last executing test programs: 6m38.342715653s ago: executing program 32 (id=1007): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c0001e67e1942e0283fef2507000000", @ANYRES32=r3, @ANYBLOB="0204ee090a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24040040) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 5m54.264419913s ago: executing program 33 (id=2380): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5m53.952550112s ago: executing program 34 (id=2385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r2}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) 5m23.958168868s ago: executing program 35 (id=2843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 5m11.750533037s ago: executing program 36 (id=3466): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes}, {@nr_blocks}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x5, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5m5.570164259s ago: executing program 37 (id=3652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0xab0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x81, @empty, 0x80000000}}}, 0x90) 4m41.526740324s ago: executing program 38 (id=4329): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x80024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r0}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8}, 0x18) 2m51.842663366s ago: executing program 0 (id=7668): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x800, 0x3, 0x2b2}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 2m50.806322882s ago: executing program 0 (id=7687): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2m50.748886257s ago: executing program 0 (id=7688): pipe(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff2000000000000000000d0001007564703a"], 0x54}}, 0x0) 2m50.580032612s ago: executing program 0 (id=7695): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m50.478138512s ago: executing program 0 (id=7700): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2m50.349363624s ago: executing program 0 (id=7709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) r2 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r2, 0x0, 0x9, 0x2000406) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) getdents64(r1, 0xfffffffffffffffe, 0x41) 2m50.314667887s ago: executing program 39 (id=7709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) r2 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r2, 0x0, 0x9, 0x2000406) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) getdents64(r1, 0xfffffffffffffffe, 0x41) 2m30.864658147s ago: executing program 8 (id=8221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2m30.861115528s ago: executing program 8 (id=8223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='dax_writeback_one\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 2m30.814549352s ago: executing program 8 (id=8224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@lazytime}]}, 0x3, 0xbc0, &(0x7f0000000bc0)="$eJzs3M1rXOUaAPDnnEy+czvp5XLvbREMSFUUp2lTKnTVuhYVdOGyMZmUkOmHSQQTukjrXl2IuChI/wTBvd24ElzUhda/oIhFii5suxg585FOO5lpmkxyTPz94M153/Oemed5cpo574E5DeAfayL7kUYcioizSUSxsT+NiIFabyhirX7c/buXZ7KWRLX69m9JJBFx7+7lmeZ7JY3taGMwFBE3X0vi3x+1x11aWV2YrlTKi43x0eXzl44uray+Mn9++lz5XPnCialXT0ydnJraQk1/VqvVjfbfvvTeF8/88MbzV69/PPnm5we+S+J0jDXmWuvolYmYWP+dtCpExHSvg+Wkr1FPa51JIceEAADoKm1Zw/03itEXDxdvxfj2x1yTAwAAAHqi2hdRbTX86BAAAADYDxI3/AAAALDPNb8HcO/u5Zlmy/cbCbvrzpmIGK/X33y+uT5TiLXadij6I2Lk9yRaH2tN6i/btoks0tffl7MWO/QccjdrVyLi/xud/6RW/3jtKe72+tOImOxB/InHxnup/tM9iP909Q/2ICIARNw4U7+QtV//0vX1T2xw/StscO3airyv/8313/229d/D+vs6rP/e2mSMww9eutlprnX99+4nP89m8bPttop6CneuRBwubFR/sl5/0qH+s5uMMTpz+1qnuaz+rN5m2+36q9cjjtRWc+31NyXd/n+io3PzlfJk/ecG779ysnv81vOftSx+815gN2TnfyS2dv4vbTLG+P9+PdRp7sn1p78MJO/UegONPR9OLy8vHosYSF5v33+8ey7NY5rvkdX/4nPd//43qj/7TFhr/B6yfz1XGttsfPWxmKNHjn+19fp3Vlb/7BbP/6ebjPHlN9fe7zSXd/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7A1pRIxFkpbW+2laKkWMRsR/YiStXFxafnnu4gcXZrO5iPHoT+fmK+XJiCjWx0k2PlbrPxwff2w8FREHI+Kz4nBtXJq5WJnNu3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWjUbEWCRpKSLSiPijmKalUt5ZAQAAAD03nncCAAAAwI5z/w8AAAD7X9v9f+GR0dBu5gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC+dPDZG7eSiFg7NVxrmYHGXH+umQE7Ld3cYSM7nQew+/ryTgDITaGlX61WqzmmAuwy9/hA0mmiWN8MdXzlYIf9Y9vOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/nxcO3biVRMTaqeFayww05vpzzQzYaWneCQC56es2mTxxB7CHFfJOAMiNe3ygvrJ/UK1rnx/q+MrBbUcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYO8Yq7UkLUVEWuunaakU8a+IGI/+ZG6+Up6MiAMR8VOxfzAbH8s7aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHpuaWV1YbpSKS/q6Oj0sDMcuxZruPHH3OGYwc5TXTo5fzABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCLpZXVhelKpby4lHcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN6WVlYXpiuV8uIOdvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PwVAAD//2naC9Q=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 2m30.661178076s ago: executing program 8 (id=8227): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780000335a63bdbcef549ba197fce47ddfdd00000000000000000000a3c5c00c000000a000", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x6]}) 2m30.19539198s ago: executing program 8 (id=8249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2m29.64812173s ago: executing program 8 (id=8251): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x1b96, 0x106a, 0x22, 0x0, 0x0) 2m29.64790489s ago: executing program 40 (id=8251): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x1b96, 0x106a, 0x22, 0x0, 0x0) 2m11.579484892s ago: executing program 7 (id=8771): chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 2m11.436710455s ago: executing program 7 (id=8773): unshare(0x6c000200) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0xb, 0xff, 0xff, 0x0, @mcast2, @local, 0x8008, 0x7800, 0x4, 0x5}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdc00, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2m11.022377844s ago: executing program 7 (id=8779): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa, 0x201}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x43, 0x100}}}}}}}}}, 0x4a) 2m10.865144508s ago: executing program 7 (id=8785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 2m10.436435218s ago: executing program 7 (id=8792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m10.362504385s ago: executing program 7 (id=8796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m55.318609417s ago: executing program 41 (id=8796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m32.534181176s ago: executing program 5 (id=9756): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 1m32.485745961s ago: executing program 5 (id=9757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m32.451535614s ago: executing program 5 (id=9759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002fc0)={&(0x7f0000000200)='rxrpc_local\x00', r2, 0x0, 0x37}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r1, 0x0, 0x80000001}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) 1m32.38879681s ago: executing program 5 (id=9761): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='tracefs\x00', 0x5, 0x0) 1m32.327736745s ago: executing program 5 (id=9763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 1m30.75677567s ago: executing program 5 (id=9807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b"}, 0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x28407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x104404, 0x0, 0x0, 0x0, 0x0, 0x5fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m30.739793332s ago: executing program 42 (id=9807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b"}, 0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x28407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x104404, 0x0, 0x0, 0x0, 0x0, 0x5fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 49.16340754s ago: executing program 6 (id=10935): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) fallocate(0xffffffffffffffff, 0x20, 0x7fff, 0x8000000000008003) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 49.094170627s ago: executing program 6 (id=10939): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 48.989549256s ago: executing program 6 (id=10941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 48.989098376s ago: executing program 6 (id=10942): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 48.932596191s ago: executing program 6 (id=10943): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') unshare(0x28000600) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 48.718056351s ago: executing program 6 (id=10953): socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x100000000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) 48.677880415s ago: executing program 43 (id=10953): socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x100000000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) 1.480096543s ago: executing program 2 (id=12160): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000360155380000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) 1.413043489s ago: executing program 3 (id=12163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 1.353801835s ago: executing program 3 (id=12165): gettid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 1.323270228s ago: executing program 3 (id=12167): io_uring_setup(0xda6, &(0x7f0000000540)={0x0, 0x73bc, 0x2, 0x2, 0x274}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.284255041s ago: executing program 3 (id=12169): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 882.918338ms ago: executing program 3 (id=12173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 834.903993ms ago: executing program 2 (id=12176): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 765.289589ms ago: executing program 1 (id=12180): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x9a, &(0x7f0000000880)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000980)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@oldalloc}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 707.341665ms ago: executing program 1 (id=12181): openat$pfkey(0xffffffffffffff9c, 0x0, 0x4240, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e2c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0x3}, {0x0}, &(0x7f0000000140)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x4008015}, 0x0) 671.000378ms ago: executing program 1 (id=12182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 627.835782ms ago: executing program 1 (id=12183): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, &(0x7f0000000000)=""/133, 0x85, 0x120, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 586.264046ms ago: executing program 2 (id=12184): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x82) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@acl}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@bsdgroups}]}, 0x2, 0x45c, &(0x7f0000000b40)="$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") readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 560.137289ms ago: executing program 2 (id=12186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) 493.045475ms ago: executing program 4 (id=12187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 492.526745ms ago: executing program 4 (id=12188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 416.726492ms ago: executing program 2 (id=12189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 413.680492ms ago: executing program 1 (id=12190): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 394.072364ms ago: executing program 4 (id=12191): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 390.135674ms ago: executing program 1 (id=12192): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) 360.022747ms ago: executing program 4 (id=12194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x50) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 348.351448ms ago: executing program 9 (id=12195): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 337.220859ms ago: executing program 4 (id=12196): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xd4e}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 320.242851ms ago: executing program 9 (id=12197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8000081"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 154.460226ms ago: executing program 9 (id=12198): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x600) 106.63722ms ago: executing program 9 (id=12199): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x82) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@acl}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@bsdgroups}]}, 0x2, 0x45c, &(0x7f0000000b40)="$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") readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 106.02612ms ago: executing program 9 (id=12200): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 41.547286ms ago: executing program 4 (id=12201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 4.58763ms ago: executing program 9 (id=12202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket(0x2a, 0x3, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x1) inotify_add_watch(r3, &(0x7f00000003c0)='./file0\x00', 0x84000100) close_range(r2, 0xffffffffffffffff, 0x0) 506.92µs ago: executing program 3 (id=12203): keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=12204): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) kernel console output (not intermixed with test programs): 3041][ T3658] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.682348][T27111] netlink: 'syz.6.9402': attribute type 30 has an invalid length. [ 362.725662][ T3658] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.746879][T27144] bridge0: port 2(macvtap2) entered blocking state [ 362.753665][T27144] bridge0: port 2(macvtap2) entered disabled state [ 362.774063][T27144] macvtap2: entered allmulticast mode [ 362.779628][T27144] bridge0: entered allmulticast mode [ 362.816517][T27144] macvtap2: left allmulticast mode [ 362.821780][T27144] bridge0: left allmulticast mode [ 362.831721][ T3658] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.840987][ T3658] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.044076][T27176] netlink: 'syz.5.9429': attribute type 4 has an invalid length. [ 363.078169][T27176] netlink: 'syz.5.9429': attribute type 4 has an invalid length. [ 363.246658][T27194] netlink: 'syz.5.9438': attribute type 3 has an invalid length. [ 363.260712][T27194] netlink: 'syz.5.9438': attribute type 3 has an invalid length. [ 363.314926][T27203] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9442'. [ 363.350339][T27203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9442'. [ 363.692218][T27230] netlink: 'syz.1.9452': attribute type 3 has an invalid length. [ 363.743408][T27230] netlink: 'syz.1.9452': attribute type 3 has an invalid length. [ 363.950742][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9465'. [ 364.018446][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9465'. [ 364.307611][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 364.337616][ T3474] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.595083][T27333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9498'. [ 365.182203][T27369] loop5: detected capacity change from 0 to 1024 [ 365.189802][T27369] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 365.200827][T27369] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 365.238798][T27369] JBD2: no valid journal superblock found [ 365.244776][T27369] EXT4-fs (loop5): Could not load journal inode [ 365.269736][T27369] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 365.872457][T27393] syzkaller0: entered allmulticast mode [ 365.890386][T27393] syzkaller0: entered promiscuous mode [ 365.904944][T27393] syzkaller0 (unregistering): left promiscuous mode [ 365.906873][T27397] loop3: detected capacity change from 0 to 2048 [ 365.911711][T27393] syzkaller0 (unregistering): left allmulticast mode [ 366.016963][T27397] Alternate GPT is invalid, using primary GPT. [ 366.017114][T27397] loop3: p2 p3 p7 [ 366.041628][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 366.041664][ T29] audit: type=1400 audit(366.020:19676): avc: denied { create } for pid=27396 comm="syz.3.9525" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon=DC [ 366.041774][ T29] audit: type=1400 audit(366.020:19677): avc: denied { associate } for pid=27396 comm="syz.3.9525" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 366.106285][ T29] audit: type=1400 audit(366.090:19678): avc: denied { unlink } for pid=22992 comm="syz-executor" name="file2" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon=DC [ 366.328430][T27429] netlink: 'syz.2.9538': attribute type 30 has an invalid length. [ 366.418638][T27435] syzkaller0: entered allmulticast mode [ 366.418806][T27435] syzkaller0: entered promiscuous mode [ 366.420917][T27435] syzkaller0 (unregistering): left promiscuous mode [ 366.421005][T27435] syzkaller0 (unregistering): left allmulticast mode [ 366.458385][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9539'. [ 366.458417][T27436] netlink: 'syz.6.9539': attribute type 11 has an invalid length. [ 366.458432][T27436] netlink: 'syz.6.9539': attribute type 13 has an invalid length. [ 366.512265][T27436] vxlan0: entered promiscuous mode [ 366.518994][ T3658] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.519058][ T3658] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.519119][ T3658] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.519212][ T3658] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.656530][ T29] audit: type=1326 audit(366.640:19679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.658541][ T29] audit: type=1326 audit(366.640:19680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.658676][ T29] audit: type=1326 audit(366.640:19681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.658847][ T29] audit: type=1326 audit(366.640:19682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.658940][ T29] audit: type=1326 audit(366.640:19683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.659031][ T29] audit: type=1326 audit(366.640:19684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.659273][ T29] audit: type=1326 audit(366.640:19685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27448 comm="syz.1.9546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 366.813437][ T9649] IPVS: starting estimator thread 0... [ 366.906762][T27461] IPVS: using max 2496 ests per chain, 124800 per kthread [ 367.158966][T27485] netlink: 'syz.5.9560': attribute type 30 has an invalid length. [ 367.337864][T27497] wg2: left promiscuous mode [ 367.342615][T27497] wg2: left allmulticast mode [ 367.406166][T27497] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 367.466238][T27497] vxlan0: left promiscuous mode [ 367.473022][ T3405] lo speed is unknown, defaulting to 1000 [ 367.478863][ T3405] syz0: Port: 1 Link DOWN [ 367.483500][ T3660] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.492123][ T3660] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.524504][ T3660] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.532928][ T3660] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.567645][T27509] bridge: RTM_NEWNEIGH with invalid ether address [ 367.574259][ T3660] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.582657][ T3660] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.622425][ T3660] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.631013][ T3660] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.705957][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9578'. [ 367.857335][T27547] xt_hashlimit: max too large, truncated to 1048576 [ 369.319592][T27645] lo speed is unknown, defaulting to 1000 [ 369.476205][T27654] loop6: detected capacity change from 0 to 128 [ 369.757405][T27672] validate_nla: 1 callbacks suppressed [ 369.757513][T27672] netlink: 'syz.5.9643': attribute type 27 has an invalid length. [ 369.792182][T27672] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.799678][T27672] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.848330][T27672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.858862][T27672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.911023][T27673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.919588][T27673] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.929227][T27673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.945162][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.956061][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.965488][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.978957][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.009233][T27680] IPv6: Can't replace route, no match found [ 370.078942][T27688] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9650'. [ 370.088023][T27688] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9650'. [ 370.097066][T27688] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9650'. [ 370.107853][T27688] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9650'. [ 370.516787][T27728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27728 comm=syz.6.9669 [ 370.628294][T27742] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9675'. [ 370.661372][T27744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9676'. [ 370.670507][T27744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9676'. [ 370.680628][T27744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9676'. [ 370.839069][T27763] loop6: detected capacity change from 0 to 8192 [ 370.853601][T27763] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.047529][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 371.047546][ T29] audit: type=1326 audit(371.030:19817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.078230][ T29] audit: type=1326 audit(371.060:19818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.101395][ T29] audit: type=1326 audit(371.060:19819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.124547][ T29] audit: type=1326 audit(371.060:19820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.148683][ T29] audit: type=1326 audit(371.060:19821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.172424][ T29] audit: type=1326 audit(371.060:19822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.195816][ T29] audit: type=1326 audit(371.060:19823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.219383][ T29] audit: type=1326 audit(371.060:19824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.242836][ T29] audit: type=1326 audit(371.070:19825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.266279][ T29] audit: type=1326 audit(371.070:19826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27773 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 371.388533][T27780] loop3: detected capacity change from 0 to 1024 [ 371.395636][T27780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.425692][T27780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 371.442133][T27780] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.484746][T27780] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 371.497127][T27780] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.497127][T27780] [ 371.540801][T27801] wg2: entered promiscuous mode [ 371.545828][T27801] wg2: entered allmulticast mode [ 371.575701][T27803] pimreg: entered allmulticast mode [ 371.583722][T27780] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.597890][T27803] pimreg: left allmulticast mode [ 371.616863][T27780] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.631982][T27780] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.653432][T27780] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.667178][T27780] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.680757][T27779] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.694992][T27779] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.713664][T27780] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.736119][T27779] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.9692: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.860246][T27824] __nla_validate_parse: 3 callbacks suppressed [ 371.860313][T27824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9710'. [ 372.273774][T22992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.388956][T27871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9728'. [ 372.484609][T27884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.491883][T27884] IPv6: NLM_F_CREATE should be set when creating new route [ 372.499459][T27884] IPv6: NLM_F_CREATE should be set when creating new route [ 372.507038][T27884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.208573][T27940] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9764'. [ 373.467451][T27958] hub 2-0:1.0: USB hub found [ 373.479165][T27958] hub 2-0:1.0: 8 ports detected [ 373.496916][T27956] lo speed is unknown, defaulting to 1000 [ 373.577933][T27965] sit0: Caught tx_queue_len zero misconfig [ 374.563975][T28026] lo speed is unknown, defaulting to 1000 [ 374.619348][T28033] loop3: detected capacity change from 0 to 128 [ 374.656865][T28038] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9798'. [ 374.681786][T28040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9799'. [ 374.712407][T28041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9795'. [ 374.772297][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9801'. [ 374.782471][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9801'. [ 375.129883][T28065] lo speed is unknown, defaulting to 1000 [ 375.187148][T28065] chnl_net:caif_netlink_parms(): no params data found [ 375.235086][T28065] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.242234][T28065] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.249775][T28065] bridge_slave_0: entered allmulticast mode [ 375.256691][T28065] bridge_slave_0: entered promiscuous mode [ 375.264065][T28065] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.271325][T28065] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.278705][T28065] bridge_slave_1: entered allmulticast mode [ 375.285238][T28065] bridge_slave_1: entered promiscuous mode [ 375.305267][T28065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.318551][T28065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.340686][T28065] team0: Port device team_slave_0 added [ 375.350005][T28065] team0: Port device team_slave_1 added [ 375.360498][ T3673] bridge_slave_1: left allmulticast mode [ 375.366451][ T3673] bridge_slave_1: left promiscuous mode [ 375.372185][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.380422][ T3673] bridge_slave_0: left allmulticast mode [ 375.386226][ T3673] bridge_slave_0: left promiscuous mode [ 375.392053][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.446285][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.455966][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.465419][ T3673] bond0 (unregistering): Released all slaves [ 375.480487][T28065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.487678][T28065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.513902][T28065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.527675][T28065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.534707][T28065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.560993][T28065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.614836][ T3673] hsr_slave_0: left promiscuous mode [ 375.623240][ T3673] hsr_slave_1: left promiscuous mode [ 375.641030][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.658606][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.750787][ T3673] team0 (unregistering): Port device team_slave_1 removed [ 375.762270][ T3673] team0 (unregistering): Port device team_slave_0 removed [ 375.808968][T28065] hsr_slave_0: entered promiscuous mode [ 375.816068][T28065] hsr_slave_1: entered promiscuous mode [ 375.825964][T28065] debugfs: 'hsr0' already exists in 'hsr' [ 375.831734][T28065] Cannot create hsr debugfs directory [ 375.843667][T28105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.868925][T28110] wg2: entered promiscuous mode [ 375.874076][T28110] wg2: entered allmulticast mode [ 376.011132][T28131] ip6tnl3: entered promiscuous mode [ 376.098019][T28129] lo speed is unknown, defaulting to 1000 [ 376.114866][T28138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9833'. [ 376.382910][T28065] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 376.417228][T28065] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 376.438200][T28065] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 376.452897][T28065] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 376.523102][T28065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.540564][T28170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9844'. [ 376.562268][T28065] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.579670][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.586804][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.604117][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.611222][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.725347][T28065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.924249][T28065] veth0_vlan: entered promiscuous mode [ 376.934593][T28065] veth1_vlan: entered promiscuous mode [ 376.953396][T28065] veth0_macvtap: entered promiscuous mode [ 376.963019][T28065] veth1_macvtap: entered promiscuous mode [ 376.974179][T28065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.985960][T28065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.006691][ T3645] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.026603][ T3645] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.053275][ T3645] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.070768][ T3645] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.144968][T28225] tipc: Started in network mode [ 377.149935][T28225] tipc: Node identity ac14140f, cluster identity 4711 [ 377.167456][T28225] tipc: New replicast peer: 255.255.255.255 [ 377.173829][T28225] tipc: Enabled bearer , priority 10 [ 377.215041][T28225] __nla_validate_parse: 1 callbacks suppressed [ 377.215073][T28225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9858'. [ 377.230959][T28225] tipc: Disabling bearer [ 377.245499][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 377.245582][ T29] audit: type=1326 audit(377.230:20098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.329542][ T29] audit: type=1326 audit(377.260:20099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.352786][ T29] audit: type=1326 audit(377.260:20100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.357649][T28233] loop6: detected capacity change from 0 to 512 [ 377.376694][ T29] audit: type=1326 audit(377.260:20101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.406111][ T29] audit: type=1326 audit(377.260:20102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.429358][ T29] audit: type=1326 audit(377.260:20103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.452542][ T29] audit: type=1326 audit(377.260:20104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.475848][ T29] audit: type=1326 audit(377.260:20105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.499236][ T29] audit: type=1326 audit(377.260:20106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.522475][ T29] audit: type=1326 audit(377.260:20107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.9.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 377.612876][T28233] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.9861: error while reading EA inode 32 err=-116 [ 377.625815][T28233] EXT4-fs (loop6): Remounting filesystem read-only [ 377.632505][T28233] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 377.662392][T28233] EXT4-fs (loop6): 1 orphan inode deleted [ 377.673862][T28233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.738434][T24347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.778306][T28262] IPVS: Error connecting to the multicast addr [ 377.795614][T28265] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9872'. [ 378.140822][T28310] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 378.153349][T28310] SELinux: failed to load policy [ 378.195394][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9897'. [ 378.381905][T28319] lo speed is unknown, defaulting to 1000 [ 378.438270][T28342] vlan2: entered allmulticast mode [ 378.493274][T28325] lo speed is unknown, defaulting to 1000 [ 378.607354][T28353] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9914'. [ 378.776415][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9921'. [ 379.131561][T28411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9938'. [ 379.282631][T28431] netlink: 'syz.6.9947': attribute type 1 has an invalid length. [ 379.302935][T28433] loop3: detected capacity change from 0 to 512 [ 379.322680][T28433] EXT4-fs (loop3): bad geometry: block count 143 exceeds size of device (128 blocks) [ 379.332871][T28437] netlink: 182 bytes leftover after parsing attributes in process `syz.6.9948'. [ 379.400903][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9945'. [ 379.465952][T28448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9952'. [ 379.799671][T28471] IPVS: stopping master sync thread 25046 ... [ 380.454466][T28510] veth6: entered promiscuous mode [ 380.459618][T28510] veth6: entered allmulticast mode [ 380.506181][T28514] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9979'. [ 380.581208][T28523] wg2: entered promiscuous mode [ 380.586212][T28523] wg2: entered allmulticast mode [ 380.702854][T28533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28533 comm=syz.2.9988 [ 381.219601][T28594] syzkaller0: entered allmulticast mode [ 381.236101][T28594] syzkaller0 (unregistering): left allmulticast mode [ 381.501984][T28615] netlink: 'syz.3.10022': attribute type 6 has an invalid length. [ 381.525039][T28616] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 382.011469][T28636] vlan3: entered allmulticast mode [ 382.351150][T28662] lo speed is unknown, defaulting to 1000 [ 382.386867][T28667] loop6: detected capacity change from 0 to 512 [ 382.439714][T28672] __nla_validate_parse: 8 callbacks suppressed [ 382.439793][T28672] netlink: 204 bytes leftover after parsing attributes in process `syz.9.10044'. [ 382.456880][T28667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.483230][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 382.483259][ T29] audit: type=1400 audit(382.460:20238): avc: denied { relabelto } for pid=28666 comm="syz.6.10043" name="cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 382.524621][T24347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.610943][T28678] loop9: detected capacity change from 0 to 128 [ 382.647892][ T3557] Process accounting resumed [ 382.652693][ T3557] FAT-fs (loop9): error, corrupted file size (i_pos 548, 512) [ 382.660246][ T3557] FAT-fs (loop9): Filesystem has been set read-only [ 382.713762][ T29] audit: type=1400 audit(382.700:20239): avc: denied { setopt } for pid=28680 comm="syz.6.10058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.891114][T28683] lo speed is unknown, defaulting to 1000 [ 383.253283][ T29] audit: type=1400 audit(383.220:20240): avc: denied { read } for pid=28705 comm="syz.1.10056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.266872][T28699] lo speed is unknown, defaulting to 1000 [ 383.287789][T28708] netlink: 'syz.2.10057': attribute type 1 has an invalid length. [ 383.318482][T28708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.397556][T28711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.424673][T28711] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 383.451834][T28711] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 383.580700][T28728] lo speed is unknown, defaulting to 1000 [ 383.608627][ T29] audit: type=1326 audit(383.590:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.645410][ T29] audit: type=1326 audit(383.590:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.668631][ T29] audit: type=1326 audit(383.590:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.692081][ T29] audit: type=1326 audit(383.620:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.715722][ T29] audit: type=1326 audit(383.620:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.738992][ T29] audit: type=1326 audit(383.620:20246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.762567][ T29] audit: type=1326 audit(383.620:20248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28734 comm="syz.9.10067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 383.935790][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10075'. [ 383.945727][T28745] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10075'. [ 384.067153][T28764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10081'. [ 384.111770][T28769] netlink: 'syz.2.10085': attribute type 39 has an invalid length. [ 384.245986][T28772] lo speed is unknown, defaulting to 1000 [ 384.373575][T28788] netlink: 'syz.6.10094': attribute type 13 has an invalid length. [ 384.492393][T28796] lo speed is unknown, defaulting to 1000 [ 384.765060][T28812] SELinux: ebitmap: truncated map [ 384.809787][T28812] SELinux: failed to load policy [ 385.068843][T28838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10115'. [ 385.090105][T28838] loop3: detected capacity change from 0 to 512 [ 385.097562][T28838] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.107460][T28838] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 385.155051][T28844] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10117'. [ 385.493908][T28867] loop3: detected capacity change from 0 to 128 [ 385.510709][ T3557] Process accounting resumed [ 385.520708][ T3557] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 385.528293][ T3557] FAT-fs (loop3): Filesystem has been set read-only [ 385.569150][T28875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10126'. [ 385.639379][T28879] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 385.708532][T28886] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10134'. [ 385.718934][T28886] IPVS: Error connecting to the multicast addr [ 385.978447][T28907] netlink: 'syz.1.10145': attribute type 6 has an invalid length. [ 386.069043][T28913] loop6: detected capacity change from 0 to 128 [ 386.077678][T28915] netlink: 'syz.9.10150': attribute type 12 has an invalid length. [ 386.409542][T28942] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10162'. [ 386.520943][T28951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10166'. [ 386.851096][T28970] veth0: entered promiscuous mode [ 386.865887][T28970] veth0: left promiscuous mode [ 387.195511][T28980] ip6gre1: entered allmulticast mode [ 388.360135][T29037] netlink: 'syz.6.10202': attribute type 1 has an invalid length. [ 388.396831][T29037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.425569][T29043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.446703][T29043] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 388.472511][T29043] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 388.572005][T29055] C: renamed from team_slave_0 (while UP) [ 388.580758][T29055] netlink: 'syz.9.10207': attribute type 3 has an invalid length. [ 388.588784][T29055] __nla_validate_parse: 3 callbacks suppressed [ 388.588798][T29055] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10207'. [ 388.605762][T29055] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 389.209300][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10221'. [ 389.513864][T29109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10230'. [ 389.552598][T29109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10230'. [ 389.897006][T29119] lo speed is unknown, defaulting to 1000 [ 390.432989][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 390.433007][ T29] audit: type=1326 audit(390.410:20327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.462349][ T29] audit: type=1326 audit(390.410:20328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.485740][ T29] audit: type=1326 audit(390.410:20329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.509127][ T29] audit: type=1326 audit(390.410:20330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.532424][ T29] audit: type=1326 audit(390.410:20331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.555688][ T29] audit: type=1326 audit(390.410:20332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.579147][ T29] audit: type=1326 audit(390.410:20333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.602888][ T29] audit: type=1326 audit(390.410:20334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.626171][ T29] audit: type=1326 audit(390.410:20335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.649517][ T29] audit: type=1326 audit(390.410:20336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29143 comm="syz.1.10241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 390.695489][T29151] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10243'. [ 390.754878][T29153] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 391.012711][T29180] macsec1: entered promiscuous mode [ 391.018120][T29180] bridge0: entered promiscuous mode [ 391.055791][T29180] bridge0: port 2(macsec1) entered blocking state [ 391.062384][T29180] bridge0: port 2(macsec1) entered disabled state [ 391.088628][T29180] macsec1: entered allmulticast mode [ 391.094145][T29180] bridge0: entered allmulticast mode [ 391.100462][T29180] macsec1: left allmulticast mode [ 391.105752][T29180] bridge0: left allmulticast mode [ 391.111767][T29180] bridge0: left promiscuous mode [ 391.119005][T29182] smc: net device bond0 applied user defined pnetid SYZ0 [ 391.156627][T29190] loop6: detected capacity change from 0 to 512 [ 391.175044][T29190] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 391.196189][T29190] EXT4-fs (loop6): mount failed [ 391.366408][T29209] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 391.388239][T29209] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 391.511210][T29217] 9pnet: p9_errstr2errno: server reported unknown error [ 391.592422][T29240] netlink: 'syz.3.10279': attribute type 3 has an invalid length. [ 391.600433][T29240] netlink: 'syz.3.10279': attribute type 1 has an invalid length. [ 391.608446][T29240] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10279'. [ 391.665193][T29246] netlink: 'syz.3.10281': attribute type 29 has an invalid length. [ 391.737491][T29246] netlink: 'syz.3.10281': attribute type 29 has an invalid length. [ 391.763356][T29246] netlink: 500 bytes leftover after parsing attributes in process `syz.3.10281'. [ 391.839108][T29251] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.10284'. [ 391.856953][T29251] netlink: zone id is out of range [ 391.862434][T29251] netlink: zone id is out of range [ 391.882743][T29251] netlink: zone id is out of range [ 391.893890][T29251] netlink: zone id is out of range [ 391.909017][T29251] netlink: zone id is out of range [ 391.920205][T29251] netlink: zone id is out of range [ 391.931233][T29251] netlink: zone id is out of range [ 391.937066][T29251] netlink: zone id is out of range [ 391.960092][T29251] netlink: set zone limit has 8 unknown bytes [ 392.066798][T29261] loop6: detected capacity change from 0 to 128 [ 392.069483][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10289'. [ 392.098527][T29261] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.132585][T24347] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.299391][T29285] macsec1: entered promiscuous mode [ 392.304731][T29285] bridge0: entered promiscuous mode [ 392.311620][T29285] bridge0: port 4(macsec1) entered blocking state [ 392.318324][T29285] bridge0: port 4(macsec1) entered disabled state [ 392.325932][T29285] macsec1: entered allmulticast mode [ 392.331285][T29285] bridge0: entered allmulticast mode [ 392.339347][T29285] macsec1: left allmulticast mode [ 392.344547][T29285] bridge0: left allmulticast mode [ 392.351191][T29285] bridge0: left promiscuous mode [ 392.572604][T29296] lo speed is unknown, defaulting to 1000 [ 392.641918][T29299] lo speed is unknown, defaulting to 1000 [ 392.694189][T29296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10301'. [ 392.967313][T29323] wireguard0: entered promiscuous mode [ 392.972946][T29323] wireguard0: entered allmulticast mode [ 393.256064][T29348] netlink: 'syz.6.10323': attribute type 29 has an invalid length. [ 393.274733][T29332] lo speed is unknown, defaulting to 1000 [ 393.282736][T29348] netlink: 'syz.6.10323': attribute type 29 has an invalid length. [ 393.418316][T29360] sctp: [Deprecated]: syz.2.10328 (pid 29360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.418316][T29360] Use struct sctp_sack_info instead [ 393.460165][T29360] sctp: [Deprecated]: syz.2.10328 (pid 29360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.460165][T29360] Use struct sctp_sack_info instead [ 393.908078][T29382] delete_channel: no stack [ 394.409681][T29481] blktrace: Concurrent blktraces are not allowed on loop2 [ 394.444216][T29485] netlink: 'syz.2.10358': attribute type 29 has an invalid length. [ 394.454114][T29485] netlink: 'syz.2.10358': attribute type 29 has an invalid length. [ 394.472347][T29485] __nla_validate_parse: 7 callbacks suppressed [ 394.472367][T29485] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10358'. [ 394.519278][T29500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10361'. [ 394.530318][T29502] netlink: 'syz.2.10362': attribute type 1 has an invalid length. [ 394.559377][T29502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.594154][T29502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 394.603650][T29502] bond3: (slave batadv1): making interface the new active one [ 394.612502][T29502] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 395.382563][T29597] loop6: detected capacity change from 0 to 512 [ 395.397536][T29597] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.10380: error while reading EA inode 32 err=-116 [ 395.484328][T29597] EXT4-fs (loop6): Remounting filesystem read-only [ 395.491464][T29597] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 395.520072][T29597] EXT4-fs (loop6): 1 orphan inode deleted [ 395.526364][T29597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.597236][T24347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.717516][T29564] Set syz1 is full, maxelem 65536 reached [ 395.772248][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 395.772264][ T29] audit: type=1326 audit(395.750:20651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 395.854133][ T29] audit: type=1326 audit(395.750:20652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 395.877398][ T29] audit: type=1326 audit(395.750:20653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 395.901323][ T29] audit: type=1326 audit(395.750:20654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 395.923396][T29622] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10386'. [ 395.925058][ T29] audit: type=1326 audit(395.760:20655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 395.957679][ T29] audit: type=1326 audit(395.760:20656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 395.980998][ T29] audit: type=1326 audit(395.760:20657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 396.004412][ T29] audit: type=1326 audit(395.760:20658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 396.027796][ T29] audit: type=1326 audit(395.760:20659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 396.051147][ T29] audit: type=1326 audit(395.760:20660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.2.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 396.114209][T29631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.136222][T29636] loop6: detected capacity change from 0 to 128 [ 396.160941][T29638] netlink: 'syz.1.10393': attribute type 10 has an invalid length. [ 396.169304][T29638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10393'. [ 396.172704][T29631] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 396.290358][T29648] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10398'. [ 396.364403][T29652] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10400'. [ 396.406232][T29652] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10400'. [ 396.432812][T29660] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10403'. [ 396.468011][T29652] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10400'. [ 396.485336][T29664] wireguard1: entered promiscuous mode [ 396.490859][T29664] wireguard1: entered allmulticast mode [ 396.612749][T29678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.633366][T29678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.650185][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10410'. [ 397.195805][T29711] netlink: 'syz.2.10422': attribute type 3 has an invalid length. [ 397.671285][T29741] smc: net device hsr0 applied user defined pnetid SYZ2 [ 397.683855][T29741] smc: net device hsr0 erased user defined pnetid SYZ2 [ 398.072289][T29755] lo speed is unknown, defaulting to 1000 [ 398.282215][T29705] syz.9.10420 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 398.293117][T29705] CPU: 1 UID: 0 PID: 29705 Comm: syz.9.10420 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.293172][T29705] Tainted: [W]=WARN [ 398.293180][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.293192][T29705] Call Trace: [ 398.293242][T29705] [ 398.293251][T29705] __dump_stack+0x1d/0x30 [ 398.293276][T29705] dump_stack_lvl+0x95/0xd0 [ 398.293302][T29705] dump_stack+0x15/0x1b [ 398.293325][T29705] dump_header+0x81/0x240 [ 398.293351][T29705] oom_kill_process+0x295/0x350 [ 398.293433][T29705] out_of_memory+0x97b/0xb80 [ 398.293530][T29705] try_charge_memcg+0x610/0xa10 [ 398.293567][T29705] charge_memcg+0x51/0xc0 [ 398.293667][T29705] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 398.293812][T29705] __read_swap_cache_async+0x17b/0x2d0 [ 398.293966][T29705] swap_cluster_readahead+0x262/0x3c0 [ 398.293999][T29705] swapin_readahead+0xde/0x820 [ 398.294034][T29705] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 398.294140][T29705] ? __rcu_read_unlock+0x34/0x70 [ 398.294164][T29705] ? __rcu_read_unlock+0x4f/0x70 [ 398.294183][T29705] ? swap_cache_get_folio+0x277/0x280 [ 398.294219][T29705] do_swap_page+0x2b4/0x21e0 [ 398.294299][T29705] ? __pfx_default_wake_function+0x10/0x10 [ 398.294393][T29705] handle_mm_fault+0x9d8/0x2c60 [ 398.294440][T29705] do_user_addr_fault+0x630/0x1080 [ 398.294526][T29705] exc_page_fault+0x62/0xa0 [ 398.294558][T29705] asm_exc_page_fault+0x26/0x30 [ 398.294577][T29705] RIP: 0033:0x7fe7cd185a1e [ 398.294642][T29705] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 28 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 96 23 38 00 85 c0 0f 8e a3 fd ff ff bd 97 fe ff 49 39 c4 73 a0 48 8d 1d 71 05 38 00 83 3d 76 23 38 [ 398.294660][T29705] RSP: 002b:00007ffefa6e2860 EFLAGS: 00010202 [ 398.294679][T29705] RAX: 0000000000000001 RBX: 00007fe7cd507da0 RCX: 0000000000000000 [ 398.294774][T29705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555c82f808 [ 398.294787][T29705] RBP: 00007fe7cd507da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 398.294799][T29705] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000611e3 [ 398.294813][T29705] R13: 00007ffefa6e2950 R14: ffffffffffffffff R15: 00007ffefa6e2970 [ 398.294835][T29705] [ 398.509512][T29705] memory: usage 307200kB, limit 307200kB, failcnt 297 [ 398.516549][T29705] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 398.524617][T29705] kmem: usage 302840kB, limit 9007199254740988kB, failcnt 0 [ 398.531977][T29705] Memory cgroup stats for /syz9: [ 398.544629][T29705] cache 0 [ 398.552532][T29705] rss 4464640 [ 398.556037][T29705] shmem 0 [ 398.559036][T29705] mapped_file 0 [ 398.562514][T29705] dirty 0 [ 398.565515][T29705] writeback 0 [ 398.568806][T29705] workingset_refault_anon 1065 [ 398.573672][T29705] workingset_refault_file 0 [ 398.578351][T29705] swap 262144 [ 398.581729][T29705] swapcached 0 [ 398.585160][T29705] pgpgin 42841 [ 398.588644][T29705] pgpgout 41751 [ 398.592161][T29705] pgfault 52216 [ 398.595706][T29705] pgmajfault 153 [ 398.599258][T29705] inactive_anon 0 [ 398.602935][T29705] active_anon 0 [ 398.606481][T29705] inactive_file 4464640 [ 398.610675][T29705] active_file 0 [ 398.614319][T29705] unevictable 0 [ 398.617793][T29705] hierarchical_memory_limit 314572800 [ 398.623298][T29705] hierarchical_memsw_limit 9223372036854771712 [ 398.629461][T29705] total_cache 0 [ 398.633144][T29705] total_rss 4464640 [ 398.637054][T29705] total_shmem 0 [ 398.640541][T29705] total_mapped_file 0 [ 398.644553][T29705] total_dirty 0 [ 398.648277][T29705] total_writeback 0 [ 398.652186][T29705] total_workingset_refault_anon 1065 [ 398.657545][T29705] total_workingset_refault_file 0 [ 398.662617][T29705] total_swap 262144 [ 398.666566][T29705] total_swapcached 0 [ 398.670548][T29705] total_pgpgin 42841 [ 398.674548][T29705] total_pgpgout 41751 [ 398.678578][T29705] total_pgfault 52216 [ 398.682767][T29705] total_pgmajfault 153 [ 398.686992][T29705] total_inactive_anon 0 [ 398.691212][T29705] total_active_anon 0 [ 398.695620][T29705] total_inactive_file 4464640 [ 398.700432][T29705] total_active_file 0 [ 398.704543][T29705] total_unevictable 0 [ 398.708569][T29705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.10420,pid=29705,uid=0 [ 398.723726][T29705] Memory cgroup out of memory: Killed process 29705 (syz.9.10420) total-vm:96016kB, anon-rss:5488kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 398.998128][T29706] syz.9.10420 (29706) used greatest stack depth: 7256 bytes left [ 399.024487][T29784] bond0: Caught tx_queue_len zero misconfig [ 400.037859][T29847] __nla_validate_parse: 3 callbacks suppressed [ 400.037878][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10481'. [ 400.226221][T29865] batman_adv: batadv0: Adding interface: dummy0 [ 400.232531][T29865] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.258229][T29865] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 400.350731][T29869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10487'. [ 400.632765][T29884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10494'. [ 400.649014][T29884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10494'. [ 400.672825][T29884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10494'. [ 400.884219][T29900] lo speed is unknown, defaulting to 1000 [ 401.670039][T29900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10499'. [ 402.028855][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 402.028872][ T29] audit: type=1326 audit(402.010:20802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29945 comm="syz.2.10520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8627f749 code=0x0 [ 402.147111][T29958] netlink: 176 bytes leftover after parsing attributes in process `syz.9.10522'. [ 402.211229][ T29] audit: type=1326 audit(402.180:20803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.234721][ T29] audit: type=1326 audit(402.180:20804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.258082][ T29] audit: type=1326 audit(402.190:20805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.281316][ T29] audit: type=1326 audit(402.190:20806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.304719][ T29] audit: type=1326 audit(402.190:20807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.328294][ T29] audit: type=1326 audit(402.190:20808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.351581][ T29] audit: type=1326 audit(402.190:20809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.375082][ T29] audit: type=1326 audit(402.190:20810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 402.398676][ T29] audit: type=1326 audit(402.190:20811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29961 comm="syz.9.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 403.721034][T29992] Set syz1 is full, maxelem 65536 reached [ 403.763093][T30037] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10554'. [ 403.817509][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10558'. [ 403.860011][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10558'. [ 404.004143][T30060] bond0: Caught tx_queue_len zero misconfig [ 404.290893][T30102] veth0_vlan: left promiscuous mode [ 404.296548][T30102] veth0_vlan: entered allmulticast mode [ 404.315603][T30102] veth0_vlan: entered promiscuous mode [ 404.501659][T30118] loop6: detected capacity change from 0 to 512 [ 404.522342][T30118] journal_path: Non-blockdev passed as './bus' [ 404.529204][T30118] EXT4-fs: error: could not find journal device path [ 404.804582][T30147] netlink: 'syz.6.10603': attribute type 3 has an invalid length. [ 404.812445][T30147] netlink: 'syz.6.10603': attribute type 1 has an invalid length. [ 404.826940][T30150] bridge0: port 1(gretap0) entered blocking state [ 404.833466][T30150] bridge0: port 1(gretap0) entered disabled state [ 404.841034][T30150] bridge0: port 1(gretap0) entered blocking state [ 404.847626][T30150] bridge0: port 1(gretap0) entered forwarding state [ 405.519945][T30185] __nla_validate_parse: 5 callbacks suppressed [ 405.519966][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10617'. [ 405.539912][ T6469] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.549106][ T6469] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.558237][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10617'. [ 405.568038][ T6469] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.587836][ T6469] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.702712][T30196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10623'. [ 406.059493][T30228] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 406.150636][T30234] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10639'. [ 406.167484][T30234] hsr_slave_0: left promiscuous mode [ 406.183552][T30234] hsr_slave_1: left promiscuous mode [ 406.229924][T30248] smc: net device hsr0 applied user defined pnetid SYZ2 [ 406.259075][T30248] smc: net device hsr0 erased user defined pnetid SYZ2 [ 406.794392][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10662'. [ 406.838055][T30285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10662'. [ 406.854242][T30287] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10663'. [ 406.879669][T30285] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10662'. [ 407.025974][T30300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10668'. [ 407.043086][T30302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10670'. [ 407.053555][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 407.053571][ T29] audit: type=1400 audit(407.040:21036): avc: denied { read } for pid=3516 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=105733 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 407.060247][ T3676] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.102827][ T3676] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.137963][ T3676] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.162672][ T3676] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.171562][ T29] audit: type=1326 audit(407.150:21037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.194958][ T29] audit: type=1326 audit(407.150:21038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.218433][ T29] audit: type=1326 audit(407.150:21039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.241883][ T29] audit: type=1326 audit(407.150:21040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.265538][ T29] audit: type=1326 audit(407.150:21041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.289337][ T29] audit: type=1326 audit(407.150:21042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.327114][ T29] audit: type=1326 audit(407.300:21043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.3.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 407.350638][ T29] audit: type=1326 audit(407.300:21044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.9.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 407.373922][ T29] audit: type=1326 audit(407.300:21045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.9.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 407.400687][T30318] ªªªªªª: renamed from vlan0 (while UP) [ 407.445334][T30316] hsr_slave_0: left promiscuous mode [ 408.264534][T30372] netlink: 'syz.6.10700': attribute type 33 has an invalid length. [ 408.944839][T30399] netlink: 'syz.1.10712': attribute type 3 has an invalid length. [ 408.952931][T30399] netlink: 'syz.1.10712': attribute type 1 has an invalid length. [ 409.930740][T30451] sch_fq: defrate 0 ignored. [ 410.214122][T30472] loop6: detected capacity change from 0 to 128 [ 410.241714][T30472] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 410.266215][T30472] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.10742: bg 0: bad block bitmap checksum [ 410.307427][T30415] syz.1.10718 (30415) used greatest stack depth: 6312 bytes left [ 410.319111][T24347] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.335744][T30466] lo speed is unknown, defaulting to 1000 [ 410.395203][T30478] vlan2: entered allmulticast mode [ 410.400380][T30478] bridge_slave_0: entered allmulticast mode [ 410.709740][T30494] loop6: detected capacity change from 0 to 8192 [ 410.724763][T30499] netlink: 'syz.3.10753': attribute type 33 has an invalid length. [ 410.732718][T30499] __nla_validate_parse: 12 callbacks suppressed [ 410.732736][T30499] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10753'. [ 410.776042][T30503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10753'. [ 410.950328][T30513] netem: change failed [ 411.012894][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10761'. [ 411.071833][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10762'. [ 411.115679][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10762'. [ 411.548993][T30540] ªªªªªª: renamed from vlan0 [ 411.727170][T30550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10774'. [ 411.737268][T30554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10775'. [ 411.928685][T30559] netlink: 'syz.3.10778': attribute type 83 has an invalid length. [ 412.098607][T30574] lo: Caught tx_queue_len zero misconfig [ 412.104450][T30574] sch_fq: defrate 0 ignored. [ 412.252386][T30600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10794'. [ 412.601716][T30607] loop6: detected capacity change from 0 to 32768 [ 412.656475][T30607] loop6: p1 p2 p3 < p5 p6 > [ 412.661989][T30607] loop6: p2 size 16775168 extends beyond EOD, truncated [ 412.674392][T30607] loop6: p5 start 4294970168 is beyond EOD, truncated [ 412.781535][T30621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10803'. [ 412.791283][T30621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10803'. [ 412.831628][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 412.831647][ T29] audit: type=1326 audit(412.810:21121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 412.862151][ T29] audit: type=1326 audit(412.810:21122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 412.885807][ T29] audit: type=1326 audit(412.810:21123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 412.909208][ T29] audit: type=1326 audit(412.810:21124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 412.932656][ T29] audit: type=1326 audit(412.810:21125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 412.955898][ T29] audit: type=1326 audit(412.810:21126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 412.979070][ T29] audit: type=1326 audit(412.810:21127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 413.002440][ T29] audit: type=1326 audit(412.810:21128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 413.025955][ T29] audit: type=1326 audit(412.810:21129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 413.049303][ T29] audit: type=1326 audit(412.810:21130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30623 comm="syz.3.10805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 413.258347][T30641] lo speed is unknown, defaulting to 1000 [ 414.131041][T30701] xt_hashlimit: max too large, truncated to 1048576 [ 414.709942][T30736] tipc: Started in network mode [ 414.714931][T30736] tipc: Node identity 4, cluster identity 4711 [ 414.721118][T30736] tipc: Node number set to 4 [ 414.747963][T30738] bridge0: entered promiscuous mode [ 414.761166][T30738] bridge0: port 2(macvtap1) entered blocking state [ 414.768059][T30738] bridge0: port 2(macvtap1) entered disabled state [ 414.775597][T30738] macvtap1: entered allmulticast mode [ 414.781223][T30738] bridge0: entered allmulticast mode [ 414.795019][T30738] macvtap1: left allmulticast mode [ 414.800201][T30738] bridge0: left allmulticast mode [ 414.808810][T30738] bridge0: left promiscuous mode [ 414.865707][ T3557] Process accounting resumed [ 415.198863][T30789] xt_hashlimit: max too large, truncated to 1048576 [ 415.635367][T30835] loop6: detected capacity change from 0 to 1024 [ 415.650056][T30835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.652752][T30841] netlink: 'syz.9.10899': attribute type 1 has an invalid length. [ 415.682501][T30841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.694397][T30835] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 415.711931][T30841] vlan3: entered allmulticast mode [ 415.717272][T30841] bond2: entered allmulticast mode [ 415.733710][T24347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.938951][T30866] netlink: 'syz.1.10909': attribute type 10 has an invalid length. [ 415.990578][T30873] __nla_validate_parse: 4 callbacks suppressed [ 415.990640][T30873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10910'. [ 416.009528][T30873] xfrm1: entered promiscuous mode [ 416.014715][T30873] xfrm1: entered allmulticast mode [ 416.020408][T30873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10910'. [ 416.174080][T30879] lo speed is unknown, defaulting to 1000 [ 416.357522][T30912] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10929'. [ 416.815135][T30946] bridge: RTM_NEWNEIGH with invalid ether address [ 417.134441][T30974] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10957'. [ 417.327860][T30971] lo speed is unknown, defaulting to 1000 [ 417.481593][T31007] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10968'. [ 417.572599][T30971] chnl_net:caif_netlink_parms(): no params data found [ 417.633816][T30971] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.640925][T30971] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.650932][T30971] bridge_slave_0: entered allmulticast mode [ 417.661248][T30971] bridge_slave_0: entered promiscuous mode [ 417.706645][T30971] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.714041][T30971] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.735369][T30971] bridge_slave_1: entered allmulticast mode [ 417.755600][T30971] bridge_slave_1: entered promiscuous mode [ 417.805262][T30971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.829566][T30971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.911941][T30971] team0: Port device team_slave_0 added [ 417.932536][T30971] team0: Port device team_slave_1 added [ 417.988310][T30971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.995692][T30971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.022049][T30971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.034182][T30971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.041543][T30971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.067671][T30971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.102339][T30971] hsr_slave_0: entered promiscuous mode [ 418.122880][T30971] hsr_slave_1: entered promiscuous mode [ 418.134828][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 418.134843][ T29] audit: type=1326 audit(418.120:21242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.212462][ T29] audit: type=1326 audit(418.150:21243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.236564][ T29] audit: type=1326 audit(418.150:21244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.260064][ T29] audit: type=1326 audit(418.150:21245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.283754][ T29] audit: type=1326 audit(418.150:21246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.308432][ T29] audit: type=1326 audit(418.150:21247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.331771][ T29] audit: type=1326 audit(418.150:21248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.354941][ T29] audit: type=1326 audit(418.150:21249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.378647][ T29] audit: type=1326 audit(418.150:21250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.402110][ T29] audit: type=1326 audit(418.150:21251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31071 comm="syz.9.10994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cd2af749 code=0x7ffc0000 [ 418.750094][T30971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.768757][T30971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.790342][T30971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.801258][T30971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.864702][T30971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.897245][T30971] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.926609][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.933776][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.948565][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.955758][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.965877][T31129] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 419.091301][T30971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.248636][T31070] syz.3.10993 (31070) used greatest stack depth: 6216 bytes left [ 419.268719][T31154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11021'. [ 419.280242][T31154] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11021'. [ 419.370127][T30971] veth0_vlan: entered promiscuous mode [ 419.373992][T31165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31165 comm=syz.9.11025 [ 419.391196][T30971] veth1_vlan: entered promiscuous mode [ 419.427239][T30971] veth0_macvtap: entered promiscuous mode [ 419.446236][T30971] veth1_macvtap: entered promiscuous mode [ 419.466752][T30971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.480163][T30971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.498524][ T3692] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.514350][ T3692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.550581][ T3692] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.564352][ T3692] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.946666][T31225] lo: left promiscuous mode [ 419.951363][T31225] lo: left allmulticast mode [ 419.987185][T31225] netlink: 'syz.2.11051': attribute type 13 has an invalid length. [ 420.016202][T31225] tunl0: left promiscuous mode [ 420.021064][T31225] tunl0: left allmulticast mode [ 420.027854][T31225] gre0: left promiscuous mode [ 420.032599][T31225] gre0: left allmulticast mode [ 420.059528][T31225] gretap0: refused to change device tx_queue_len [ 420.066791][T31225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 420.251714][ T9649] Process accounting resumed [ 420.514561][T31277] lo speed is unknown, defaulting to 1000 [ 420.743559][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11082'. [ 421.290829][T31337] lo speed is unknown, defaulting to 1000 [ 421.469497][T31348] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 422.020959][T31401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11123'. [ 422.050264][T31401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11123'. [ 422.461778][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11139'. [ 422.503115][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11139'. [ 423.033981][T31498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11163'. [ 423.081457][ T162] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.090575][T31498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11163'. [ 423.107602][ T162] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.118909][ T162] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.136512][ T162] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.272444][T31520] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 423.467012][T31532] netlink: 3 bytes leftover after parsing attributes in process `syz.9.11178'. [ 423.520558][T31534] bridge0: entered promiscuous mode [ 423.531709][T31534] macsec1: entered promiscuous mode [ 423.543859][T31534] bridge0: port 3(macsec1) entered blocking state [ 423.550703][T31534] bridge0: port 3(macsec1) entered disabled state [ 423.576866][T31534] macsec1: entered allmulticast mode [ 423.582422][T31534] bridge0: entered allmulticast mode [ 423.593116][T31534] macsec1: left allmulticast mode [ 423.598327][T31534] bridge0: left allmulticast mode [ 423.604627][T31534] bridge0: left promiscuous mode [ 423.961218][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 423.961248][ T29] audit: type=1326 audit(429.941:21645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 423.998387][ T29] audit: type=1326 audit(429.981:21646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.022317][ T29] audit: type=1326 audit(429.981:21647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.045704][ T29] audit: type=1326 audit(429.981:21648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.069264][ T29] audit: type=1326 audit(429.981:21649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.092591][ T29] audit: type=1326 audit(429.981:21650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.115865][ T29] audit: type=1326 audit(429.981:21651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.139258][ T29] audit: type=1326 audit(429.981:21652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.162620][ T29] audit: type=1326 audit(429.981:21653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.186333][ T29] audit: type=1326 audit(429.981:21654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.2.11189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 424.625296][T31598] netlink: 'syz.2.11205': attribute type 1 has an invalid length. [ 424.646296][T31598] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 424.655298][T31598] bond4: (slave batadv2): making interface the new active one [ 424.664547][T31598] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 425.472375][T31636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11220'. [ 425.535458][ T3671] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.544064][T31636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11220'. [ 425.563910][ T3671] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.587262][ T3671] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.626964][ T3671] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.907466][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11238'. [ 425.954688][T31675] team0: Port device team_slave_1 removed [ 426.783414][T31701] lo speed is unknown, defaulting to 1000 [ 427.035831][T31724] loop4: detected capacity change from 0 to 512 [ 427.043180][T31724] EXT4-fs: Ignoring removed i_version option [ 427.049308][T31724] EXT4-fs: Ignoring removed bh option [ 427.089751][T31724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.107334][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11257'. [ 427.120946][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11257'. [ 427.239581][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.749857][T31768] macsec1: entered promiscuous mode [ 427.755404][T31768] bridge0: entered promiscuous mode [ 427.799648][T31768] bridge0: port 4(macsec1) entered blocking state [ 427.806594][T31768] bridge0: port 4(macsec1) entered disabled state [ 427.815219][T31768] macsec1: entered allmulticast mode [ 427.820557][T31768] bridge0: entered allmulticast mode [ 427.839403][T31768] macsec1: left allmulticast mode [ 427.844556][T31768] bridge0: left allmulticast mode [ 427.885996][T31768] bridge0: left promiscuous mode [ 428.038471][T31779] loop4: detected capacity change from 0 to 256 [ 428.073585][T31784] 9p: Bad value for 'rfdno' [ 430.071058][T31825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11305'. [ 430.096591][T31821] netlink: 'syz.3.11292': attribute type 1 has an invalid length. [ 430.187868][T31833] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 430.257792][T31833] bond3: (slave batadv1): making interface the new active one [ 430.296581][T31833] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 430.346611][T31841] bridge0: entered promiscuous mode [ 430.351980][T31841] macsec1: entered promiscuous mode [ 430.356944][T31842] loop4: detected capacity change from 0 to 512 [ 430.362302][T31841] bridge0: port 2(macsec1) entered blocking state [ 430.370410][T31841] bridge0: port 2(macsec1) entered disabled state [ 430.387739][T31842] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 430.396978][T31841] macsec1: entered allmulticast mode [ 430.400229][T31842] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.11298: invalid block [ 430.402314][T31841] bridge0: entered allmulticast mode [ 430.420067][T31842] EXT4-fs (loop4): Remounting filesystem read-only [ 430.433804][T31841] macsec1: left allmulticast mode [ 430.438882][T31841] bridge0: left allmulticast mode [ 430.445613][T31842] EXT4-fs (loop4): 1 truncate cleaned up [ 430.457812][T31841] bridge0: left promiscuous mode [ 430.471448][T31842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.726393][T31842] lo speed is unknown, defaulting to 1000 [ 430.756532][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 430.756549][ T29] audit: type=1326 audit(436.741:21727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.808946][ T29] audit: type=1326 audit(436.771:21728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.832576][ T29] audit: type=1326 audit(436.771:21729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.856404][ T29] audit: type=1326 audit(436.771:21730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.879538][ T29] audit: type=1326 audit(436.771:21731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca09fef783 code=0x7ffc0000 [ 430.902784][ T29] audit: type=1326 audit(436.771:21732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca09fef783 code=0x7ffc0000 [ 430.925899][ T29] audit: type=1326 audit(436.771:21733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.949767][ T29] audit: type=1326 audit(436.771:21734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.973195][ T29] audit: type=1326 audit(436.781:21735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 430.997070][ T29] audit: type=1326 audit(436.781:21736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31853 comm="syz.3.11307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 431.094374][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.200741][T31865] bridge0: port 2(batadv3) entered blocking state [ 431.207354][T31865] bridge0: port 2(batadv3) entered disabled state [ 431.230723][T31865] batadv3: entered allmulticast mode [ 431.237616][T31865] batadv3: entered promiscuous mode [ 431.355125][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11319'. [ 431.372552][T31887] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 431.454455][T31899] tipc: Invalid UDP bearer configuration [ 431.454474][T31899] tipc: Enabling of bearer rejected, failed to enable media [ 431.491827][T31892] lo speed is unknown, defaulting to 1000 [ 431.527668][T31907] loop4: detected capacity change from 0 to 2048 [ 431.550599][T31907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.693490][ T162] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 431.703222][ T162] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 432.261215][ T9649] kernel read not supported for file bpf-prog (pid: 9649 comm: kworker/0:8) [ 432.440483][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.918229][ T3557] IPVS: starting estimator thread 0... [ 433.013968][T32034] IPVS: using max 2544 ests per chain, 127200 per kthread [ 433.665266][T32090] wireguard0: entered promiscuous mode [ 433.670918][T32090] wireguard0: entered allmulticast mode [ 434.338945][T32140] loop4: detected capacity change from 0 to 1024 [ 434.350109][T32140] EXT4-fs: inline encryption not supported [ 434.357582][T32140] EXT4-fs: Ignoring removed nobh option [ 434.376743][T32140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 434.385485][T32140] System zones: 1-12 [ 434.391495][T32140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.422871][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.557957][T32151] loop4: detected capacity change from 0 to 2048 [ 434.576413][T32151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.617099][T32151] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 434.690717][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.023895][T32189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32189 comm=syz.3.11445 [ 435.210665][T32210] lo speed is unknown, defaulting to 1000 [ 435.306348][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11459'. [ 435.560887][T32246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32246 comm=syz.3.11469 [ 435.737860][T32269] lo speed is unknown, defaulting to 1000 [ 435.781382][T32275] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 435.911520][T32278] lo speed is unknown, defaulting to 1000 [ 435.965409][ T29] kauditd_printk_skb: 1404 callbacks suppressed [ 435.965426][ T29] audit: type=1326 audit(441.951:23141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.023252][ T29] audit: type=1326 audit(441.951:23142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.046397][ T29] audit: type=1326 audit(441.951:23143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.070297][ T29] audit: type=1326 audit(441.951:23144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.093518][ T29] audit: type=1326 audit(441.951:23145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.116873][ T29] audit: type=1326 audit(441.951:23146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.139948][ T29] audit: type=1326 audit(441.951:23147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.163613][ T29] audit: type=1326 audit(441.951:23148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.187387][ T29] audit: type=1326 audit(441.951:23149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.210864][ T29] audit: type=1326 audit(441.951:23150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 436.286104][T32298] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 436.294494][T32298] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 437.193065][ T3474] kernel read not supported for file bpf-prog (pid: 3474 comm: kworker/0:4) [ 437.437835][T32337] lo speed is unknown, defaulting to 1000 [ 437.510773][T32354] wireguard0: entered promiscuous mode [ 437.516700][T32354] wireguard0: entered allmulticast mode [ 437.611028][T32363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11514'. [ 437.622841][T32365] netlink: 'syz.1.11515': attribute type 1 has an invalid length. [ 437.639771][T32363] IPVS: Error connecting to the multicast addr [ 437.657588][T32365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 437.664747][T32367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11516'. [ 437.677438][T32365] bond8: (slave veth13): Enslaving as an active interface with a down link [ 437.691802][T32365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.700848][T32365] bond8: (slave batadv0): making interface the new active one [ 437.710102][T32365] batadv0: entered promiscuous mode [ 437.715621][T32365] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 438.232309][T32400] loop4: detected capacity change from 0 to 128 [ 438.252577][T32400] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.318343][T30971] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.624283][T32424] netlink: 'syz.4.11541': attribute type 30 has an invalid length. [ 438.661896][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11540'. [ 438.676004][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11540'. [ 438.700544][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11540'. [ 438.711722][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11540'. [ 438.722942][T32432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32432 comm=syz.1.11542 [ 438.762951][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11540'. [ 438.781162][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11540'. [ 438.859602][T32440] wireguard0: entered promiscuous mode [ 438.865246][T32440] wireguard0: entered allmulticast mode [ 438.972474][T32446] vlan0: entered allmulticast mode [ 439.104211][T32464] loop4: detected capacity change from 0 to 512 [ 439.150161][T32464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.367978][T32464] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.11554: corrupted inode contents [ 439.399808][T32476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11569'. [ 439.415495][T32464] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.11554: mark_inode_dirty error [ 439.439720][T32464] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.11554: corrupted inode contents [ 439.443362][T32480] wireguard1: entered promiscuous mode [ 439.452378][T32464] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.11554: mark_inode_dirty error [ 439.457405][T32480] wireguard1: entered allmulticast mode [ 439.470176][T32464] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.11554: mark inode dirty (error -117) [ 439.517800][T32464] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 439.621064][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.962250][T32539] netlink: 'syz.1.11580': attribute type 30 has an invalid length. [ 440.286117][T32568] netlink: 'syz.3.11593': attribute type 16 has an invalid length. [ 440.294907][T32568] gretap0: left allmulticast mode [ 440.300086][T32568] gretap0: left promiscuous mode [ 440.305385][T32568] bridge0: port 3(gretap0) entered disabled state [ 440.314328][T32568] bridge_slave_1: left allmulticast mode [ 440.320254][T32568] bridge_slave_1: left promiscuous mode [ 440.326346][T32568] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.342461][T32568] bridge_slave_0: left promiscuous mode [ 440.348789][T32568] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.654128][T32582] netlink: 'syz.9.11599': attribute type 30 has an invalid length. [ 440.816195][T32591] lo speed is unknown, defaulting to 1000 [ 441.057255][T32606] __nla_validate_parse: 14 callbacks suppressed [ 441.057525][T32606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11605'. [ 441.078398][T32606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11605'. [ 441.105403][T32606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11605'. [ 441.116921][T32606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11605'. [ 441.170628][T32606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11605'. [ 441.187494][T32606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11605'. [ 441.498500][ T29] kauditd_printk_skb: 760 callbacks suppressed [ 441.498521][ T29] audit: type=1400 audit(447.481:23911): avc: denied { append } for pid=32633 comm="syz.4.11619" name="loop1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 441.551923][T32632] lo speed is unknown, defaulting to 1000 [ 441.737951][T32662] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11632'. [ 441.917902][T32699] ref_ctr_offset mismatch. inode: 0x1e0f offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 442.095638][T32710] netlink: 'syz.1.11653': attribute type 1 has an invalid length. [ 442.118951][T32710] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.138387][T32710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11653'. [ 442.151499][T32710] bond9 (unregistering): Released all slaves [ 442.154058][ T29] audit: type=1326 audit(448.131:23912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32717 comm="syz.4.11656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e45a7f749 code=0x0 [ 442.595766][T32750] netlink: 'syz.2.11670': attribute type 1 has an invalid length. [ 442.611816][T32750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.646058][T32750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11670'. [ 442.718481][T32750] bond5 (unregistering): Released all slaves [ 442.827189][T32763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11675'. [ 443.033454][ T29] audit: type=1326 audit(449.011:23913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.2.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 443.057269][ T29] audit: type=1326 audit(449.011:23914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.2.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 443.080313][ T29] audit: type=1326 audit(449.011:23915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.2.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 443.103776][ T29] audit: type=1326 audit(449.011:23916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.2.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 443.126996][ T29] audit: type=1326 audit(449.011:23917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.2.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 443.149938][ T29] audit: type=1326 audit(449.011:23918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.2.11680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 443.202659][ T314] : renamed from veth0_to_bond (while UP) [ 443.534176][ T29] audit: type=1326 audit(449.521:23919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.3.11692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca09fef749 code=0x0 [ 443.590779][ T346] syzkaller0: entered promiscuous mode [ 443.654895][ T346] syzkaller0 (unregistering): left promiscuous mode [ 443.909864][ T29] audit: type=1107 audit(449.891:23920): pid=366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 444.581638][ T425] bridge: RTM_NEWNEIGH with invalid ether address [ 444.907506][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.013386][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.042185][ T456] ref_ctr_offset mismatch. inode: 0x2d2 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 445.626792][ T495] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 445.893697][ T500] xt_hashlimit: max too large, truncated to 1048576 [ 446.178379][ T506] loop4: detected capacity change from 0 to 8192 [ 446.542300][T30971] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 446.550277][T30971] FAT-fs (loop4): Filesystem has been set read-only [ 446.936549][ T527] cgroup: fork rejected by pids controller in /syz1 [ 447.014307][ T639] __nla_validate_parse: 1 callbacks suppressed [ 447.014338][ T639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11769'. [ 447.256494][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 447.256513][ T29] audit: type=1400 audit(453.231:23927): avc: denied { lock } for pid=1025 comm="syz.4.11775" path="socket:[112478]" dev="sockfs" ino=112478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 447.306118][ T1028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11777'. [ 447.355340][ T29] audit: type=1326 audit(453.341:23928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.378672][ T29] audit: type=1326 audit(453.341:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.401845][ T29] audit: type=1326 audit(453.341:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.443307][ T29] audit: type=1326 audit(453.341:23931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.466969][ T29] audit: type=1326 audit(453.341:23932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.490493][ T29] audit: type=1326 audit(453.341:23933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.514173][ T29] audit: type=1326 audit(453.341:23934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.537799][ T29] audit: type=1326 audit(453.341:23935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.540343][ T1044] tipc: New replicast peer: 255.255.255.255 [ 447.561416][ T29] audit: type=1326 audit(453.341:23936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e45a7f749 code=0x7ffc0000 [ 447.590757][ T1044] tipc: Enabled bearer , priority 10 [ 447.839195][ T1068] netlink: 'syz.2.11794': attribute type 1 has an invalid length. [ 447.857646][ T1068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.873103][ T1068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11794'. [ 447.884852][ T1068] bond5 (unregistering): Released all slaves [ 448.119420][ T1094] netlink: 'syz.9.11806': attribute type 1 has an invalid length. [ 448.161866][ T1094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.195139][ T1094] bond3: entered allmulticast mode [ 448.240536][ T1110] netlink: 660 bytes leftover after parsing attributes in process `syz.2.11812'. [ 448.282284][ T1118] loop4: detected capacity change from 0 to 1024 [ 448.293825][ T1118] EXT4-fs: Ignoring removed orlov option [ 448.304339][ T1118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.387975][ T1135] netlink: 'syz.1.11823': attribute type 7 has an invalid length. [ 448.396165][ T1135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11823'. [ 448.788183][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.843592][ T1181] loop4: detected capacity change from 0 to 764 [ 448.851185][ T1181] rock: directory entry would overflow storage [ 448.857600][ T1181] rock: sig=0x5245, size=8, remaining=5 [ 448.999890][ T1187] lo speed is unknown, defaulting to 1000 [ 449.066656][ T1192] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=1192 comm=syz.9.11845 [ 449.143265][ T3675] batadv0: left promiscuous mode [ 449.322142][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11847'. [ 450.447457][ T1244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11866'. [ 450.515871][ T1249] netlink: 'syz.3.11869': attribute type 15 has an invalid length. [ 450.523928][ T1249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11869'. [ 452.052297][ T1354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.061769][ T1354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.241040][ T1372] ip6gre1: entered promiscuous mode [ 452.246775][ T1372] ip6gre1: entered allmulticast mode [ 452.271672][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 452.271692][ T29] audit: type=1326 audit(458.251:24071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.301586][ T29] audit: type=1326 audit(458.251:24072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.325109][ T29] audit: type=1326 audit(458.251:24073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.348257][ T29] audit: type=1326 audit(458.251:24074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.371556][ T29] audit: type=1326 audit(458.251:24075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.394641][ T29] audit: type=1326 audit(458.261:24076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.418307][ T29] audit: type=1326 audit(458.261:24077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.441407][ T29] audit: type=1326 audit(458.261:24078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.464910][ T29] audit: type=1326 audit(458.261:24079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.488088][ T29] audit: type=1326 audit(458.261:24080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.1.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c88df749 code=0x7ffc0000 [ 452.539354][ T1380] bond1: (slave dummy0): Releasing backup interface [ 452.566238][ T1380] batman_adv: batadv0: Adding interface: dummy0 [ 452.572541][ T1380] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.598326][ T1380] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 452.674563][ T1396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11923'. [ 452.875241][ T1421] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11936'. [ 452.884675][ T1421] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11936'. [ 452.914982][ T1421] ªªªªªª: renamed from wg2 (while UP) [ 452.923823][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.216316][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11943'. [ 453.225542][ T1441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11943'. [ 453.234725][ T1441] netlink: 'syz.9.11943': attribute type 6 has an invalid length. [ 453.599716][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11943'. [ 453.608929][ T1441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11943'. [ 453.618014][ T1441] netlink: 'syz.9.11943': attribute type 6 has an invalid length. [ 453.966257][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.003425][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.173370][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.493388][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.676263][ T1513] cgroup: fork rejected by pids controller in /syz2 [ 456.225834][ T1634] ip6gre2: entered promiscuous mode [ 456.231110][ T1634] ip6gre2: entered allmulticast mode [ 456.405101][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.768010][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.785574][ T1645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11984'. [ 456.848595][ T1645] team0: Port device team_slave_1 removed [ 457.396683][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11996'. [ 457.406439][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11996'. [ 457.475975][ T29] kauditd_printk_skb: 778 callbacks suppressed [ 457.475991][ T29] audit: type=1326 audit(463.461:24859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.2.12000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 457.506551][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.516159][ T29] audit: type=1326 audit(463.491:24860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.2.12000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 457.539365][ T29] audit: type=1326 audit(463.491:24861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.2.12000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 457.562615][ T29] audit: type=1326 audit(463.491:24862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.2.12000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 457.602535][ T1684] bond1: entered allmulticast mode [ 457.629859][ T1688] ip6gretap1: entered allmulticast mode [ 457.640932][ T1688] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 457.664798][ T29] audit: type=1326 audit(463.641:24863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.12005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 457.688310][ T29] audit: type=1326 audit(463.641:24864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.12005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 457.712106][ T29] audit: type=1326 audit(463.641:24865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.12005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 457.735298][ T29] audit: type=1326 audit(463.641:24866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.12005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 457.758522][ T29] audit: type=1326 audit(463.641:24867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.12005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 457.781798][ T29] audit: type=1326 audit(463.651:24868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.12005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fca09fef749 code=0x7ffc0000 [ 457.957854][ T1704] lo speed is unknown, defaulting to 1000 [ 458.030962][ T1718] __nla_validate_parse: 4 callbacks suppressed [ 458.031008][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12013'. [ 458.178581][ T1714] lo speed is unknown, defaulting to 1000 [ 458.203328][ T3557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.330846][ T1719] cgroup: fork rejected by pids controller in /syz4 [ 458.477375][ T1772] ip6gre2: entered promiscuous mode [ 458.483024][ T1772] ip6gre2: entered allmulticast mode [ 458.523379][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.064037][ T1998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.166601][ T2018] tipc: Failed to remove unknown binding: 66,1,1/0:4047211790/4047211792 [ 459.176030][ T2018] tipc: Failed to remove unknown binding: 66,1,1/0:4047211790/4047211792 [ 459.216316][ T2024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2024 comm=syz.3.12036 [ 459.324248][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.511516][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12041'. [ 459.563603][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.878751][ T2051] bridge0: port 3($Hÿ) entered blocking state [ 459.885241][ T2051] bridge0: port 3($Hÿ) entered disabled state [ 459.891663][ T2051] $Hÿ: entered allmulticast mode [ 459.897922][ T2051] $Hÿ: entered promiscuous mode [ 460.137601][ T2065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2065 comm=syz.3.12051 [ 460.326553][ T2075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12055'. [ 460.603419][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.707457][ T2123] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.12075'. [ 460.753423][ T2128] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12077'. [ 460.762729][ T2111] lo speed is unknown, defaulting to 1000 [ 460.961576][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12086'. [ 460.970776][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12086'. [ 460.980118][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12086'. [ 461.051259][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12086'. [ 461.060530][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12086'. [ 461.439207][ T2200] loop4: detected capacity change from 0 to 256 [ 461.463514][ T2200] msdos: Bad value for 'uid' [ 461.468378][ T2200] msdos: Bad value for 'uid' [ 461.597294][ T2204] lo speed is unknown, defaulting to 1000 [ 461.643454][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.363416][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.578477][ T2250] lo speed is unknown, defaulting to 1000 [ 462.684860][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.853306][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 462.853333][ T29] audit: type=1326 audit(468.831:24974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 462.883088][ T29] audit: type=1326 audit(468.831:24975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 462.906467][ T29] audit: type=1326 audit(468.831:24976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 462.929909][ T29] audit: type=1326 audit(468.831:24977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 462.953194][ T29] audit: type=1326 audit(468.831:24978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 462.976675][ T29] audit: type=1326 audit(468.831:24979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 463.000070][ T29] audit: type=1326 audit(468.831:24980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 463.023367][ T29] audit: type=1326 audit(468.831:24981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 463.046800][ T29] audit: type=1326 audit(468.841:24982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 463.070233][ T29] audit: type=1326 audit(468.841:24983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.2.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8627f749 code=0x7ffc0000 [ 463.172383][ T2278] bridge0: port 2(.`) entered blocking state [ 463.179024][ T2278] bridge0: port 2(.`) entered disabled state [ 463.186674][ T2278] .`: entered allmulticast mode [ 463.192403][ T2278] .`: entered promiscuous mode [ 463.723473][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.763623][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.886914][ T2378] __nla_validate_parse: 8 callbacks suppressed [ 464.886959][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12174'. [ 464.906978][ T2378] ip6gre1: entered allmulticast mode [ 464.974680][ T2390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.983119][ T2390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.991486][ T2390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.003308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.012181][ T2390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.020579][ T2390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.029090][ T2390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.037491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.180062][ T2404] ªªªªªª: renamed from wg2 (while UP) [ 465.223971][ T2408] netlink: 'syz.4.12187': attribute type 298 has an invalid length. [ 465.421969][ T2428] loop4: detected capacity change from 0 to 1024 [ 465.455168][ T2428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 465.509051][ T2428] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 1: comm syz.4.12196: lblock 1 mapped to illegal pblock 1 (length 5) [ 465.542543][ T2428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 465.555159][ T2428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 465.555159][ T2428] [ 465.681750][ T3675] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:41: lblock 8 mapped to illegal pblock 8 (length 8) [ 465.697735][ T3675] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 465.710564][ T3675] EXT4-fs (loop4): This should not happen!! Data will be lost [ 465.710564][ T3675] [ 465.741372][T30971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 465.755242][T30971] ================================================================== [ 465.763548][T30971] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 465.771388][T30971] [ 465.773727][T30971] read-write to 0xffff888237d26468 of 1 bytes by task 2444 on cpu 1: [ 465.781895][T30971] folio_add_lru+0xa5/0x1f0 [ 465.786425][T30971] folio_add_lru_vma+0x49/0x70 [ 465.791383][T30971] do_wp_page+0x1550/0x2510 [ 465.795910][T30971] handle_mm_fault+0x7b0/0x2c60 [ 465.800916][T30971] do_user_addr_fault+0x630/0x1080 [ 465.806034][T30971] exc_page_fault+0x62/0xa0 [ 465.810634][T30971] asm_exc_page_fault+0x26/0x30 [ 465.815521][T30971] [ 465.817860][T30971] read to 0xffff888237d26468 of 1 bytes by task 30971 on cpu 0: [ 465.825499][T30971] __lru_add_drain_all+0x17e/0x450 [ 465.830630][T30971] lru_add_drain_all+0x10/0x20 [ 465.835491][T30971] invalidate_bdev+0x47/0x70 [ 465.840095][T30971] ext4_put_super+0x624/0x7d0 [ 465.844870][T30971] generic_shutdown_super+0xe6/0x210 [ 465.850186][T30971] kill_block_super+0x2a/0x70 [ 465.854972][T30971] ext4_kill_sb+0x42/0x80 [ 465.859310][T30971] deactivate_locked_super+0x75/0x1c0 [ 465.864700][T30971] deactivate_super+0x97/0xa0 [ 465.869478][T30971] cleanup_mnt+0x2a9/0x320 [ 465.873905][T30971] __cleanup_mnt+0x19/0x20 [ 465.878337][T30971] task_work_run+0x131/0x1a0 [ 465.883114][T30971] exit_to_user_mode_loop+0x1fe/0x740 [ 465.888668][T30971] do_syscall_64+0x1e1/0x2b0 [ 465.893272][T30971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.899259][T30971] [ 465.901583][T30971] value changed: 0x0d -> 0x10 [ 465.906429][T30971] [ 465.908750][T30971] Reported by Kernel Concurrency Sanitizer on: [ 465.914910][T30971] CPU: 0 UID: 0 PID: 30971 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.926720][T30971] Tainted: [W]=WARN [ 465.930611][T30971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.941015][T30971] ================================================================== [ 469.083601][ T3474] net_ratelimit: 641 callbacks suppressed [ 469.083616][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.123387][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.163853][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.484081][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.213383][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.243615][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.053769][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.283362][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.524110][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.323599][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog