][ T7516] bridge_slave_0: entered promiscuous mode [ 80.689176][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.696376][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.704398][ T7516] bridge_slave_1: entered allmulticast mode [ 80.710996][ T7516] bridge_slave_1: entered promiscuous mode [ 80.804347][ T12] bond0 (unregistering): Released all slaves [ 80.814378][ T12] bond1 (unregistering): Released all slaves [ 80.826071][ T7580] loop6: detected capacity change from 0 to 164 [ 80.838422][ T7580] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.852693][ T7580] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.862071][ T7580] Symlink component flag not implemented [ 80.863893][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.867746][ T7580] Symlink component flag not implemented [ 80.868147][ T7580] Symlink component flag not implemented (7) [ 80.879966][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.882762][ T7580] Symlink component flag not implemented (116) [ 80.939331][ T12] hsr_slave_0: left promiscuous mode [ 80.945313][ T7589] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 80.952513][ T12] hsr_slave_1: left promiscuous mode [ 80.955614][ T12] veth1_macvtap: left promiscuous mode [ 80.955638][ T12] veth0_macvtap: left promiscuous mode [ 80.955731][ T12] veth1_vlan: left promiscuous mode [ 80.955759][ T12] veth0_vlan: left promiscuous mode [ 81.086241][ T7516] team0: Port device team_slave_0 added [ 81.092090][ T7603] program syz.3.1748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.095974][ T7516] team0: Port device team_slave_1 added [ 81.112044][ T7603] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 81.154672][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.161769][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.161819][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.162865][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.162945][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.163071][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.258664][ T7516] hsr_slave_0: entered promiscuous mode [ 81.259134][ T7516] hsr_slave_1: entered promiscuous mode [ 81.259376][ T7516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.259393][ T7516] Cannot create hsr debugfs directory [ 81.444490][ T7516] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 81.471328][ T7516] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 81.486050][ T12] IPVS: stop unused estimator thread 0... [ 81.501944][ T7516] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 81.514858][ T7629] validate_nla: 2 callbacks suppressed [ 81.514876][ T7629] netlink: 'syz.1.1759': attribute type 3 has an invalid length. [ 81.525776][ T7516] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 81.579830][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.592742][ T7516] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.594889][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.594920][ T6292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.604742][ T3403] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.604777][ T3403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.640450][ T7516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.716359][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.743695][ T7642] openvswitch: netlink: Message has 6 unknown bytes. [ 81.905776][ T7516] veth0_vlan: entered promiscuous mode [ 81.916531][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 81.916549][ T29] audit: type=1400 audit(1747483091.112:1589): avc: denied { name_connect } for pid=7670 comm="syz.1.1772" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 81.955007][ T7516] veth1_vlan: entered promiscuous mode [ 81.973485][ T7674] hub 9-0:1.0: USB hub found [ 81.976603][ T7516] veth0_macvtap: entered promiscuous mode [ 81.982987][ T7674] hub 9-0:1.0: 8 ports detected [ 81.998296][ T7516] veth1_macvtap: entered promiscuous mode [ 82.039184][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.058187][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.071652][ T29] audit: type=1400 audit(1747483091.272:1590): avc: denied { bind } for pid=7682 comm="syz.3.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.076573][ T7516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.099849][ T7516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.108788][ T7516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.117929][ T7516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.157022][ T7687] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1779'. [ 82.179838][ T7691] loop7: detected capacity change from 0 to 512 [ 82.189924][ T7691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.239658][ T7691] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.1778: invalid block [ 82.260940][ T7691] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1778: invalid indirect mapped block 4294967295 (level 1) [ 82.288154][ T7691] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1778: invalid indirect mapped block 4294967295 (level 1) [ 82.307103][ T7707] vlan2: entered allmulticast mode [ 82.312397][ T7707] : entered allmulticast mode [ 82.317195][ T7707] bond_slave_0: entered allmulticast mode [ 82.322993][ T7707] bond_slave_1: entered allmulticast mode [ 82.328791][ T7707] syz_tun: entered allmulticast mode [ 82.335136][ T7705] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1712'. [ 82.340955][ T7691] EXT4-fs (loop7): 2 truncates cleaned up [ 82.344306][ T7705] netlink: 'syz.8.1712': attribute type 5 has an invalid length. [ 82.357711][ T7705] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1712'. [ 82.357964][ T7691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.368016][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 82.388135][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 82.397088][ T7711] netlink: 'syz.6.1786': attribute type 21 has an invalid length. [ 82.495956][ T7159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.634964][ T7735] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1798'. [ 82.644349][ T7735] netlink: 'syz.8.1798': attribute type 5 has an invalid length. [ 82.652244][ T7735] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1798'. [ 82.709073][ T7743] loop7: detected capacity change from 0 to 164 [ 82.719480][ T7743] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 82.729036][ T7743] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 82.739140][ T7743] Symlink component flag not implemented [ 82.745151][ T7743] Symlink component flag not implemented [ 82.751455][ T7743] Symlink component flag not implemented (7) [ 82.757467][ T7743] Symlink component flag not implemented (116) [ 82.899511][ T7755] loop8: detected capacity change from 0 to 512 [ 82.906982][ T7755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.916945][ T7755] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1804: invalid block [ 82.929270][ T7755] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1804: invalid indirect mapped block 4294967295 (level 1) [ 82.950374][ T7755] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1804: invalid indirect mapped block 4294967295 (level 1) [ 82.965508][ T7755] EXT4-fs (loop8): 2 truncates cleaned up [ 82.972176][ T7755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.004600][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.021164][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1806'. [ 83.105974][ T7770] loop7: detected capacity change from 0 to 128 [ 83.114415][ T7770] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.126989][ T7770] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.142185][ T29] audit: type=1400 audit(1747483092.342:1591): avc: denied { setattr } for pid=7768 comm="syz.7.1823" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.173987][ T7159] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.272867][ T7788] netlink: 'syz.8.1821': attribute type 3 has an invalid length. [ 83.332928][ T7796] netlink: 'syz.6.1826': attribute type 13 has an invalid length. [ 83.352977][ T7799] loop6: detected capacity change from 0 to 512 [ 83.359914][ T7799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.374095][ T7799] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1827: invalid block [ 83.386357][ T7799] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1827: invalid indirect mapped block 4294967295 (level 1) [ 83.402487][ T7799] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1827: invalid indirect mapped block 4294967295 (level 1) [ 83.436089][ T7799] EXT4-fs (loop6): 2 truncates cleaned up [ 83.449899][ T7799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.486344][ T29] audit: type=1400 audit(1747483092.682:1592): avc: denied { append } for pid=7810 comm="syz.7.1832" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.511592][ T7809] lo speed is unknown, defaulting to 1000 [ 83.518170][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.530803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.689619][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1840'. [ 83.735434][ T29] audit: type=1400 audit(1747483092.932:1593): avc: denied { cmd } for pid=7834 comm="syz.6.1843" path="socket:[19337]" dev="sockfs" ino=19337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.814143][ T7840] vlan2: entered allmulticast mode [ 83.819430][ T7840] bond0: entered allmulticast mode [ 83.824662][ T7840] bond_slave_0: entered allmulticast mode [ 83.830426][ T7840] bond_slave_1: entered allmulticast mode [ 83.880067][ T7843] tipc: Enabling of bearer rejected, failed to enable media [ 83.934876][ T29] audit: type=1326 audit(1747483093.122:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.8.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a970e969 code=0x7ffc0000 [ 83.958408][ T29] audit: type=1326 audit(1747483093.122:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.8.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a970e969 code=0x7ffc0000 [ 83.981884][ T29] audit: type=1326 audit(1747483093.122:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.8.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f50a970e969 code=0x7ffc0000 [ 84.005413][ T29] audit: type=1326 audit(1747483093.132:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.8.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a970e969 code=0x7ffc0000 [ 84.028858][ T29] audit: type=1326 audit(1747483093.132:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.8.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50a970e969 code=0x7ffc0000 [ 84.084562][ T7850] netlink: 'syz.1.1849': attribute type 13 has an invalid length. [ 84.182673][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.189884][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.363158][ T7850] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.372092][ T7850] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.381146][ T7850] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.390133][ T7850] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.649866][ T7886] infiniband syz2: set active [ 84.654672][ T7886] infiniband syz2: added veth0_to_bond [ 84.671743][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1859'. [ 84.677087][ T7886] RDS/IB: syz2: added [ 84.680651][ T7890] netlink: 'syz.7.1859': attribute type 21 has an invalid length. [ 84.693599][ T7886] smc: adding ib device syz2 with port count 1 [ 84.700008][ T7886] smc: ib device syz2 port 1 has pnetid [ 84.820232][ T7900] serio: Serial port ptm0 [ 85.032651][ T7927] vlan3: entered allmulticast mode [ 85.037830][ T7927] bond0: entered allmulticast mode [ 85.043206][ T7927] syz_tun: entered allmulticast mode [ 85.164289][ T7934] SELinux: failed to load policy [ 85.252663][ T7952] netlink: 'syz.3.1887': attribute type 3 has an invalid length. [ 85.273373][ T7159] bond0: (slave syz_tun): Releasing backup interface [ 85.324551][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.414278][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.473171][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.503537][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.525749][ T7980] loop8: detected capacity change from 0 to 1024 [ 85.540748][ T7980] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.552110][ T7980] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.563634][ T7980] JBD2: no valid journal superblock found [ 85.569408][ T7980] EXT4-fs (loop8): Could not load journal inode [ 85.588967][ T7980] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 85.626836][ T7971] lo speed is unknown, defaulting to 1000 [ 85.638699][ T12] bridge_slave_1: left allmulticast mode [ 85.644521][ T12] bridge_slave_1: left promiscuous mode [ 85.650292][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.684871][ T12] bridge_slave_0: left allmulticast mode [ 85.690657][ T12] bridge_slave_0: left promiscuous mode [ 85.696605][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.833105][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.850660][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.865084][ T12] bond0 (unregistering): Released all slaves [ 85.949866][ T8004] lo speed is unknown, defaulting to 1000 [ 86.008716][ T7971] chnl_net:caif_netlink_parms(): no params data found [ 86.048592][ T12] hsr_slave_0: left promiscuous mode [ 86.071502][ T12] hsr_slave_1: left promiscuous mode [ 86.085233][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.093004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.132182][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.139780][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.157618][ T12] veth1_macvtap: left promiscuous mode [ 86.164819][ T12] veth0_macvtap: left promiscuous mode [ 86.170477][ T12] veth1_vlan: left promiscuous mode [ 86.176671][ T12] veth0_vlan: left promiscuous mode [ 86.261361][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.271919][ T12] team0 (unregistering): Port device team_slave_0 removed [ 86.311540][ T4584] bond0: (slave syz_tun): Releasing backup interface [ 86.319799][ T4584] syz_tun (unregistering): left allmulticast mode [ 86.368783][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.376011][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.390897][ T7971] bridge_slave_0: entered allmulticast mode [ 86.399403][ T7971] bridge_slave_0: entered promiscuous mode [ 86.406210][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.413504][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.422143][ T7971] bridge_slave_1: entered allmulticast mode [ 86.428568][ T7971] bridge_slave_1: entered promiscuous mode [ 86.451572][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.462069][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.498593][ T8044] vlan3: entered allmulticast mode [ 86.503943][ T8044] bond0: entered allmulticast mode [ 86.509165][ T8044] bond_slave_0: entered allmulticast mode [ 86.515038][ T8044] bond_slave_1: entered allmulticast mode [ 86.520836][ T8044] syz_tun: entered allmulticast mode [ 86.530359][ T7971] team0: Port device team_slave_0 added [ 86.538216][ T7971] team0: Port device team_slave_1 added [ 86.570552][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.577617][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.603713][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.620298][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.627408][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.653664][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.714037][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.726875][ T7971] hsr_slave_0: entered promiscuous mode [ 86.733156][ T7971] hsr_slave_1: entered promiscuous mode [ 86.738991][ T7971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.746980][ T7971] Cannot create hsr debugfs directory [ 86.763032][ T8059] macvtap0: entered promiscuous mode [ 86.768952][ T8059] macvtap0: left promiscuous mode [ 86.775234][ T8045] lo speed is unknown, defaulting to 1000 [ 86.794255][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.845605][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.900513][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.932647][ T7971] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 86.954680][ T7971] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 86.961627][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 86.961736][ T29] audit: type=1400 audit(1747483096.152:1620): avc: denied { ioctl } for pid=8078 comm="syz.1.1937" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.013395][ T7971] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 87.043506][ T7971] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 87.242234][ T12] bond0 (unregistering): Released all slaves [ 87.336812][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 87.389931][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.398996][ T8111] syz.8.1947 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.414702][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.456354][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.463480][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.490034][ T7971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.500468][ T7971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.526633][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.533878][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.541299][ T8045] bridge_slave_0: entered allmulticast mode [ 87.547888][ T8045] bridge_slave_0: entered promiscuous mode [ 87.555233][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.562332][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.569548][ T8045] bridge_slave_1: entered allmulticast mode [ 87.576210][ T8045] bridge_slave_1: entered promiscuous mode [ 87.590896][ T12] hsr_slave_0: left promiscuous mode [ 87.600753][ T12] hsr_slave_1: left promiscuous mode [ 87.619501][ T12] veth1_macvtap: left promiscuous mode [ 87.631113][ T12] veth0_macvtap: left promiscuous mode [ 87.636666][ T12] veth1_vlan: left promiscuous mode [ 87.660954][ T12] veth0_vlan: left promiscuous mode [ 87.894576][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.901717][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.263885][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.277569][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.328434][ T8045] team0: Port device team_slave_0 added [ 88.343088][ T8045] team0: Port device team_slave_1 added [ 88.369388][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.376444][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.402476][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.415519][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.422526][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.448765][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.460836][ T29] audit: type=1400 audit(1747483097.662:1621): avc: denied { write } for pid=8136 comm="syz.1.1957" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 88.505960][ T8045] hsr_slave_0: entered promiscuous mode [ 88.512336][ T8045] hsr_slave_1: entered promiscuous mode [ 88.518413][ T8045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.526206][ T8045] Cannot create hsr debugfs directory [ 88.529334][ T29] audit: type=1400 audit(1747483097.722:1622): avc: denied { rename } for pid=8142 comm="+}[@" name="file0" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.557289][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.634158][ T29] audit: type=1326 audit(1747483097.832:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.657941][ T29] audit: type=1326 audit(1747483097.832:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.681350][ T29] audit: type=1326 audit(1747483097.832:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.704992][ T29] audit: type=1326 audit(1747483097.832:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.728347][ T29] audit: type=1326 audit(1747483097.832:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.751846][ T29] audit: type=1326 audit(1747483097.832:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.775158][ T29] audit: type=1326 audit(1747483097.832:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 88.843350][ T8167] __nla_validate_parse: 7 callbacks suppressed [ 88.843370][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 88.901114][ T7971] veth0_vlan: entered promiscuous mode [ 88.915400][ T7971] veth1_vlan: entered promiscuous mode [ 88.940861][ T7971] veth0_macvtap: entered promiscuous mode [ 88.957082][ T7971] veth1_macvtap: entered promiscuous mode [ 88.971914][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.984608][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.018837][ T8045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.032155][ T7971] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.040939][ T7971] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.049729][ T7971] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.058526][ T7971] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.071480][ T8045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.089469][ T8045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.103484][ T8045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.175536][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.189456][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.205088][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.212169][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.270172][ T3403] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.277356][ T3403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.318146][ T8045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.328602][ T8045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.498725][ T8209] netlink: 'syz.8.1982': attribute type 3 has an invalid length. [ 89.526076][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.558449][ T8212] xt_hashlimit: size too large, truncated to 1048576 [ 89.655231][ T8220] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1986'. [ 89.704599][ T8045] veth0_vlan: entered promiscuous mode [ 89.740630][ T8045] veth1_vlan: entered promiscuous mode [ 89.763095][ T8235] netem: incorrect gi model size [ 89.768163][ T8235] netem: change failed [ 89.797759][ T8045] veth0_macvtap: entered promiscuous mode [ 89.816474][ T8045] veth1_macvtap: entered promiscuous mode [ 89.842489][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.865501][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 89.866015][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.889476][ T8045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.898482][ T8045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907292][ T8045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.916177][ T8045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.958521][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 89.998118][ T8262] loop6: detected capacity change from 0 to 128 [ 90.010148][ T8264] SELinux: failed to load policy [ 90.017912][ T8266] loop9: detected capacity change from 0 to 164 [ 90.040812][ T8266] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.067308][ T8262] syz.6.1932: attempt to access beyond end of device [ 90.067308][ T8262] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 90.088288][ T8266] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.107414][ T8266] Symlink component flag not implemented [ 90.113216][ T8266] Symlink component flag not implemented [ 90.120651][ T6337] kworker/u8:32: attempt to access beyond end of device [ 90.120651][ T6337] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 90.144982][ T8266] Symlink component flag not implemented (7) [ 90.151136][ T8266] Symlink component flag not implemented (116) [ 90.161323][ T8273] sd 0:0:1:0: device reset [ 90.224338][ T8283] SELinux: security policydb version 18 (MLS) not backwards compatible [ 90.235719][ T8283] SELinux: failed to load policy [ 90.287677][ T8296] loop9: detected capacity change from 0 to 512 [ 90.295669][ T8296] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 90.305675][ T8296] EXT4-fs (loop9): inodes count not valid: 0 vs 32 [ 90.540146][ T8347] loop6: detected capacity change from 0 to 512 [ 90.557568][ T8347] EXT4-fs: Ignoring removed oldalloc option [ 90.582554][ T8347] EXT4-fs (loop6): 1 truncate cleaned up [ 90.588764][ T8347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.620070][ T8362] netlink: 'syz.3.2031': attribute type 13 has an invalid length. [ 90.632263][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.750802][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.758048][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.774412][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'. [ 90.783448][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'. [ 90.794019][ T8372] netlink: 'syz.6.2035': attribute type 1 has an invalid length. [ 90.912042][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.917733][ T8382] netlink: 'syz.6.2038': attribute type 1 has an invalid length. [ 90.938704][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.038272][ T8362] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.047367][ T8362] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.056624][ T8362] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.065680][ T8362] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.152362][ T3541] syz2: Port: 1 Link DOWN [ 91.239192][ T8394] syzkaller0: entered promiscuous mode [ 91.244772][ T8394] syzkaller0: entered allmulticast mode [ 91.299717][ T8402] loop8: detected capacity change from 0 to 1024 [ 91.338710][ T8402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.349059][ T8404] netlink: 'syz.9.2047': attribute type 1 has an invalid length. [ 91.379539][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.445123][ T8413] loop6: detected capacity change from 0 to 512 [ 91.452370][ T8413] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.464546][ T8415] loop9: detected capacity change from 0 to 512 [ 91.482354][ T8415] EXT4-fs: Ignoring removed oldalloc option [ 91.500406][ T8413] EXT4-fs (loop6): 1 truncate cleaned up [ 91.506653][ T8415] EXT4-fs (loop9): 1 truncate cleaned up [ 91.512914][ T8415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.534122][ T8413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.597325][ T7971] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.626627][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.650617][ T8429] netlink: 'syz.9.2056': attribute type 13 has an invalid length. [ 91.764156][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.771473][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.833232][ T8429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.855428][ T8429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.896721][ T8445] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2063'. [ 91.915378][ T8429] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.924462][ T8429] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.933654][ T8429] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.942803][ T8429] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.980580][ T8445] 0ªX¹¦À: renamed from caif0 [ 91.990900][ T8445] 0ªX¹¦À: entered allmulticast mode [ 91.996174][ T8445] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 92.134594][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2069'. [ 92.194707][ T8463] macvlan2: entered promiscuous mode [ 92.200098][ T8463] macvlan2: entered allmulticast mode [ 92.206180][ T8463] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 92.481854][ T8479] loop6: detected capacity change from 0 to 1024 [ 92.499112][ T8479] EXT4-fs: Ignoring removed orlov option [ 92.531935][ T8479] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.581844][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 92.581862][ T29] audit: type=1326 audit(1747483101.782:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.611452][ T29] audit: type=1326 audit(1747483101.782:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.635002][ T29] audit: type=1326 audit(1747483101.782:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.659092][ T29] audit: type=1326 audit(1747483101.782:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.682666][ T29] audit: type=1326 audit(1747483101.782:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.706111][ T29] audit: type=1326 audit(1747483101.782:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.729638][ T29] audit: type=1326 audit(1747483101.782:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 92.923777][ T29] audit: type=1400 audit(1747483102.122:1713): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.110663][ T8523] netlink: 'syz.8.2096': attribute type 13 has an invalid length. [ 93.127993][ T8521] Driver unsupported XDP return value 0 on prog (id 1504) dev N/A, expect packet loss! [ 93.214477][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.221981][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.240130][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2103'. [ 93.319800][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.335246][ T29] audit: type=1326 audit(1747483102.532:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 93.336615][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.374442][ T29] audit: type=1326 audit(1747483102.562:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f75a1c3e969 code=0x7ffc0000 [ 93.409665][ T8523] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.418762][ T8523] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.427799][ T8523] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.436764][ T8523] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.454299][ T8533] geneve0: entered allmulticast mode [ 93.484152][ T8554] syzkaller1: entered promiscuous mode [ 93.489759][ T8554] syzkaller1: entered allmulticast mode [ 93.554559][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2113'. [ 93.610364][ T8575] loop9: detected capacity change from 0 to 2048 [ 93.644668][ T8575] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.669752][ T8575] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 93.682339][ T8575] EXT4-fs (loop9): This should not happen!! Data will be lost [ 93.682339][ T8575] [ 93.692357][ T8575] EXT4-fs (loop9): Total free blocks count 0 [ 93.698528][ T8575] EXT4-fs (loop9): Free/Dirty block details [ 93.704567][ T8575] EXT4-fs (loop9): free_blocks=2415919104 [ 93.710335][ T8575] EXT4-fs (loop9): dirty_blocks=64 [ 93.715505][ T8575] EXT4-fs (loop9): Block reservation details [ 93.721615][ T8575] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 93.833169][ T8593] netlink: 'syz.6.2124': attribute type 13 has an invalid length. [ 93.928887][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.936169][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.017438][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.028641][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.040393][ T8609] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 94.067909][ T8593] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.077259][ T8593] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.086476][ T8593] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.095606][ T8593] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.330819][ T8632] loop9: detected capacity change from 0 to 512 [ 94.347679][ T8632] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.395146][ T8644] program syz.1.2147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.405243][ T8644] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 94.474116][ T8652] loop9: detected capacity change from 0 to 128 [ 94.559186][ T8652] syz.9.2152: attempt to access beyond end of device [ 94.559186][ T8652] loop9: rw=0, sector=121, nr_sectors = 120 limit=128 [ 94.581075][ T8662] geneve0: entered allmulticast mode [ 94.652363][ T8329] kworker/u8:50: attempt to access beyond end of device [ 94.652363][ T8329] loop9: rw=1, sector=241, nr_sectors = 800 limit=128 [ 94.689549][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2163'. [ 94.840048][ T8695] netlink: 'syz.9.2172': attribute type 1 has an invalid length. [ 94.848041][ T8695] netlink: 'syz.9.2172': attribute type 1 has an invalid length. [ 95.579465][ T8737] loop6: detected capacity change from 0 to 128 [ 95.601443][ T8737] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.792106][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.805577][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.920509][ T8759] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2208'. [ 96.064234][ T8769] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 96.126886][ T8772] ªªªªªª: renamed from vlan0 [ 96.332442][ T8804] netlink: 'syz.1.2220': attribute type 3 has an invalid length. [ 96.518664][ T8823] wireguard0: entered promiscuous mode [ 96.631787][ T8837] netlink: 572 bytes leftover after parsing attributes in process `syz.9.2234'. [ 96.701404][ T8846] ipip0: entered promiscuous mode [ 96.721592][ T8848] netlink: 'syz.9.2239': attribute type 10 has an invalid length. [ 96.768421][ T8854] loop9: detected capacity change from 0 to 1024 [ 96.775316][ T8854] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 96.823110][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2245'. [ 96.924713][ T8876] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 97.058597][ T8896] SELinux: failed to load policy [ 97.229722][ T8909] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 97.229722][ T8909] program syz.9.2267 not setting count and/or reply_len properly [ 97.265814][ T8913] batadv1: entered allmulticast mode [ 97.271696][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.279101][ T8913] bridge0: port 3(batadv1) entered blocking state [ 97.285678][ T8913] bridge0: port 3(batadv1) entered disabled state [ 97.293051][ T8913] batadv1: entered promiscuous mode [ 97.493132][ T8923] loop6: detected capacity change from 0 to 2048 [ 97.587564][ T8939] ref_ctr_offset mismatch. inode: 0x9a5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2000000004c0 [ 97.623523][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 97.623541][ T29] audit: type=1400 audit(1747483106.822:1775): avc: denied { bind } for pid=8940 comm="syz.9.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.649081][ T29] audit: type=1400 audit(1747483106.822:1776): avc: denied { name_bind } for pid=8940 comm="syz.9.2282" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 97.669921][ T29] audit: type=1400 audit(1747483106.822:1777): avc: denied { node_bind } for pid=8940 comm="syz.9.2282" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 97.692134][ T29] audit: type=1400 audit(1747483106.852:1778): avc: denied { accept } for pid=8940 comm="syz.9.2282" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.715993][ T8943] loop9: detected capacity change from 0 to 512 [ 97.736660][ T8943] EXT4-fs (loop9): 1 orphan inode deleted [ 97.744017][ T8943] EXT4-fs mount: 8 callbacks suppressed [ 97.744033][ T8943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.762606][ T6326] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.772440][ T6326] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 97.784518][ T8943] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.786232][ T8340] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 97.804263][ T8340] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 97.816718][ T29] audit: type=1400 audit(1747483107.002:1779): avc: denied { watch } for pid=8942 comm="syz.9.2284" path="/69/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.843293][ T8949] vlan2: entered allmulticast mode [ 97.850159][ T7971] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.861539][ T6318] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.871677][ T6318] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:22: Failed to release dquot type 1 [ 97.895744][ T29] audit: type=1326 audit(1747483107.092:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 97.897170][ T8953] lo speed is unknown, defaulting to 1000 [ 97.920899][ T29] audit: type=1326 audit(1747483107.122:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 97.948790][ T29] audit: type=1326 audit(1747483107.122:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 98.203685][ T8977] ÿÿÿÿÿÿ: renamed from vlan1 [ 98.518376][ T9018] loop6: detected capacity change from 0 to 512 [ 98.528245][ T9018] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 98.541888][ T9018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 98.551856][ T9018] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.2315: corrupted in-inode xattr: e_value size too large [ 98.566316][ T9018] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2315: couldn't read orphan inode 15 (err -117) [ 98.580114][ T9018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.619808][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.674492][ T9034] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2322'. [ 98.849715][ T9060] lo speed is unknown, defaulting to 1000 [ 99.027489][ T9068] loop8: detected capacity change from 0 to 512 [ 99.058602][ T9068] EXT4-fs (loop8): too many log groups per flexible block group [ 99.066356][ T9068] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 99.073357][ T9068] EXT4-fs (loop8): mount failed [ 99.248491][ T9084] loop8: detected capacity change from 0 to 512 [ 99.255313][ T9084] EXT4-fs: Ignoring removed nobh option [ 99.266880][ T9084] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2344: invalid indirect mapped block 256 (level 2) [ 99.283605][ T9084] EXT4-fs (loop8): 2 truncates cleaned up [ 99.289677][ T9084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.383244][ T6316] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:21: bg 0: block 5: invalid block bitmap [ 99.396551][ T6316] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 99.408867][ T6316] EXT4-fs (loop8): This should not happen!! Data will be lost [ 99.408867][ T6316] [ 99.418663][ T6316] EXT4-fs (loop8): Total free blocks count 0 [ 99.424702][ T6316] EXT4-fs (loop8): Free/Dirty block details [ 99.430602][ T6316] EXT4-fs (loop8): free_blocks=0 [ 99.435641][ T6316] EXT4-fs (loop8): dirty_blocks=8 [ 99.440707][ T6316] EXT4-fs (loop8): Block reservation details [ 99.446701][ T6316] EXT4-fs (loop8): i_reserved_data_blocks=8 [ 99.455072][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.855941][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2364'. [ 99.865106][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2364'. [ 99.942749][ T9134] vlan0: entered allmulticast mode [ 100.151669][ T9143] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2370'. [ 100.352694][ T9156] SELinux: ebitmap: map size 98 does not match my size 64 (high bit was 4278589440) [ 100.363881][ T9156] SELinux: failed to load policy [ 100.615954][ T9186] loop8: detected capacity change from 0 to 164 [ 100.647212][ T9186] syz.8.2390: attempt to access beyond end of device [ 100.647212][ T9186] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 100.680027][ T9190] loop9: detected capacity change from 0 to 512 [ 100.696559][ T9186] syz.8.2390: attempt to access beyond end of device [ 100.696559][ T9186] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 100.726042][ T9190] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2392: bg 0: block 248: padding at end of block bitmap is not set [ 100.773951][ T9190] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.2392: Failed to acquire dquot type 1 [ 100.792671][ T9190] EXT4-fs (loop9): 1 truncate cleaned up [ 100.798894][ T9190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.820202][ T9190] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.832921][ T9190] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.035030][ T9220] macvlan2: entered promiscuous mode [ 101.040475][ T9220] bridge0: entered promiscuous mode [ 101.066381][ T9220] bridge0: port 3(macvlan2) entered blocking state [ 101.073969][ T9220] bridge0: port 3(macvlan2) entered disabled state [ 101.086991][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2408'. [ 101.096384][ T9220] macvlan2: entered allmulticast mode [ 101.102366][ T9220] bridge0: entered allmulticast mode [ 101.108847][ T9220] macvlan2: left allmulticast mode [ 101.114096][ T9220] bridge0: left allmulticast mode [ 101.125655][ T9220] bridge0: left promiscuous mode [ 101.221731][ T9242] loop6: detected capacity change from 0 to 512 [ 101.222654][ T9246] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2416'. [ 101.243180][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 101.265780][ T9242] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2413: bg 0: block 248: padding at end of block bitmap is not set [ 101.290518][ T9242] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2413: Failed to acquire dquot type 1 [ 101.325356][ T9242] EXT4-fs (loop6): 1 truncate cleaned up [ 101.331587][ T9242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.350852][ T9242] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.370468][ T9242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.422624][ T9263] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 101.654992][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 101.767317][ T7856] IPVS: starting estimator thread 0... [ 101.825862][ T9306] can0: slcan on ttyS3. [ 101.860746][ T9297] IPVS: using max 2832 ests per chain, 141600 per kthread [ 101.870871][ T9306] can0 (unregistered): slcan off ttyS3. [ 101.876709][ T9306] Falling back ldisc for ttyS3. [ 101.945115][ T9318] loop8: detected capacity change from 0 to 512 [ 101.956457][ T9318] EXT4-fs: Ignoring removed nobh option [ 101.967690][ T9318] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 101.976633][ T9318] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2449: attempt to clear invalid blocks 2 len 1 [ 101.989939][ T9318] EXT4-fs (loop8): Remounting filesystem read-only [ 101.996981][ T9318] EXT4-fs (loop8): 1 truncate cleaned up [ 102.003323][ T9318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.040890][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.171146][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2461'. [ 102.232252][ T9349] serio: Serial port ptm1 [ 102.464856][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2469'. [ 102.478109][ T9362] bridge0: port 3(macvlan2) entered blocking state [ 102.484886][ T9362] bridge0: port 3(macvlan2) entered disabled state [ 102.493710][ T9362] macvlan2: entered allmulticast mode [ 102.499263][ T9362] bridge0: entered allmulticast mode [ 102.502991][ T9363] loop9: detected capacity change from 0 to 164 [ 102.511868][ T9362] macvlan2: left allmulticast mode [ 102.513205][ T9363] syz.9.2468: attempt to access beyond end of device [ 102.513205][ T9363] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.517031][ T9362] bridge0: left allmulticast mode [ 102.531784][ T9363] syz.9.2468: attempt to access beyond end of device [ 102.531784][ T9363] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.555999][ T9365] macvlan2: entered promiscuous mode [ 102.561397][ T9365] macvlan2: entered allmulticast mode [ 102.566997][ T9365] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 102.712976][ T9387] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2479'. [ 102.838128][ T9412] ªªªªªª: renamed from vlan0 [ 102.849308][ T9417] hsr_slave_0: left promiscuous mode [ 102.855209][ T9417] hsr_slave_1: left promiscuous mode [ 102.966006][ T9428] serio: Serial port ptm0 [ 102.975006][ T9430] bond0: entered promiscuous mode [ 102.980301][ T9430] bond_slave_0: entered promiscuous mode [ 102.986853][ T9430] bond_slave_1: entered promiscuous mode [ 103.001592][ T9430] batadv0: entered promiscuous mode [ 103.007373][ T9430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.017443][ T9430] Cannot create hsr debugfs directory [ 103.023197][ T9430] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 103.033379][ T9430] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 103.044337][ T9430] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 103.053654][ T9430] bond0: left promiscuous mode [ 103.058727][ T9430] bond_slave_0: left promiscuous mode [ 103.064469][ T9430] bond_slave_1: left promiscuous mode [ 103.072444][ T9430] batadv0: left promiscuous mode [ 103.080031][ T9437] 0ªX¹¦À: renamed from caif0 [ 103.091351][ T9437] 0ªX¹¦À: entered allmulticast mode [ 103.096631][ T9437] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 103.176730][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 103.176748][ T29] audit: type=1326 audit(1747483112.372:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.209561][ T29] audit: type=1400 audit(1747483112.372:1905): avc: denied { write } for pid=9444 comm="syz.1.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.229131][ T29] audit: type=1326 audit(1747483112.382:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.252744][ T29] audit: type=1326 audit(1747483112.382:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.276473][ T29] audit: type=1326 audit(1747483112.382:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.300016][ T29] audit: type=1326 audit(1747483112.382:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.323579][ T29] audit: type=1326 audit(1747483112.382:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.347061][ T29] audit: type=1326 audit(1747483112.382:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.370470][ T29] audit: type=1326 audit(1747483112.382:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.394203][ T29] audit: type=1326 audit(1747483112.382:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.9.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265e8e969 code=0x7ffc0000 [ 103.523164][ T9466] loop8: detected capacity change from 0 to 512 [ 103.572397][ T9476] macvlan2: entered promiscuous mode [ 103.577746][ T9476] macvlan2: entered allmulticast mode [ 103.585060][ T9466] EXT4-fs (loop8): 1 orphan inode deleted [ 103.592104][ T9476] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 103.600075][ T9466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.613410][ T6326] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 103.625839][ T9466] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.661251][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.675963][ T8303] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:40: Failed to release dquot type 1 [ 103.676245][ T9486] IPVS: Error connecting to the multicast addr [ 103.800388][ T9497] SELinux: failed to load policy [ 103.943412][ T9526] ipip0: entered promiscuous mode [ 104.013150][ T9531] vhci_hcd: invalid port number 96 [ 104.018324][ T9531] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 104.643435][ T7856] kernel write not supported for file /223/loginuid (pid: 7856 comm: kworker/0:6) [ 105.074371][ T9629] serio: Serial port ptm0 [ 105.227446][ T9643] serio: Serial port ptm1 [ 105.245154][ T9645] lo speed is unknown, defaulting to 1000 [ 105.406205][ T9663] loop9: detected capacity change from 0 to 512 [ 105.430652][ T9663] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 105.471444][ T9663] EXT4-fs (loop9): 1 truncate cleaned up [ 105.477688][ T9663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.496006][ T9663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.591722][ T9682] __nla_validate_parse: 6 callbacks suppressed [ 105.591792][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2590'. [ 105.607106][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2590'. [ 105.611939][ T9684] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.640766][ T9684] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 105.744626][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2593'. [ 105.767741][ T9695] bridge0: port 4(macvlan2) entered blocking state [ 105.774510][ T9695] bridge0: port 4(macvlan2) entered disabled state [ 105.801751][ T9695] macvlan2: entered allmulticast mode [ 105.807227][ T9695] bridge0: entered allmulticast mode [ 105.822516][ T9695] macvlan2: left allmulticast mode [ 105.827736][ T9695] bridge0: left allmulticast mode [ 105.844133][ T9701] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 105.925837][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.933566][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.941034][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.949111][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.956617][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.964156][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.971680][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.979164][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.986649][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 105.994207][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.001703][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.009257][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.016945][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.024505][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.032030][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.039432][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.046880][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.054345][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.061814][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.069254][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.076884][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.084318][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.091846][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.099261][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.106709][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.114148][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.121589][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 106.161862][ T36] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.216326][ T7856] kernel write not supported for file /278/attr/exec (pid: 7856 comm: kworker/0:6) [ 106.482203][ T9758] netlink: 542 bytes leftover after parsing attributes in process `syz.8.2622'. [ 107.063704][ T9810] vhci_hcd: invalid port number 96 [ 107.068901][ T9810] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 107.104056][ T9812] loop8: detected capacity change from 0 to 1024 [ 107.127680][ T9812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.183173][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.290897][ T9822] Falling back ldisc for ttyS3. [ 107.408614][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2662'. [ 107.415154][ T9851] loop9: detected capacity change from 0 to 1024 [ 107.437927][ T9846] IPVS: Error joining to the multicast group [ 107.445469][ T9851] EXT4-fs: Ignoring removed nobh option [ 107.451269][ T9851] EXT4-fs: Ignoring removed bh option [ 107.479796][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 107.503618][ T9858] bridge0: port 3(macvlan2) entered blocking state [ 107.510250][ T9858] bridge0: port 3(macvlan2) entered disabled state [ 107.520299][ T9858] macvlan2: entered allmulticast mode [ 107.525761][ T9858] bridge0: entered allmulticast mode [ 107.533911][ T9851] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.537617][ T9858] macvlan2: left allmulticast mode [ 107.551620][ T9858] bridge0: left allmulticast mode [ 107.566724][ T9851] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.2666: Allocating blocks 385-513 which overlap fs metadata [ 107.582368][ T9848] EXT4-fs (loop9): pa ffff8881071fd7e0: logic 16, phys. 129, len 24 [ 107.590619][ T9848] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 107.620926][ T9872] openvswitch: netlink: Message has 6 unknown bytes. [ 107.630905][ T7971] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.682201][ T9871] vhci_hcd: invalid port number 96 [ 107.687365][ T9871] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 107.729223][ T9892] netlink: 'syz.3.2676': attribute type 298 has an invalid length. [ 107.885356][ T9924] ALSA: seq fatal error: cannot create timer (-19) [ 108.079146][ T9963] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 108.189750][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 108.189768][ T29] audit: type=1400 audit(1747483117.382:2154): avc: denied { create } for pid=9912 comm="syz.1.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.250757][ T29] audit: type=1400 audit(1747483117.422:2155): avc: denied { setopt } for pid=9912 comm="syz.1.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.259085][ T9993] loop9: detected capacity change from 0 to 512 [ 108.289003][ T9993] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 108.300816][ T9993] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2700: invalid indirect mapped block 2683928664 (level 1) [ 108.315600][ T9993] EXT4-fs (loop9): Remounting filesystem read-only [ 108.322362][ T9993] EXT4-fs (loop9): 1 truncate cleaned up [ 108.328686][ T9993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.356053][ T7971] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.384954][ T29] audit: type=1400 audit(1747483117.582:2156): avc: denied { create } for pid=10002 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.423912][ T29] audit: type=1400 audit(1747483117.602:2157): avc: denied { ioctl } for pid=10002 comm="syz.9.2702" path="socket:[28095]" dev="sockfs" ino=28095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.448848][ T29] audit: type=1400 audit(1747483117.602:2158): avc: denied { bind } for pid=10002 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.473826][ T29] audit: type=1400 audit(1747483117.672:2159): avc: denied { read } for pid=10002 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.506517][ T29] audit: type=1400 audit(1747483117.702:2160): avc: denied { setopt } for pid=10002 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.539925][ T29] audit: type=1400 audit(1747483117.722:2161): avc: denied { write } for pid=10002 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.572003][ T29] audit: type=1400 audit(1747483117.772:2162): avc: denied { connect } for pid=10025 comm="syz.9.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.650637][T10039] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 108.695190][T10044] netlink: 'syz.9.2708': attribute type 4 has an invalid length. [ 108.713534][T10039] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2707'. [ 108.769753][ T29] audit: type=1400 audit(1747483117.962:2163): avc: denied { create } for pid=10053 comm="syz.1.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 109.138449][T10126] loop9: detected capacity change from 0 to 512 [ 109.148454][T10126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.155658][T10126] ext4: Unknown parameter 'nouser_xattr' [ 109.300989][T10138] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2731'. [ 109.312402][T10135] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2731'. [ 109.334931][T10140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10140 comm=syz.6.2734 [ 109.429286][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'. [ 109.496129][T10147] lo speed is unknown, defaulting to 1000 [ 109.597196][T10147] chnl_net:caif_netlink_parms(): no params data found [ 109.661551][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.668669][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.677049][T10147] bridge_slave_0: entered allmulticast mode [ 109.686350][T10185] xt_hashlimit: max too large, truncated to 1048576 [ 109.694014][T10147] bridge_slave_0: entered promiscuous mode [ 109.701914][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.709075][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.716418][T10147] bridge_slave_1: entered allmulticast mode [ 109.723225][T10147] bridge_slave_1: entered promiscuous mode [ 109.759650][T10147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.779451][ T8340] batadv1: left promiscuous mode [ 109.784715][ T8340] bridge0: port 3(batadv1) entered disabled state [ 109.819615][ T8340] bridge_slave_1: left allmulticast mode [ 109.825488][ T8340] bridge_slave_1: left promiscuous mode [ 109.831353][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.845813][ T8340] bridge_slave_0: left allmulticast mode [ 109.851657][ T8340] bridge_slave_0: left promiscuous mode [ 109.857349][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.943727][ T8340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.962738][ T8340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.992409][ T8340] bond0 (unregistering): Released all slaves [ 110.013396][T10147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.050122][T10147] team0: Port device team_slave_0 added [ 110.072657][T10147] team0: Port device team_slave_1 added [ 110.093781][ T8340] hsr_slave_0: left promiscuous mode [ 110.107066][ T8340] hsr_slave_1: left promiscuous mode [ 110.118764][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.128468][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.164227][ T8340] team0 (unregistering): Port device team_slave_1 removed [ 110.175320][ T8340] team0 (unregistering): Port device team_slave_0 removed [ 110.256096][T10147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.263120][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.289174][T10147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.302624][T10147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.309640][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.335761][T10147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.392767][T10147] hsr_slave_0: entered promiscuous mode [ 110.399080][T10147] hsr_slave_1: entered promiscuous mode [ 110.409356][T10147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.429588][T10147] Cannot create hsr debugfs directory [ 110.607672][T10266] vlan2: entered allmulticast mode [ 110.614088][T10266] bridge0: port 3(vlan2) entered blocking state [ 110.620495][T10266] bridge0: port 3(vlan2) entered disabled state [ 110.628467][T10266] vlan2: entered promiscuous mode [ 110.634839][T10266] bridge0: mtu less than device minimum [ 110.789597][T10147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.800477][T10147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.810540][T10147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.822705][T10147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.858876][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2776'. [ 110.861740][T10147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.885843][T10147] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.908787][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.915932][ T8303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.926526][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.933714][ T8303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.013493][T10147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.070202][T10147] veth0_vlan: entered promiscuous mode [ 111.077790][T10147] veth1_vlan: entered promiscuous mode [ 111.092659][T10147] veth0_macvtap: entered promiscuous mode [ 111.099768][T10147] veth1_macvtap: entered promiscuous mode [ 111.110334][T10147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.121587][T10147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.130580][T10147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.139385][T10147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.148169][T10147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.156937][T10147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.168736][T10313] loop8: detected capacity change from 0 to 164 [ 111.182934][T10313] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 111.233476][T10318] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2783'. [ 111.707884][T10345] sd 0:0:1:0: device reset [ 112.206885][T10392] xt_CT: No such helper "pptp" [ 112.366022][T10395] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.461668][T10407] loop0: detected capacity change from 0 to 128 [ 112.469970][T10407] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.482347][T10407] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.512118][T10147] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.586370][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'. [ 112.628859][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2830'. [ 112.653667][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2830'. [ 112.886211][T10442] loop6: detected capacity change from 0 to 512 [ 112.911971][T10442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.925496][T10442] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.974767][T10442] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.2838: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 112.998936][T10442] EXT4-fs (loop6): Remounting filesystem read-only [ 113.238864][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 113.238881][ T29] audit: type=1400 audit(1747483122.432:2583): avc: denied { read } for pid=10472 comm="syz.8.2850" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.298805][ T29] audit: type=1400 audit(1747483122.462:2584): avc: denied { open } for pid=10472 comm="syz.8.2850" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.322400][ T29] audit: type=1400 audit(1747483122.472:2585): avc: denied { ioctl } for pid=10472 comm="syz.8.2850" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.417135][ T29] audit: type=1400 audit(1747483122.612:2586): avc: denied { read } for pid=10476 comm="syz.1.2852" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.487027][ T29] audit: type=1400 audit(1747483122.652:2587): avc: denied { open } for pid=10476 comm="syz.1.2852" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.510750][ T29] audit: type=1400 audit(1747483122.652:2588): avc: denied { ioctl } for pid=10476 comm="syz.1.2852" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.679466][ T29] audit: type=1326 audit(1747483122.872:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 113.703843][ T29] audit: type=1326 audit(1747483122.872:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 113.727711][ T29] audit: type=1326 audit(1747483122.872:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 113.751232][ T29] audit: type=1326 audit(1747483122.872:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 113.776793][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.922874][T10503] wireguard0: entered promiscuous mode [ 113.928637][T10503] wireguard0: entered allmulticast mode [ 114.052706][T10513] serio: Serial port ptm0 [ 114.192498][T10526] loop6: detected capacity change from 0 to 2048 [ 114.199238][T10526] ext4: Unknown parameter 'noacl' [ 114.220509][T10529] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2874'. [ 114.629851][T10557] ALSA: seq fatal error: cannot create timer (-22) [ 114.767152][T10574] lo speed is unknown, defaulting to 1000 [ 114.834471][T10577] vhci_hcd: invalid port number 96 [ 114.839639][T10577] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 114.865197][T10582] SELinux: failed to load policy [ 114.927976][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 115.214421][T10624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2915'. [ 115.360562][T10637] pim6reg1: entered promiscuous mode [ 115.366014][T10637] pim6reg1: entered allmulticast mode [ 115.507967][T10656] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.546337][T10652] SELinux: failed to load policy [ 115.604056][T10663] netlink: 'syz.0.2934': attribute type 4 has an invalid length. [ 115.640765][T10663] netlink: 'syz.0.2934': attribute type 4 has an invalid length. [ 115.855743][T10678] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 116.311338][T10721] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2958'. [ 116.358973][T10729] loop0: detected capacity change from 0 to 256 [ 116.412153][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 116.422323][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2974'. [ 116.457749][T10739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.547454][T10750] loop8: detected capacity change from 0 to 512 [ 116.555166][T10752] loop6: detected capacity change from 0 to 128 [ 116.561026][T10750] EXT4-fs: Ignoring removed oldalloc option [ 116.561992][T10752] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.567398][T10750] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.581615][T10752] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.587130][T10739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.631922][T10750] EXT4-fs (loop8): orphan cleanup on readonly fs [ 116.638867][T10750] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.2971: Failed to acquire dquot type 1 [ 116.652250][T10750] EXT4-fs (loop8): 1 truncate cleaned up [ 116.666086][T10750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.704912][T10739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.763913][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.836853][T10739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.921219][T10739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.939812][T10739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.951111][T10775] loop8: detected capacity change from 0 to 128 [ 116.961397][T10739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.982012][T10739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.031115][T10775] syz.8.2982: attempt to access beyond end of device [ 117.031115][T10775] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 117.117922][T10787] loop8: detected capacity change from 0 to 1024 [ 117.126210][T10787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.134912][T10787] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.156129][T10792] netlink: 'syz.0.2989': attribute type 11 has an invalid length. [ 117.171514][T10792] netlink: 448 bytes leftover after parsing attributes in process `syz.0.2989'. [ 117.192215][T10787] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 117.214541][T10787] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.2988: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.250077][T10787] EXT4-fs (loop8): Remounting filesystem read-only [ 117.259132][T10787] EXT4-fs (loop8): 1 orphan inode deleted [ 117.266460][T10787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.292557][T10787] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.313639][T10807] vhci_hcd: invalid port number 96 [ 117.318817][T10807] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 117.380971][T10815] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 117.394526][T10816] loop8: detected capacity change from 0 to 164 [ 117.416021][T10816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.446510][T10816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.455894][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 117.459812][T10822] loop6: detected capacity change from 0 to 512 [ 117.473087][T10822] EXT4-fs: Ignoring removed bh option [ 117.478535][T10822] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.514923][T10822] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 117.551833][T10822] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 117.564211][T10822] EXT4-fs (loop6): orphan cleanup on readonly fs [ 117.588186][T10822] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3003: Failed to acquire dquot type 1 [ 117.627285][T10822] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3003: Invalid block bitmap block 0 in block_group 0 [ 117.650976][T10822] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3003: Invalid block bitmap block 0 in block_group 0 [ 117.701927][T10822] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3003: Invalid block bitmap block 0 in block_group 0 [ 117.718976][T10822] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3003: Failed to acquire dquot type 1 [ 117.751835][T10822] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3003: Failed to acquire dquot type 1 [ 117.772069][T10822] EXT4-fs (loop6): 1 orphan inode deleted [ 117.781866][T10822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.836707][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.840340][T10840] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 118.028040][T10861] xt_hashlimit: max too large, truncated to 1048576 [ 118.046256][T10858] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3018'. [ 118.107310][T10867] loop0: detected capacity change from 0 to 512 [ 118.124470][T10867] EXT4-fs: Ignoring removed bh option [ 118.129962][T10867] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.140666][T10867] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.152131][T10867] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.160294][T10867] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.167233][T10867] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3023: Failed to acquire dquot type 1 [ 118.178864][T10867] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3023: Invalid block bitmap block 0 in block_group 0 [ 118.192717][T10867] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3023: Invalid block bitmap block 0 in block_group 0 [ 118.207229][T10867] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3023: Invalid block bitmap block 0 in block_group 0 [ 118.221689][T10867] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3023: Failed to acquire dquot type 1 [ 118.258902][T10867] __quota_error: 131 callbacks suppressed [ 118.258918][T10867] Quota error (device loop0): write_blk: dquota write failed [ 118.272128][T10867] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 118.282070][T10867] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3023: Failed to acquire dquot type 1 [ 118.294096][T10867] EXT4-fs (loop0): 1 orphan inode deleted [ 118.301609][T10867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.303658][ T29] audit: type=1400 audit(2000000002.880:2710): avc: denied { mount } for pid=10876 comm="syz.1.3026" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.344643][ T29] audit: type=1326 audit(2000000002.910:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.368366][ T29] audit: type=1326 audit(2000000002.910:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.391932][ T29] audit: type=1326 audit(2000000002.910:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.415498][ T29] audit: type=1326 audit(2000000002.910:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.439297][ T29] audit: type=1326 audit(2000000002.910:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.462851][ T29] audit: type=1326 audit(2000000002.910:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.486582][ T29] audit: type=1326 audit(2000000002.910:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09519de969 code=0x7ffc0000 [ 118.510335][T10147] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.528634][T10884] lo speed is unknown, defaulting to 1000 [ 118.549751][T10888] loop0: detected capacity change from 0 to 512 [ 118.578072][T10888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.600860][T10888] ext4: Unknown parameter 'nouser_xattr' [ 118.652685][T10895] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 118.736481][T10905] block device autoloading is deprecated and will be removed. [ 118.874765][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3047'. [ 118.948021][T10927] netlink: 2040 bytes leftover after parsing attributes in process `syz.8.3048'. [ 118.957365][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3048'. [ 119.275080][T10947] netlink: 'syz.6.3058': attribute type 21 has an invalid length. [ 120.115464][T11009] loop8: detected capacity change from 0 to 2048 [ 120.122434][T11009] EXT4-fs: Ignoring removed i_version option [ 120.140995][T11001] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 120.149240][T11001] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 120.161260][T11009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.189539][T11009] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.231896][T11009] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3085: bg 0: block 345: padding at end of block bitmap is not set [ 120.292116][T11009] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 120.302088][T11032] lo speed is unknown, defaulting to 1000 [ 120.304691][T11009] EXT4-fs (loop8): This should not happen!! Data will be lost [ 120.304691][T11009] [ 120.369798][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.554076][T11058] wireguard0: entered promiscuous mode [ 120.559709][T11058] wireguard0: entered allmulticast mode [ 120.650062][T11044] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3093'. [ 120.946183][T11111] loop0: detected capacity change from 0 to 2048 [ 120.961342][T11111] EXT4-fs: Ignoring removed i_version option [ 121.018456][T11111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.049063][T11111] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.081473][T11111] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3103: bg 0: block 345: padding at end of block bitmap is not set [ 121.105570][T11111] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 121.118118][T11111] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.118118][T11111] [ 121.171331][T11140] program syz.6.3107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.214207][T10147] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.272456][T11155] loop0: detected capacity change from 0 to 512 [ 121.306364][T11155] EXT4-fs (loop0): 1 orphan inode deleted [ 121.312720][T11155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.326024][ T6318] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:22: Failed to release dquot type 1 [ 121.346181][T11155] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.414890][T10147] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.437186][T11171] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 121.476970][T11182] __nla_validate_parse: 2 callbacks suppressed [ 121.476989][T11182] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3116'. [ 121.629522][T11204] loop6: detected capacity change from 0 to 2048 [ 121.637685][T11204] EXT4-fs: Ignoring removed i_version option [ 121.663051][T11204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.804393][T11204] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.831640][T11204] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3120: bg 0: block 345: padding at end of block bitmap is not set [ 121.850664][T11204] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 121.863314][T11204] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.863314][T11204] [ 121.903334][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.933635][T11231] Cannot find add_set index 0 as target [ 121.963083][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 121.970620][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 121.978102][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 121.990817][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 121.998421][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.006009][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.013554][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.021035][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.029017][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.036484][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.043930][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.051395][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.058921][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.066403][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.074045][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.089499][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.090173][T11236] xt_CT: No such helper "pptp" [ 122.097010][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.097036][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.097056][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.097076][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.097098][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.139198][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.146759][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.154239][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.161681][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.169099][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.176706][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.184246][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.191696][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.199260][ T7873] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 122.214719][ T7873] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.463073][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3139'. [ 122.650639][T11291] 9pnet: p9_errstr2errno: server reported unknown error &ëŸjâáë=‹ùÆ«&B [ 122.878397][T11301] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.006309][T11319] wireguard0: entered promiscuous mode [ 123.012170][T11319] wireguard0: entered allmulticast mode [ 123.107947][T11330] loop8: detected capacity change from 0 to 2048 [ 123.128720][T11330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.243666][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.546803][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 123.559507][T11339] loop8: detected capacity change from 0 to 1024 [ 123.565670][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3170'. [ 123.575246][T11339] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.628579][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3180'. [ 123.653373][T11343] vlan0: entered promiscuous mode [ 123.658546][T11343] hsr0: entered promiscuous mode [ 123.664384][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 123.664400][ T29] audit: type=1400 audit(2000000008.240:2807): avc: denied { connect } for pid=11350 comm="syz.8.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.665135][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3175'. [ 123.677738][ T29] audit: type=1400 audit(2000000008.240:2808): avc: denied { ioctl } for pid=11350 comm="syz.8.3175" path="socket:[32310]" dev="sockfs" ino=32310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.797313][T11361] loop1: detected capacity change from 0 to 2048 [ 123.799044][T11359] loop6: detected capacity change from 0 to 1024 [ 123.804044][T11361] ext4: Unknown parameter 'noacl' [ 123.838055][T11363] loop8: detected capacity change from 0 to 1024 [ 123.855138][T11359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.861202][T11363] EXT4-fs: Ignoring removed nobh option [ 123.892939][T11359] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 123.893186][ T29] audit: type=1400 audit(2000000008.470:2809): avc: denied { setattr } for pid=11358 comm="syz.6.3190" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.909353][T11363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.969404][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.006980][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.009595][T11375] loop1: detected capacity change from 0 to 512 [ 124.041184][T11377] loop0: detected capacity change from 0 to 2048 [ 124.052685][T11377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.066363][T11375] EXT4-fs (loop1): 1 orphan inode deleted [ 124.080816][T11379] wireguard0: entered promiscuous mode [ 124.086366][T11379] wireguard0: entered allmulticast mode [ 124.092263][ T6316] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.092702][T11375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.102344][ T6316] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:21: Failed to release dquot type 1 [ 124.203041][T11375] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.349638][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.385732][T10147] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.439219][T11396] 9pnet: p9_errstr2errno: server reported unknown error &ëŸjâáë=‹ùÆ«&B [ 124.493421][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3192'. [ 124.520739][T11393] vlan3: entered promiscuous mode [ 124.525889][T11393] hsr0: entered promiscuous mode [ 124.691189][T11419] loop8: detected capacity change from 0 to 512 [ 124.710811][ T29] audit: type=1400 audit(2000000009.280:2810): avc: denied { write } for pid=11416 comm="syz.6.3202" faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.752513][T11419] EXT4-fs (loop8): 1 orphan inode deleted [ 124.770782][ T8303] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.780601][ T8303] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:40: Failed to release dquot type 1 [ 124.797776][ T29] audit: type=1326 audit(2000000009.370:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 124.821391][ T29] audit: type=1326 audit(2000000009.370:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 124.845527][ T29] audit: type=1326 audit(2000000009.370:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 124.891192][T11419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.918911][ T29] audit: type=1326 audit(2000000009.460:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f21439ce969 code=0x7ffc0000 [ 124.942667][T11419] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.964433][T11419] EXT4-fs (loop8): shut down requested (1) [ 124.980186][ T7516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.013873][T11433] 9pnet: p9_errstr2errno: server reported unknown error &ëŸjâáë=‹ùÆ«&B [ 125.065040][T11440] wireguard0: entered promiscuous mode [ 125.070612][T11440] wireguard0: entered allmulticast mode [ 125.307516][T11459] loop8: detected capacity change from 0 to 1024 [ 125.333013][T11459] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 125.344445][T11459] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 125.382683][T11459] JBD2: no valid journal superblock found [ 125.388525][T11459] EXT4-fs (loop8): Could not load journal inode [ 125.412652][T11459] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 125.467136][T11470] wireguard0: entered promiscuous mode [ 125.472845][T11470] wireguard0: entered allmulticast mode [ 125.608433][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3230'. [ 125.675170][T11504] netlink: 2040 bytes leftover after parsing attributes in process `syz.6.3229'. [ 125.684435][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3229'. [ 125.812473][T11521] loop8: detected capacity change from 0 to 128 [ 125.820628][T11521] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.833492][T11521] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.884859][ T7516] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.006641][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.015059][T11554] bridge0: mtu less than device minimum [ 126.020925][T11554] bridge_slave_1: left allmulticast mode [ 126.026835][T11554] bridge_slave_1: left promiscuous mode [ 126.032885][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.040895][T11554] bridge0: mtu less than device minimum [ 126.047094][T11554] bond0: (slave bond_slave_0): Releasing backup interface [ 126.055124][T11554] bond_slave_0: left allmulticast mode [ 126.062255][T11554] bond0: (slave bond_slave_1): Releasing backup interface [ 126.070899][T11554] bond_slave_1: left allmulticast mode [ 126.077843][T11554] team0: Port device team_slave_0 removed [ 126.084536][T11554] team0: Port device team_slave_1 removed [ 126.090739][T11554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.098616][T11554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.106625][T11554] vlan2: left promiscuous mode [ 126.111562][T11554] bridge_slave_0: left promiscuous mode [ 126.117456][T11554] bridge0: port 3(vlan2) entered disabled state [ 126.428080][T11631] loop1: detected capacity change from 0 to 512 [ 126.446613][T11631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.459196][T11630] wireguard0: entered promiscuous mode [ 126.459662][T11631] ext4 filesystem being mounted at /642/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.464841][T11630] wireguard0: entered allmulticast mode [ 126.522746][T11643] sd 0:0:1:0: device reset [ 126.529181][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.546936][ T3313] bond0: (slave syz_tun): Releasing backup interface [ 126.565189][ T3313] syz_tun (unregistering): left allmulticast mode [ 126.581094][T11649] gretap1: entered allmulticast mode [ 126.589386][T11649] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 126.706787][T11666] __nla_validate_parse: 1 callbacks suppressed [ 126.706804][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3258'. [ 126.809623][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3262'. [ 126.824468][T11667] lo speed is unknown, defaulting to 1000 [ 126.862268][T11686] loop8: detected capacity change from 0 to 128 [ 126.881690][T11686] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 126.889564][T11686] FAT-fs (loop8): Filesystem has been set read-only [ 126.910884][T11686] syz.8.3265: attempt to access beyond end of device [ 126.910884][T11686] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 126.925069][T11686] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 126.933039][T11686] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 126.950195][T11686] syz.8.3265: attempt to access beyond end of device [ 126.950195][T11686] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.963801][T11686] syz.8.3265: attempt to access beyond end of device [ 126.963801][T11686] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.979971][T11667] chnl_net:caif_netlink_parms(): no params data found [ 127.041621][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.048944][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.057783][T11667] bridge_slave_0: entered allmulticast mode [ 127.064540][T11667] bridge_slave_0: entered promiscuous mode [ 127.071472][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.078568][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.086115][T11667] bridge_slave_1: entered allmulticast mode [ 127.093107][T11667] bridge_slave_1: entered promiscuous mode [ 127.111000][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.121459][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.139677][T11667] team0: Port device team_slave_0 added [ 127.146557][T11667] team0: Port device team_slave_1 added [ 127.166782][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.173842][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.199863][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.221639][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.228627][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.254936][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.289778][T11667] hsr_slave_0: entered promiscuous mode [ 127.295972][T11667] hsr_slave_1: entered promiscuous mode [ 127.303339][T11667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.311849][T11667] Cannot create hsr debugfs directory [ 127.323749][T11716] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3277'. [ 127.631594][T11667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.651444][T11667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.660654][T11667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.679979][T11667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.728822][T11667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.749021][T11667] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.772178][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.779459][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.805218][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.812321][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.821293][T11745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3288'. [ 127.847169][T11667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.857793][T11667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.930952][T11667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.056086][T11776] loop0: detected capacity change from 0 to 128 [ 128.079056][T11667] veth0_vlan: entered promiscuous mode [ 128.087263][T11667] veth1_vlan: entered promiscuous mode [ 128.103917][T11667] veth0_macvtap: entered promiscuous mode [ 128.111812][T11667] veth1_macvtap: entered promiscuous mode [ 128.140146][T11667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.154566][T11789] smc: net device bond0 applied user defined pnetid SYZ0 [ 128.155475][T11667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.171656][T11789] smc: net device bond0 erased user defined pnetid SYZ0 [ 128.179783][T11667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.188881][T11667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.197869][T11667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.206819][T11667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.306588][T11803] loop0: detected capacity change from 0 to 512 [ 128.314454][T11803] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.347211][T11813] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28928, delta: 1 [ 128.356005][T11813] ref_ctr increment failed for inode: 0x586 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888118a3c780 [ 128.369193][T11803] EXT4-fs (loop0): 1 truncate cleaned up [ 128.376376][T11803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.412759][T10147] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.560616][T11836] wireguard0: entered promiscuous mode [ 128.566405][T11836] wireguard0: entered allmulticast mode [ 128.676714][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3325'. [ 128.827231][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 128.827249][ T29] audit: type=1400 audit(2000000013.400:2856): avc: denied { name_bind } for pid=11860 comm="syz.0.3331" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 129.038417][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 129.167555][T11875] wireguard0: entered promiscuous mode [ 129.173208][T11875] wireguard0: entered allmulticast mode [ 129.443919][T11880] Set syz1 is full, maxelem 65536 reached [ 129.722954][ T29] audit: type=1400 audit(2000000014.300:2857): avc: denied { setopt } for pid=11903 comm="syz.5.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.797810][T11907] batadv1: entered allmulticast mode [ 129.815096][T11907] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.823633][T11907] bridge0: port 3(batadv1) entered blocking state [ 129.830118][T11907] bridge0: port 3(batadv1) entered disabled state [ 129.837515][T11907] batadv1: entered promiscuous mode [ 129.843011][T11907] bridge0: port 3(batadv1) entered blocking state [ 129.849590][T11907] bridge0: port 3(batadv1) entered forwarding state [ 129.902010][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3351'. [ 130.007349][T11917] gretap1: entered allmulticast mode [ 130.028914][T11917] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 130.140493][T11931] loop6: detected capacity change from 0 to 512 [ 130.209924][T11931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.223031][T11931] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.252737][ T29] audit: type=1400 audit(2000000014.830:2858): avc: denied { ioctl } for pid=11930 comm="syz.6.3361" path="/287/file1/file2" dev="loop6" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.281979][ T8045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.301065][ T6326] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 130.310336][ T6326] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 130.349296][ T29] audit: type=1400 audit(2000000014.920:2859): avc: denied { create } for pid=11957 comm="syz.3.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.385448][ T29] audit: type=1400 audit(2000000014.940:2860): avc: denied { write } for pid=11957 comm="syz.3.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.520990][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 130.729460][T11979] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3382'. [ 130.802493][T11985] IPVS: stopping backup sync thread 11986 ... [ 130.836707][T11988] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 130.846832][ T29] audit: type=1400 audit(2000000015.430:2861): avc: denied { relabelto } for pid=11987 comm="syz.0.3395" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_aliases_t:s0" [ 130.874509][ T29] audit: type=1400 audit(2000000015.430:2862): avc: denied { associate } for pid=11987 comm="syz.0.3395" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_aliases_t:s0" [ 130.945456][ C1] ================================================================== [ 130.953723][ C1] BUG: KCSAN: data-race in do_select / pollwake [ 130.959957][ C1] [ 130.962267][ C1] read to 0xffffc9000741fa00 of 4 bytes by task 11977 on cpu 0: [ 130.969881][ C1] do_select+0xe41/0xf40 [ 130.974192][ C1] core_sys_select+0x3b2/0x600 [ 130.978951][ C1] __se_sys_pselect6+0x216/0x280 [ 130.983868][ C1] __x64_sys_pselect6+0x78/0x90 [ 130.988699][ C1] x64_sys_call+0x1caa/0x2fb0 [ 130.993353][ C1] do_syscall_64+0xd0/0x1a0 [ 130.997835][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.003722][ C1] [ 131.006023][ C1] write to 0xffffc9000741fa00 of 4 bytes by interrupt on cpu 1: [ 131.013626][ C1] pollwake+0xb6/0x100 [ 131.017676][ C1] __wake_up+0x63/0xb0 [ 131.021741][ C1] bpf_ringbuf_notify+0x22/0x30 [ 131.026593][ C1] irq_work_run+0xdf/0x2d0 [ 131.030997][ C1] __sysvec_irq_work+0x22/0x170 [ 131.035830][ C1] sysvec_irq_work+0x66/0x80 [ 131.040398][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 131.045311][ C1] native_apic_msr_write+0x3d/0x60 [ 131.050401][ C1] x2apic_send_IPI_self+0x10/0x20 [ 131.055413][ C1] arch_irq_work_raise+0x46/0x50 [ 131.060330][ C1] __irq_work_queue_local+0x80/0x1b0 [ 131.065593][ C1] irq_work_queue+0x70/0x100 [ 131.070163][ C1] bpf_ringbuf_discard+0xd3/0xf0 [ 131.075104][ C1] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 131.080539][ C1] bpf_trace_run3+0x10f/0x1d0 [ 131.085194][ C1] kmem_cache_free+0x246/0x2f0 [ 131.089940][ C1] skb_release_data+0x53b/0x620 [ 131.094766][ C1] __kfree_skb+0x44/0x150 [ 131.099069][ C1] consume_skb+0x49/0x150 [ 131.103381][ C1] netlink_broadcast_filtered+0xb25/0xc00 [ 131.109080][ C1] nlmsg_notify+0xcf/0x170 [ 131.113497][ C1] rtnl_notify+0x76/0x90 [ 131.117750][ C1] inet6_ifmcaddr_notify+0xd4/0x150 [ 131.122939][ C1] __ipv6_dev_mc_inc+0x550/0x760 [ 131.127855][ C1] ipv6_dev_mc_inc+0x1f/0x30 [ 131.132470][ C1] ipv6_add_dev+0x98d/0xb30 [ 131.136964][ C1] addrconf_notify+0x4c8/0x930 [ 131.141703][ C1] raw_notifier_call_chain+0x6c/0x1b0 [ 131.147050][ C1] call_netdevice_notifiers_info+0xae/0x100 [ 131.152920][ C1] register_netdevice+0xd48/0xf10 [ 131.157920][ C1] wg_newlink+0x2b9/0x470 [ 131.162227][ C1] rtnl_newlink_create+0x1bf/0x630 [ 131.167324][ C1] rtnl_newlink+0xf29/0x12d0 [ 131.171893][ C1] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 131.176807][ C1] netlink_rcv_skb+0x123/0x220 [ 131.181549][ C1] rtnetlink_rcv+0x1c/0x30 [ 131.185939][ C1] netlink_unicast+0x5a1/0x670 [ 131.190680][ C1] netlink_sendmsg+0x58b/0x6b0 [ 131.195415][ C1] __sock_sendmsg+0x145/0x180 [ 131.200070][ C1] ____sys_sendmsg+0x31e/0x4e0 [ 131.204807][ C1] ___sys_sendmsg+0x17b/0x1d0 [ 131.209467][ C1] __x64_sys_sendmsg+0xd4/0x160 [ 131.214300][ C1] x64_sys_call+0x2999/0x2fb0 [ 131.218953][ C1] do_syscall_64+0xd0/0x1a0 [ 131.223434][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.229304][ C1] [ 131.231603][ C1] value changed: 0x00000001 -> 0x00000000 [ 131.237294][ C1] [ 131.239595][ C1] Reported by Kernel Concurrency Sanitizer on: [ 131.245717][ C1] CPU: 1 UID: 0 PID: 11992 Comm: syz.3.3387 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 131.258276][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 131.268309][ C1] ================================================================== [ 131.279830][T11992] wireguard0: entered promiscuous mode [ 131.285463][T11992] wireguard0: entered allmulticast mode