last executing test programs: 5m47.449737466s ago: executing program 32 (id=406): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x8, 0x7de7, 0x0, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m11.952591248s ago: executing program 33 (id=6116): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000740)='mm_page_alloc\x00', r1, 0x0, 0xd}, 0x18) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m11.001675532s ago: executing program 34 (id=6138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) 2m10.923390763s ago: executing program 35 (id=6117): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) semtimedop(0x0, &(0x7f0000000440), 0x0, 0x0) 2m10.812294825s ago: executing program 36 (id=6142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)) 1m15.23256049s ago: executing program 37 (id=8485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m14.760214007s ago: executing program 38 (id=8488): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 1m14.756973077s ago: executing program 39 (id=8489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m14.500650971s ago: executing program 40 (id=8492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone3(&(0x7f00000007c0)={0x20040100, 0x0, 0x0, &(0x7f0000000580), {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 59.492141274s ago: executing program 3 (id=8953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) 59.466577785s ago: executing program 3 (id=8946): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x4000, 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r10 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) 59.14570263s ago: executing program 2 (id=8967): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 59.12829899s ago: executing program 2 (id=8958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fstatfs(0xffffffffffffffff, 0x0) 59.070408651s ago: executing program 2 (id=8959): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) pipe2$9p(0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x800010000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x8, 0x20004, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)="df439d225ecbe1bc4d2d24d7a0ece4a111bf77178a32d8b0040fc8db3d9788615e65f45b7ca09206040a434f2b6b3d6bc9baf643849330af6db5d4903f01e67d40785cb41a60d5af846ed9c1213594202f34bafd3899111654a6f50c96aca3c7e17d9d0ff36a8401618891076d1ab353a58e9d5e544af25a3fab36594ecc2516642b4e0f78e6549324897a0b8d", 0x8d}, {&(0x7f0000000200)="7fa7bfbc267f7c34d05eca8f6590cf633f8b2e34ae4f5de2b01edc36749695e1776e3bd433a574b5c927f9c297c9f2dd1a47052e3667f0df624f07bc4e14ad3ca9039bd968f7e3b241a0307769912a605e287e68d0fbcb7276ae7ed6672b02ad73e10f96031663bbe82dce7507da19aedcc8738158c3c5eacdba12ce670d32c1001bc08b04aba03e97fe85ed6077a34c4de26b446f136b961a1730ba3093c778a6b86497bb8761aa29", 0xa9}, {&(0x7f00000002c0)="fc33d887908a", 0x6}], 0x3) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x4) timer_getoverrun(r2) open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x201) socket(0x2, 0x80805, 0x0) 58.906834194s ago: executing program 6 (id=8964): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000900c0000000000000000000095000000000000001f69dba443bf04e6d60424ba47fc5e0eff01afaf9d85a37b0fe5d11fa079e7d56b2506b411a5274b0dba0831df3a7632ba2ff11a4e45ec001b7b8f24e91d6fd7b1ffa7e2bf6652313653e152d35539c8ec0b366868459bb28fa141cb713b0f92a1568077bdbe393acdb12239adc619a3428044a0778422429a2564ca05a49c10bddc8e0e3b38a0dfb7a497900089882e2e28c23ae7f905a2907c96bff9fd5f652918df60dc78b44c107ec981a9efd508642053de39a284c0a7471141a49c3dc74f0db7a6bff256045dfd60a030cd875c60211b19d28fd988"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x4000, 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r10 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) 58.607671808s ago: executing program 3 (id=8980): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 58.553626879s ago: executing program 3 (id=8973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) pipe2$9p(0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x800010000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x8, 0x20004, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)="df439d225ecbe1bc4d2d24d7a0ece4a111bf77178a32d8b0040fc8db3d9788615e65f45b7ca09206040a434f2b6b3d6bc9baf643849330af6db5d4903f01e67d40785cb41a60d5af846ed9c1213594202f34bafd3899111654a6f50c96aca3c7e17d9d0ff36a8401618891076d1ab353a58e9d5e544af25a3fab36594ecc2516642b4e0f78e6549324897a0b8d41", 0x8e}, {&(0x7f0000000200)="7fa7bfbc267f7c34d05eca8f6590cf633f8b2e34ae4f5de2b01edc36749695e1776e3bd433a574b5c927f9c297c9f2dd1a47052e3667f0df624f07bc4e14ad3ca9039bd968f7e3b241a0307769912a605e287e68d0fbcb7276ae7ed6672b02ad73e10f96031663bbe82dce7507da19aedcc8738158c3c5eacdba12ce670d32c1001bc08b04aba03e97fe85ed6077a34c4de26b44", 0x94}, {&(0x7f00000002c0)="fc33d887908a", 0x6}], 0x3) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) timer_settime(0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x4) timer_getoverrun(r2) open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x201) socket(0x2, 0x80805, 0x0) 58.253248834s ago: executing program 2 (id=8982): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x20000}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 58.213649544s ago: executing program 2 (id=8994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) pipe2$9p(0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x800010000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x8, 0x20004, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)="df439d225ecbe1bc4d2d24d7a0ece4a111bf77178a32d8b0040fc8db3d9788615e65f45b7ca09206040a434f2b6b3d6bc9baf643849330af6db5d4903f01e67d40785cb41a60d5af846ed9c1213594202f34bafd3899111654a6f50c96aca3c7e17d9d0ff36a8401618891076d1ab353a58e9d5e544af25a3fab36594ecc2516642b4e0f78e6549324897a0b8d", 0x8d}, {&(0x7f0000000200)="7fa7bfbc267f7c34d05eca8f6590cf633f8b2e34ae4f5de2b01edc36749695e1776e3bd433a574b5c927f9c297c9f2dd1a47052e3667f0df624f07bc4e14ad3ca9039bd968f7e3b241a0307769912a605e287e68d0fbcb7276ae7ed6672b02ad73e10f96031663bbe82dce7507da19aedcc8738158c3c5eacdba12ce670d32c1001bc08b04aba03e97fe85ed6077a34c4de26b446f136b961a1730ba3093c778a6b86497bb8761aa29", 0xa9}, {&(0x7f00000002c0)="fc33d887908a", 0x6}], 0x3) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x4) timer_getoverrun(r2) open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x201) socket(0x2, 0x80805, 0x0) 58.085199577s ago: executing program 6 (id=8985): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) close_range(0xffffffffffffffff, r0, 0x0) 58.049311257s ago: executing program 6 (id=8987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 58.034929567s ago: executing program 6 (id=8988): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nSRN+vU6r6+v77VWTa1isJi0abVdCFJRcKEgVlCXIR8ldtpIk4ItVaYgdSkF9+LSrQu36qaIK8FtXQpSKNJNW0EcuTN3PjuTNMkkY8zvB5M5536dc+655+bcc2YmgE1rOP2TVMI3I2JXRORaNxiuvN27c2Xy/p0rk1EslU7/lpR3u5vGM9lhYnsWGclF5D5O6isazF+6fHaiUJi+kMXHFs69PzZ/6fKzs0PZkpMnjx87euL58eeWX6g26aXlurv/o7kD+1599/rrk/3V5dXUGsvRLcMx3C4rZU91O7Ee29kQTvp7mBGWJb3+0+oaKLf/XdEXi1VecR1zBqy1UqlUGuy8ulhqdfWBJcCGlUSvcwD0RvUfffr8W3216whsWZvuR8/dPlV5AErLfS97RTxeXlgdBxloeb7tpuGIeKf4++fpK9ZoHAIAoNG3p2rDP839v3xlZuSPizdeTN//lc2h5CPi3xGxOyL+ExF7IuK/EbE3Iv4XEf9vOX5fRJQWSX+4JV5LvzYJlbvVhWJ2lPb/Xsjmtur9v6YM5Puy2M6Iaod5+kh2TkZiYHBmtjB9dJE0vnv5p087rWvs/6WvNP1qXzDLx63+lgG6qYmFiRUXuMXtqxH7+1vLn/RHJLWZgCQi9kXE/mUcN98Qnn3mywO1yEDzdkuXv6zUdh6tC/NMpS8inq7UfzGa6r+eYtI0P3lu4sz0menz47X5ybGhKEwfGZvpmJsffrz2Rqd1S5b/619ad3nlxDens5a1emn9b2u4/qM6f1svfz6JSGrztfPLT+Paz590fKZZ6fW/JXmrHK4+l34wsbBw4WjEluS1B5eP1/etxtP3KFbKP3Koffvfne2TnolHIiK9iB+NiMei8oSY5v1gRDwREYcWKf/3Lz353srLv7bS8k+13P8qNd9U//X5+k6BJJsbbLOq7+zBm/c73Dwerv6Pl0Mj2ZL297+k6RbRKafVcY90yZ+rPnsAAACwMeQiYkfDWNKOyOVGRytjQHtiW64wN79weGbu4vmpdF1EPgZyM7OF8vhnZTx4IKmOf+Yb4uMt8WPZuPFnfVvL8dHJucJUT0sObC+3+SQ3GvF2X0P7T/3anSFm4O/M97Vg81qs/aed+L3X1zEzwLp6+P//Nz5c04wA666h/Xf6hn9xBZ/7AjYAz/9A3dI/9OOeARtfSVuGTW1Z7f+wHwGEf5L+eLMWzvU0J8B60/+HTWnJ7/WvKlAabL9qKB7cOIYWP2BfrCwbW9uk1ZNA2rPqSepbV7JX9dcUOm4TueUdcDC6U6czqzwbxQvzZ/Z2/eIvZZ+V73YNfrUu7bRdoCe3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK77KwAA//8KhtfB") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 57.83295284s ago: executing program 6 (id=8996): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c416, &(0x7f0000000600)={[{@dots}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}, {@dots}, {@fat=@errors_continue}, {@dots}, {@fat=@discard}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@fmask={'fmask', 0x3d, 0xa}}, {@nodots}, {@dots}, {@nodots}, {@fat=@debug}, {@nodots}, {@fat=@showexec}, {@fat=@tz_utc}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@nfs_nostale_ro}, {@dots}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x20000000000000) 57.517961425s ago: executing program 3 (id=8997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 57.476712106s ago: executing program 3 (id=9008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 57.476417906s ago: executing program 41 (id=9008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 57.439866956s ago: executing program 6 (id=8999): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 57.439707616s ago: executing program 42 (id=8999): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 57.19428267s ago: executing program 2 (id=9000): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000900c0000000000000000000095000000000000001f69dba443bf04e6d60424ba47fc5e0eff01afaf9d85a37b0fe5d11fa079e7d56b2506b411a5274b0dba0831df3a7632ba2ff11a4e45ec001b7b8f24e91d6fd7b1ffa7e2bf6652313653e152d35539c8ec0b366868459bb28fa141cb713b0f92a1568077bdbe393acdb12239adc619a3428044a0778422429a2564ca05a49c10bddc8e0e3b38a0dfb7a497900089882e2e28c23ae7f905a2907c96bff9fd5f652918df60dc78b44c107ec981a9efd508642053de39a284c0a7471141a49c3dc74f0db7a6bff256045dfd60a030cd875c60211b19d28fd988"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x4000, 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r10 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) 57.19398703s ago: executing program 43 (id=9000): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000900c0000000000000000000095000000000000001f69dba443bf04e6d60424ba47fc5e0eff01afaf9d85a37b0fe5d11fa079e7d56b2506b411a5274b0dba0831df3a7632ba2ff11a4e45ec001b7b8f24e91d6fd7b1ffa7e2bf6652313653e152d35539c8ec0b366868459bb28fa141cb713b0f92a1568077bdbe393acdb12239adc619a3428044a0778422429a2564ca05a49c10bddc8e0e3b38a0dfb7a497900089882e2e28c23ae7f905a2907c96bff9fd5f652918df60dc78b44c107ec981a9efd508642053de39a284c0a7471141a49c3dc74f0db7a6bff256045dfd60a030cd875c60211b19d28fd988"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x4000, 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r10 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) 15.126876314s ago: executing program 4 (id=10406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 15.091098115s ago: executing program 4 (id=10409): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_page_free\x00', r1, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14.682282322s ago: executing program 4 (id=10423): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_getevents(0x0, 0x4000000000009, 0x0, 0x0, 0x0) 14.661921122s ago: executing program 4 (id=10425): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 14.645702292s ago: executing program 4 (id=10427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) 14.436632075s ago: executing program 4 (id=10428): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 14.436357706s ago: executing program 44 (id=10428): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 9.104411308s ago: executing program 0 (id=10559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 9.043849589s ago: executing program 0 (id=10562): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x4000, 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r10 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) 8.167543263s ago: executing program 0 (id=10608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 8.145901604s ago: executing program 0 (id=10609): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8.078287324s ago: executing program 0 (id=10615): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 7.876271947s ago: executing program 0 (id=10629): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 7.816360778s ago: executing program 45 (id=10629): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 810.630408ms ago: executing program 9 (id=10912): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbb, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xfff, 0x5, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xa, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa2503000000180001801400020073797a5f74756e0000000000000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 627.58962ms ago: executing program 8 (id=10932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 602.948071ms ago: executing program 8 (id=10923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) r3 = dup3(r1, r2, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 589.535641ms ago: executing program 8 (id=10926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 556.282941ms ago: executing program 8 (id=10927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 507.084242ms ago: executing program 8 (id=10930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 453.461523ms ago: executing program 8 (id=10937): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000900c0000000000000000000095000000000000001f69dba443bf04e6d60424ba47fc5e0eff01afaf9d85a37b0fe5d11fa079e7d56b2506b411a5274b0dba0831df3a7632ba2ff11a4e45ec001b7b8f24e91d6fd7b1ffa7e2bf6652313653e152d35539c8ec0b366868459bb28fa141cb713b0f92a1568077bdbe393acdb12239adc619a3428044a0778422429a2564ca05a49c10bddc8e0e3b38a0dfb7a497900089882e2e28c23ae7f905a2907c96bff9fd5f652918df60dc78b44c107ec981a9efd508642053de39a284c0a7471141a49c3dc74f0db7a6bff256045dfd60a030cd875c60211b19d28fd98821a35fc013091a4d60172e853bf287"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x4000, 0x1) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r10 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) 354.651215ms ago: executing program 5 (id=10944): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000170000850000008600000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r3, r0, 0x0, 0x0, 0x0}, 0x30) 354.453265ms ago: executing program 7 (id=10945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 316.352365ms ago: executing program 7 (id=10947): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x10000001) sendmmsg(r0, 0x0, 0x0, 0x0) 315.778235ms ago: executing program 7 (id=10950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) 303.569065ms ago: executing program 7 (id=10952): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 117.976338ms ago: executing program 9 (id=10954): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 117.385138ms ago: executing program 1 (id=10955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 117.055178ms ago: executing program 1 (id=10956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x11, r3, 0x1, 0x3, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x8, 0x6, @remote}, 0x14) 116.634428ms ago: executing program 7 (id=10957): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 114.910548ms ago: executing program 1 (id=10958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 114.495558ms ago: executing program 5 (id=10959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 114.244858ms ago: executing program 7 (id=10960): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 113.480538ms ago: executing program 9 (id=10961): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getdents(r0, &(0x7f0000000080)=""/134, 0x86) 113.023288ms ago: executing program 1 (id=10962): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r1}, 0xe) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 112.740938ms ago: executing program 5 (id=10963): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 112.163478ms ago: executing program 5 (id=10964): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 111.982318ms ago: executing program 9 (id=10965): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) gettid() syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 111.817578ms ago: executing program 1 (id=10966): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 41.973359ms ago: executing program 9 (id=10967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 27.15992ms ago: executing program 9 (id=10968): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1) 26.90059ms ago: executing program 1 (id=10969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) 731.75µs ago: executing program 5 (id=10970): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 0s ago: executing program 5 (id=10971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) kernel console output (not intermixed with test programs): es [ 357.989487][ T8223] hsr_slave_0: left promiscuous mode [ 357.998264][ T8223] hsr_slave_1: left promiscuous mode [ 358.004044][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.011457][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.019464][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.026904][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.036950][ T8223] veth1_macvtap: left promiscuous mode [ 358.042607][ T8223] veth0_macvtap: left promiscuous mode [ 358.048086][ T8223] veth1_vlan: left promiscuous mode [ 358.053407][ T8223] veth0_vlan: left promiscuous mode [ 358.108392][ T8223] team0 (unregistering): Port device team_slave_1 removed [ 358.120624][ T8223] team0 (unregistering): Port device team_slave_0 removed [ 358.462831][T26456] lo speed is unknown, defaulting to 1000 [ 358.477579][T26458] lo speed is unknown, defaulting to 1000 [ 358.515566][ T8223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.551467][ T8223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.629221][ T8223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.644051][T26456] chnl_net:caif_netlink_parms(): no params data found [ 358.658380][T26458] chnl_net:caif_netlink_parms(): no params data found [ 358.683997][ T8223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.719269][T26456] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.726331][T26456] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.733595][T26456] bridge_slave_0: entered allmulticast mode [ 358.740151][T26456] bridge_slave_0: entered promiscuous mode [ 358.757624][T26456] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.764717][T26456] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.772343][T26456] bridge_slave_1: entered allmulticast mode [ 358.778797][T26456] bridge_slave_1: entered promiscuous mode [ 358.789915][T26458] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.797476][T26458] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.804658][T26458] bridge_slave_0: entered allmulticast mode [ 358.811070][T26458] bridge_slave_0: entered promiscuous mode [ 358.817801][T26458] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.824904][T26458] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.832138][T26458] bridge_slave_1: entered allmulticast mode [ 358.838533][T26458] bridge_slave_1: entered promiscuous mode [ 358.858266][T26456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.875326][T26458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.885663][T26456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.895920][T26458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.928185][T26456] team0: Port device team_slave_0 added [ 358.934725][T26458] team0: Port device team_slave_0 added [ 358.948034][T26458] team0: Port device team_slave_1 added [ 358.954658][T26456] team0: Port device team_slave_1 added [ 358.977161][ T8223] bridge_slave_1: left allmulticast mode [ 358.982896][ T8223] bridge_slave_1: left promiscuous mode [ 358.988783][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.033448][ T8223] bridge_slave_0: left promiscuous mode [ 359.039128][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.131043][ T8223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.141062][ T8223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.150475][ T8223] bond0 (unregistering): Released all slaves [ 359.168234][T26456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.175202][T26456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.201852][T26456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.213214][T26456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.220315][T26456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.246336][T26456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.274432][T26458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.282132][T26458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.308277][T26458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.331194][ T8223] hsr_slave_0: left promiscuous mode [ 359.336860][ T8223] hsr_slave_1: left promiscuous mode [ 359.343924][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.351405][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.359069][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.366554][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.377399][ T8223] veth1_macvtap: left promiscuous mode [ 359.383001][ T8223] veth0_macvtap: left promiscuous mode [ 359.388520][ T8223] veth1_vlan: left promiscuous mode [ 359.393782][ T8223] veth0_vlan: left promiscuous mode [ 359.450418][ T8223] team0 (unregistering): Port device team_slave_1 removed [ 359.463503][ T8223] team0 (unregistering): Port device team_slave_0 removed [ 359.494649][T26458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.501735][T26458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.528077][T26458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.545733][T26456] hsr_slave_0: entered promiscuous mode [ 359.551904][T26456] hsr_slave_1: entered promiscuous mode [ 359.558832][T25340] infiniband syz1: ib_query_port failed (-19) [ 359.591397][T26488] lo speed is unknown, defaulting to 1000 [ 359.593529][T26458] hsr_slave_0: entered promiscuous mode [ 359.603457][T26458] hsr_slave_1: entered promiscuous mode [ 359.609366][T26458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.617650][T26458] Cannot create hsr debugfs directory [ 359.657466][T26490] lo speed is unknown, defaulting to 1000 [ 359.808118][T26488] chnl_net:caif_netlink_parms(): no params data found [ 359.851904][T26490] chnl_net:caif_netlink_parms(): no params data found [ 359.876013][T26488] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.883185][T26488] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.890664][T26488] bridge_slave_0: entered allmulticast mode [ 359.897184][T26488] bridge_slave_0: entered promiscuous mode [ 359.912871][T26488] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.920010][T26488] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.927193][T26488] bridge_slave_1: entered allmulticast mode [ 359.934130][T26488] bridge_slave_1: entered promiscuous mode [ 359.960662][T26488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.971130][T26488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.991236][T26490] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.998371][T26490] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.005585][T26490] bridge_slave_0: entered allmulticast mode [ 360.012063][T26490] bridge_slave_0: entered promiscuous mode [ 360.023771][T26490] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.030875][T26490] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.038191][T26490] bridge_slave_1: entered allmulticast mode [ 360.044687][T26490] bridge_slave_1: entered promiscuous mode [ 360.056633][T26488] team0: Port device team_slave_0 added [ 360.063385][T26488] team0: Port device team_slave_1 added [ 360.087639][T26490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.103210][T26488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.110229][T26488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.136793][T26488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.148099][T26488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.155104][T26488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.181772][T26488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.193963][T26490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.220301][T26490] team0: Port device team_slave_0 added [ 360.227428][T26456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 360.237431][T26490] team0: Port device team_slave_1 added [ 360.248459][T26456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.276268][T26456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.287799][T26488] hsr_slave_0: entered promiscuous mode [ 360.294262][T26488] hsr_slave_1: entered promiscuous mode [ 360.300350][T26488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.307890][T26488] Cannot create hsr debugfs directory [ 360.313852][T26490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.321218][T26490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.347953][T26490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.359826][T26490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.366816][T26490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.393730][T26490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.404853][T26456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 360.446265][T26490] hsr_slave_0: entered promiscuous mode [ 360.452465][T26490] hsr_slave_1: entered promiscuous mode [ 360.458381][T26490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.466037][T26490] Cannot create hsr debugfs directory [ 360.564052][T26458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.572933][T26458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.581774][T26458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.591368][T26458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.617248][T26456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.636784][T26456] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.655284][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.662370][ T8223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.671871][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.678966][ T8223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.691164][T26458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.716947][T26458] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.731491][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.738619][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.757826][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.764886][ T8195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.810796][T26488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.820191][T26488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.831749][T26488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.841823][T26488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.857188][T26456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.874444][T26458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.920947][T26488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.934642][T26488] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.954428][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.961561][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.974147][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.981284][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.030183][T26458] veth0_vlan: entered promiscuous mode [ 361.051206][T26488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.078346][T26490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.087847][T26490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.097045][T26490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.107894][T26490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.122550][T26458] veth1_vlan: entered promiscuous mode [ 361.144196][T26456] veth0_vlan: entered promiscuous mode [ 361.157945][T26456] veth1_vlan: entered promiscuous mode [ 361.179080][T26458] veth0_macvtap: entered promiscuous mode [ 361.207549][T26458] veth1_macvtap: entered promiscuous mode [ 361.215053][T26456] veth0_macvtap: entered promiscuous mode [ 361.223121][T26456] veth1_macvtap: entered promiscuous mode [ 361.250744][T26488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.266302][T26458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.276899][T26456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.291411][T26458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.305793][T26456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.320627][T26490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.334546][T26458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.343340][T26458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.352149][T26458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.361057][T26458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.378848][T26456] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.388279][T26456] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.397045][T26456] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.405964][T26456] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.441826][T26490] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.468158][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.475282][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.511773][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.518856][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.539113][T26490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.621589][T26488] veth0_vlan: entered promiscuous mode [ 361.647201][T26488] veth1_vlan: entered promiscuous mode [ 361.659931][T26490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.705173][T26488] veth0_macvtap: entered promiscuous mode [ 361.714775][T26488] veth1_macvtap: entered promiscuous mode [ 361.734046][T26488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.764544][T26488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.781404][T26488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.790210][T26488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.799057][T26488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.807874][T26488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.890861][T26490] veth0_vlan: entered promiscuous mode [ 361.915955][T26490] veth1_vlan: entered promiscuous mode [ 361.952278][T26631] loop0: detected capacity change from 0 to 1024 [ 361.965868][T26490] veth0_macvtap: entered promiscuous mode [ 361.978428][T26490] veth1_macvtap: entered promiscuous mode [ 361.992765][T26631] EXT4-fs mount: 51 callbacks suppressed [ 361.992783][T26631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.018878][T26642] SELinux: policydb version 576 does not match my version range 15-34 [ 362.025563][T26490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.029080][T26642] SELinux: failed to load policy [ 362.036586][T26634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 362.061416][T26490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.083216][T26490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.092123][T26490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.100896][T26490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.109705][T26490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.159959][T26631] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9019: Allocating blocks 497-513 which overlap fs metadata [ 362.166096][T26648] loop7: detected capacity change from 0 to 1024 [ 362.218948][T26648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.293061][T26458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.313209][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.349404][T26659] lo speed is unknown, defaulting to 1000 [ 362.377463][T26665] loop1: detected capacity change from 0 to 164 [ 362.389039][T26663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 362.398411][T26665] Unable to read rock-ridge attributes [ 362.416568][T26665] Unable to read rock-ridge attributes [ 362.584042][T26680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9038'. [ 362.653348][T26692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9044'. [ 362.777850][T26701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 362.913862][T26716] loop7: detected capacity change from 0 to 1024 [ 362.926114][T26716] EXT4-fs: Ignoring removed orlov option [ 362.937684][T26716] EXT4-fs (loop7): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 362.948695][T26718] loop5: detected capacity change from 0 to 512 [ 362.965522][T26718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.967196][T26716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.979527][T26718] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.029838][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.039905][T26718] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.9055: corrupted inode contents [ 363.052462][T26718] EXT4-fs (loop5): Remounting filesystem read-only [ 363.059059][T26718] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 363.086524][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.108137][T26729] loop5: detected capacity change from 0 to 512 [ 363.121450][T26729] EXT4-fs (loop5): 1 orphan inode deleted [ 363.127717][T26729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.140512][ T8195] __quota_error: 13 callbacks suppressed [ 363.140525][ T8195] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 363.146441][T26729] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.156055][ T8195] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 363.179684][T26729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.220236][T26734] netlink: 'syz.7.9069': attribute type 10 has an invalid length. [ 363.230512][T26734] veth0_vlan: entered allmulticast mode [ 363.243819][T26734] veth0_vlan: left promiscuous mode [ 363.250744][T26734] veth0_vlan: entered promiscuous mode [ 363.258974][T26734] team0: Device veth0_vlan failed to register rx_handler [ 363.300584][T26741] loop7: detected capacity change from 0 to 512 [ 363.308116][T26741] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 363.314827][T26741] EXT4-fs (loop7): mount failed [ 363.322758][T26741] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 363.391005][T26752] loop7: detected capacity change from 0 to 512 [ 363.399926][T26752] EXT4-fs: Ignoring removed bh option [ 363.405781][T26752] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 363.417910][T26752] EXT4-fs (loop7): 1 truncate cleaned up [ 363.424936][T26752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.430056][T26755] lo speed is unknown, defaulting to 1000 [ 363.459762][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.590470][T26762] siw: device registration error -23 [ 363.777369][ T29] audit: type=1326 audit(2000004166.884:30527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26779 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 363.801805][ T29] audit: type=1326 audit(2000004166.884:30528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26779 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 363.826414][ T29] audit: type=1326 audit(2000004166.884:30529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26779 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 363.850301][ T29] audit: type=1326 audit(2000004166.884:30530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26779 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 363.874592][ T29] audit: type=1326 audit(2000004166.884:30531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26779 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 364.121956][ T29] audit: type=1400 audit(2000004167.241:30532): avc: denied { write } for pid=26790 comm="syz.5.9081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 364.150284][T26795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9083'. [ 364.192207][ T29] audit: type=1326 audit(2000004167.314:30533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26796 comm="syz.7.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2275b0e929 code=0x7ffc0000 [ 364.216703][ T29] audit: type=1326 audit(2000004167.314:30534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26796 comm="syz.7.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2275b0e929 code=0x7ffc0000 [ 364.252279][ T29] audit: type=1326 audit(2000004167.367:30535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26796 comm="syz.7.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f2275b0e929 code=0x7ffc0000 [ 364.283226][T26805] loop5: detected capacity change from 0 to 1024 [ 364.290384][T26805] EXT4-fs: Ignoring removed orlov option [ 364.291438][T26802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9097'. [ 364.298859][T26805] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 364.332986][T26805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.354082][T26809] bridge0: entered allmulticast mode [ 364.426397][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.441236][T26819] loop7: detected capacity change from 0 to 2049 [ 364.465478][T26819] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 64 [ 364.538760][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9102'. [ 364.632333][T26850] loop0: detected capacity change from 0 to 1024 [ 364.649170][T26850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.666032][T26850] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.9108: attempt to clear invalid blocks 1886221359 len 1 [ 364.694440][T26458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.811251][T26867] loop1: detected capacity change from 0 to 2049 [ 364.824573][ T8195] dummy0: left allmulticast mode [ 364.829738][ T8195] bridge0: port 1(dummy0) entered disabled state [ 364.841782][T26867] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64 [ 364.872387][ T8195] bridge0: port 2(batadv0) entered disabled state [ 364.895248][ T8195] dummy0: left allmulticast mode [ 364.902372][ T8195] bridge0: port 1(dummy0) entered disabled state [ 364.970435][T26880] netlink: 256 bytes leftover after parsing attributes in process `syz.7.9120'. [ 365.152638][ T8195] bond0 (unregistering): Released all slaves [ 365.163079][ T8195] bond1 (unregistering): Released all slaves [ 365.282608][ T8195] bond0 (unregistering): Released all slaves [ 365.353452][T26904] Cannot find add_set index 0 as target [ 365.360960][ T8195] tipc: Left network mode [ 365.381091][ T8195] tipc: Left network mode [ 365.558349][ T8195] hsr_slave_0: left promiscuous mode [ 365.569787][ T8195] hsr_slave_1: left promiscuous mode [ 365.599131][ T8195] hsr_slave_0: left promiscuous mode [ 365.616318][ T8195] pim6reg (unregistering): left allmulticast mode [ 365.671281][ T8217] smc: removing ib device syz! [ 365.713889][ T8195] pimreg (unregistering): left allmulticast mode [ 365.744444][T26927] rdma_op ffff88812d7add80 conn xmit_rdma 0000000000000000 [ 365.765054][ T8223] smc: removing ib device syz2 [ 365.800568][ T3593] lo speed is unknown, defaulting to 1000 [ 365.806422][ T3593] infiniband syz0: ib_query_port failed (-19) [ 365.854050][T26938] Cannot find add_set index 0 as target [ 365.867607][T26937] bridge0: entered promiscuous mode [ 365.896059][T26937] macsec1: entered allmulticast mode [ 365.901477][T26937] bridge0: entered allmulticast mode [ 365.925397][T26937] bridge0: port 3(macsec1) entered blocking state [ 365.932074][T26937] bridge0: port 3(macsec1) entered disabled state [ 365.942836][T26937] bridge0: left allmulticast mode [ 365.947958][T26937] bridge0: left promiscuous mode [ 366.284193][T26964] Cannot find add_set index 0 as target [ 366.417177][ T8195] IPVS: stop unused estimator thread 0... [ 366.444618][ T8195] IPVS: stop unused estimator thread 0... [ 366.557390][T26999] futex_wake_op: syz.4.9171 tries to shift op by -1; fix this program [ 367.013988][T27023] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9180'. [ 367.322393][T27048] pim6reg1: entered promiscuous mode [ 367.327803][T27048] pim6reg1: entered allmulticast mode [ 367.352783][T27052] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9193'. [ 367.419990][T27062] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9198'. [ 367.800744][T27094] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9211'. [ 367.936998][T27102] loop7: detected capacity change from 0 to 512 [ 367.968374][T27102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.002640][T27108] bridge0: entered promiscuous mode [ 368.003052][T27102] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.009473][T27108] macsec1: entered allmulticast mode [ 368.044854][T27108] bridge0: entered allmulticast mode [ 368.051498][T27108] bridge0: port 3(macsec1) entered blocking state [ 368.058016][T27108] bridge0: port 3(macsec1) entered disabled state [ 368.071569][T27108] bridge0: left allmulticast mode [ 368.076655][T27108] bridge0: left promiscuous mode [ 368.094130][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 368.094146][ T29] audit: type=1326 audit(2000004171.398:30682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.123976][ T29] audit: type=1326 audit(2000004171.398:30683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.147603][ T29] audit: type=1326 audit(2000004171.398:30684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.171263][ T29] audit: type=1326 audit(2000004171.398:30685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.195002][ T29] audit: type=1326 audit(2000004171.398:30686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.218617][ T29] audit: type=1326 audit(2000004171.398:30687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.242373][ T29] audit: type=1326 audit(2000004171.398:30688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.266064][ T29] audit: type=1326 audit(2000004171.398:30689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.289751][ T29] audit: type=1326 audit(2000004171.398:30690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.313321][ T29] audit: type=1326 audit(2000004171.398:30691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27111 comm="syz.0.9217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 368.337937][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.427603][T27132] loop7: detected capacity change from 0 to 128 [ 368.442269][T27132] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 368.458498][T27132] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.623720][T26456] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.885339][T27181] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9250'. [ 368.950680][T27197] netlink: 'syz.7.9255': attribute type 298 has an invalid length. [ 368.992403][T27199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9256'. [ 369.221695][T27239] loop0: detected capacity change from 0 to 128 [ 369.230337][T27239] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 369.243328][T27239] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.386427][T26458] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.404713][T27255] loop5: detected capacity change from 0 to 8192 [ 369.653247][T27303] loop1: detected capacity change from 0 to 128 [ 369.684756][T27303] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 369.705700][T27303] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.822363][T27326] netlink: 'syz.0.9307': attribute type 298 has an invalid length. [ 369.999133][T26490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.260281][T27368] tipc: Enabling of bearer rejected, failed to enable media [ 370.741965][T27388] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9332'. [ 370.838522][T27400] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 370.862449][T27402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9338'. [ 370.961342][T27415] loop1: detected capacity change from 0 to 512 [ 370.974510][T27415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.023690][T27415] EXT4-fs (loop1): 1 truncate cleaned up [ 371.039345][T27415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.052166][T27423] smc: net device bond0 applied user defined pnetid SYZ0 [ 371.070019][T27423] smc: net device bond0 erased user defined pnetid SYZ0 [ 371.122416][T26490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.161735][T27438] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 371.178435][T27437] blktrace: Concurrent blktraces are not allowed on sg0 [ 371.239798][T27447] loop1: detected capacity change from 0 to 128 [ 371.266067][T27447] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.279663][T27447] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.372042][T26490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.468879][T27458] loop7: detected capacity change from 0 to 8192 [ 371.548569][T27473] loop0: detected capacity change from 0 to 512 [ 371.574996][T27473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.588459][T27478] loop1: detected capacity change from 0 to 256 [ 371.600584][T27478] vfat: Unknown parameter 'ÿÿÿÿf)°ÆÕº©ñ"' [ 371.610324][T27473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.624730][T27473] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.637900][T27473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.734855][T27502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.744295][T27502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.806497][T27517] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 371.839280][T27520] loop1: detected capacity change from 0 to 512 [ 371.847070][T27522] loop7: detected capacity change from 0 to 128 [ 371.853667][T27520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.864768][T27522] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.879171][T27522] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.880305][T27520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.933820][T27520] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.938997][T26456] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.954276][T27520] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.310231][T27594] netem: change failed [ 372.357036][T27606] loop7: detected capacity change from 0 to 512 [ 372.380142][T27606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.396253][T27606] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.425916][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.577065][T27641] netem: change failed [ 372.601352][T27645] loop7: detected capacity change from 0 to 512 [ 372.608697][T27645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.637731][T27645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.669285][T27645] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.681622][T27645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.692464][T27657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27657 comm=syz.0.9436 [ 372.705074][T27657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27657 comm=syz.0.9436 [ 372.901255][T27688] netlink: 'syz.0.9447': attribute type 10 has an invalid length. [ 372.922624][T27688] team0: Port device dummy0 added [ 372.935104][T27688] netlink: 'syz.0.9447': attribute type 10 has an invalid length. [ 372.956906][T27688] team0: Port device dummy0 removed [ 372.965133][T27688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.024059][T27692] loop0: detected capacity change from 0 to 256 [ 373.031999][T27692] FAT-fs (loop0): bogus number of FAT sectors [ 373.038267][T27692] FAT-fs (loop0): Can't find a valid FAT filesystem [ 373.215590][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 373.215624][ T29] audit: type=1326 audit(2000004176.783:30902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.259257][ T29] audit: type=1326 audit(2000004176.825:30903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.283005][ T29] audit: type=1326 audit(2000004176.825:30904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.306925][ T29] audit: type=1326 audit(2000004176.825:30905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.330645][ T29] audit: type=1326 audit(2000004176.825:30906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.354344][ T29] audit: type=1326 audit(2000004176.825:30907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.378042][ T29] audit: type=1326 audit(2000004176.825:30908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.402032][ T29] audit: type=1326 audit(2000004176.825:30909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.425619][ T29] audit: type=1326 audit(2000004176.825:30910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.449260][ T29] audit: type=1326 audit(2000004176.825:30911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27713 comm="syz.1.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 373.580830][T27726] bridge1: entered allmulticast mode [ 375.541149][T27840] loop5: detected capacity change from 0 to 164 [ 375.548369][T27840] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 375.649850][ T3385] IPVS: starting estimator thread 0... [ 375.749935][T27854] IPVS: using max 3888 ests per chain, 194400 per kthread [ 375.783879][T27869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9512'. [ 376.013700][T27889] netlink: 'syz.4.9520': attribute type 1 has an invalid length. [ 377.184290][T28001] loop7: detected capacity change from 0 to 1024 [ 377.212658][T28001] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.9560: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 6, max 0(0), depth 0(0) [ 377.261290][T28001] EXT4-fs (loop7): Remounting filesystem read-only [ 377.268103][T28001] EXT4-fs (loop7): get root inode failed [ 377.273827][T28001] EXT4-fs (loop7): mount failed [ 377.297665][T28016] loop0: detected capacity change from 0 to 256 [ 378.207745][T28160] loop5: detected capacity change from 0 to 2048 [ 378.221160][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 378.221175][ T29] audit: type=1400 audit(2000004182.043:31107): avc: denied { write } for pid=28163 comm="syz.4.9617" name="file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.254443][ T29] audit: type=1400 audit(2000004182.043:31108): avc: denied { open } for pid=28163 comm="syz.4.9617" path="/145/file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.277586][ T29] audit: type=1400 audit(2000004182.043:31109): avc: denied { ioctl } for pid=28163 comm="syz.4.9617" path="/145/file0" dev="tmpfs" ino=765 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.383702][T28183] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 378.383702][T28183] program syz.1.9621 not setting count and/or reply_len properly [ 378.702823][ T29] audit: type=1326 audit(2000004182.547:31110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 378.727034][ T29] audit: type=1326 audit(2000004182.547:31111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 378.750982][ T29] audit: type=1326 audit(2000004182.547:31112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 378.774590][ T29] audit: type=1326 audit(2000004182.547:31113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 378.798378][ T29] audit: type=1326 audit(2000004182.547:31114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 378.821978][ T29] audit: type=1326 audit(2000004182.547:31115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 378.845657][ T29] audit: type=1326 audit(2000004182.547:31116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28199 comm="syz.4.9630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 379.495986][T28236] loop1: detected capacity change from 0 to 256 [ 379.898745][T28283] SELinux: failed to load policy [ 380.088579][T28317] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9683'. [ 380.114561][T28319] netlink: 'syz.0.9684': attribute type 15 has an invalid length. [ 380.243839][T28332] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 380.827259][T28361] netlink: 'syz.7.9704': attribute type 10 has an invalid length. [ 380.849335][T28361] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.870209][T28361] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.924468][T28367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9706'. [ 381.090351][T28377] SELinux: failed to load policy [ 381.244231][T28391] loop5: detected capacity change from 0 to 1024 [ 381.267901][T28391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.282648][T28391] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.300944][T28391] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 381.339199][T28391] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 381.351621][T28391] EXT4-fs (loop5): This should not happen!! Data will be lost [ 381.351621][T28391] [ 381.361364][T28391] EXT4-fs (loop5): Total free blocks count 0 [ 381.367390][T28391] EXT4-fs (loop5): Free/Dirty block details [ 381.373353][T28391] EXT4-fs (loop5): free_blocks=4293918720 [ 381.379078][T28391] EXT4-fs (loop5): dirty_blocks=48 [ 381.384215][T28391] EXT4-fs (loop5): Block reservation details [ 381.390320][T28391] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 381.439644][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.470120][T28401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9720'. [ 381.574860][T28415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9724'. [ 381.587338][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9724'. [ 381.600367][T28414] SELinux: failed to load policy [ 381.646020][T28415] wireguard0: entered promiscuous mode [ 381.654873][T28415] wireguard0: entered allmulticast mode [ 381.884516][T28453] loop5: detected capacity change from 0 to 256 [ 381.895502][T28454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9741'. [ 381.905774][T28453] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.920940][T28453] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 381.929640][T28453] FAT-fs (loop5): Filesystem has been set read-only [ 381.943988][T28461] loop0: detected capacity change from 0 to 512 [ 381.950842][T28461] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.957728][T28461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 381.969185][T28461] EXT4-fs (loop0): 1 truncate cleaned up [ 381.975527][T28461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.990872][T28461] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.070464][T28477] loop0: detected capacity change from 0 to 512 [ 382.085159][T28477] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 382.190422][T28500] loop5: detected capacity change from 0 to 512 [ 382.197270][T28500] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.204610][T28500] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 382.217497][T28500] EXT4-fs (loop5): 1 truncate cleaned up [ 382.224298][T28500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.238000][T28500] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.364521][T28521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9766'. [ 382.465255][T28537] loop5: detected capacity change from 0 to 164 [ 382.473811][T28543] netlink: 'syz.7.9778': attribute type 4 has an invalid length. [ 382.488708][T28537] syz.5.9776: attempt to access beyond end of device [ 382.488708][T28537] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 382.503725][T28543] netlink: 'syz.7.9778': attribute type 4 has an invalid length. [ 382.505770][T28551] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 382.505770][T28551] program syz.0.9777 not setting count and/or reply_len properly [ 382.530645][T28537] syz.5.9776: attempt to access beyond end of device [ 382.530645][T28537] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 382.663114][T28579] atomic_op ffff8881009d0528 conn xmit_atomic 0000000000000000 [ 382.693545][T28585] netlink: 372 bytes leftover after parsing attributes in process `syz.1.9795'. [ 382.872614][T28598] SELinux: failed to load policy [ 382.936263][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9807'. [ 382.945699][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9807'. [ 382.953444][T28613] loop1: detected capacity change from 0 to 256 [ 382.963194][T28613] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.981100][T28613] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 382.989745][T28613] FAT-fs (loop1): Filesystem has been set read-only [ 383.113245][T28621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9810'. [ 383.143490][T28621] wireguard0: entered promiscuous mode [ 383.149295][T28621] wireguard0: entered allmulticast mode [ 383.270042][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 383.270055][ T29] audit: type=1326 audit(2000004187.344:31290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.4.9779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 383.299915][ T29] audit: type=1326 audit(2000004187.344:31291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28544 comm="syz.4.9779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e942de929 code=0x7ffc0000 [ 383.407291][ T29] audit: type=1400 audit(2000004187.481:31292): avc: denied { map } for pid=28632 comm="syz.1.9814" path="socket:[87640]" dev="sockfs" ino=87640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.430628][ T29] audit: type=1400 audit(2000004187.481:31293): avc: denied { read accept } for pid=28632 comm="syz.1.9814" path="socket:[87640]" dev="sockfs" ino=87640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.834839][T28646] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 383.846401][ T29] audit: type=1400 audit(2000004187.932:31294): avc: denied { relabelfrom } for pid=28645 comm="syz.7.9819" name="NETLINK" dev="sockfs" ino=86984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.871131][ T29] audit: type=1400 audit(2000004187.943:31295): avc: denied { relabelto } for pid=28645 comm="syz.7.9819" name="NETLINK" dev="sockfs" ino=86984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="/usr/lib/telepathy/mission-control-5" [ 383.901902][T28648] atomic_op ffff888119d82d28 conn xmit_atomic 0000000000000000 [ 384.179386][ T3593] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 384.193782][ T3593] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.335851][ T2958] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 384.349494][ T2958] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.410732][T28736] loop1: detected capacity change from 0 to 4096 [ 384.422575][T28736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.464854][T26490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.475189][ T29] audit: type=1400 audit(2000004188.583:31296): avc: denied { setattr } for pid=28735 comm="syz.1.9856" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.806843][T28784] loop1: detected capacity change from 0 to 128 [ 384.820337][T28784] syz.1.9874: attempt to access beyond end of device [ 384.820337][T28784] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 384.841605][T28782] IPv6: Can't replace route, no match found [ 385.027235][ T29] audit: type=1400 audit(2000004189.182:31297): avc: denied { ioctl } for pid=28808 comm="syz.1.9884" path="socket:[88260]" dev="sockfs" ino=88260 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.369240][T28843] pim6reg1: entered promiscuous mode [ 385.374614][T28843] pim6reg1: entered allmulticast mode [ 385.460520][ T29] audit: type=1326 audit(2000004189.644:31298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.7.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2275b0e929 code=0x7ffc0000 [ 385.486728][ T29] audit: type=1326 audit(2000004189.644:31299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.7.9890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2275b0e929 code=0x7ffc0000 [ 385.594730][T28858] loop7: detected capacity change from 0 to 4096 [ 385.604109][T28858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.638043][T28865] loop5: detected capacity change from 0 to 1024 [ 385.648776][T28865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.663654][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.679125][T28865] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.9896: Allocating blocks 449-513 which overlap fs metadata [ 385.702434][T28864] EXT4-fs (loop5): pa ffff888107141bd0: logic 48, phys. 177, len 21 [ 385.710523][T28864] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 385.729360][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.795823][T28884] SELinux: failed to load policy [ 385.911752][T28890] __nla_validate_parse: 3 callbacks suppressed [ 385.911768][T28890] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9902'. [ 386.018152][T28907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.590315][ T2958] usb usb2-port1: attempt power cycle [ 386.626174][T28944] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9915'. [ 386.723732][ T9] usb usb6-port1: attempt power cycle [ 386.756569][T28963] loop7: detected capacity change from 0 to 512 [ 386.772748][T28963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.786205][T28963] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.822581][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.364679][T29016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.647977][T29054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29054 comm=syz.7.9962 [ 387.660655][T29054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29054 comm=syz.7.9962 [ 387.759997][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9965'. [ 387.972471][T29097] loop1: detected capacity change from 0 to 1024 [ 387.982719][T29097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.995109][T29100] loop5: detected capacity change from 0 to 128 [ 388.002001][T29100] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.012031][T29097] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.9982: Allocating blocks 449-513 which overlap fs metadata [ 388.014081][T29100] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.041136][T29096] EXT4-fs (loop1): pa ffff888107141b60: logic 48, phys. 177, len 21 [ 388.049192][T29096] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 388.070647][T26490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.158425][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 388.158440][ T29] audit: type=1326 audit(2000004192.468:31423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.188336][ T29] audit: type=1326 audit(2000004192.468:31424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.212051][ T29] audit: type=1326 audit(2000004192.468:31425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.235829][ T29] audit: type=1326 audit(2000004192.468:31426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.259513][ T29] audit: type=1326 audit(2000004192.468:31427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.283107][ T29] audit: type=1326 audit(2000004192.468:31428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.306827][ T29] audit: type=1326 audit(2000004192.468:31429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.330403][ T29] audit: type=1326 audit(2000004192.468:31430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.353974][ T29] audit: type=1326 audit(2000004192.468:31431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.361974][ T2958] usb usb2-port1: unable to enumerate USB device [ 388.377586][ T29] audit: type=1326 audit(2000004192.468:31432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29115 comm="syz.1.9984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 388.600496][ T9] usb usb6-port1: unable to enumerate USB device [ 388.610548][T28810] hub 6-0:1.0: USB hub found [ 388.618866][T29156] loop5: detected capacity change from 0 to 256 [ 388.625928][T28810] hub 6-0:1.0: 8 ports detected [ 388.631027][T29156] FAT-fs (loop5): bogus number of FAT sectors [ 388.637140][T29156] FAT-fs (loop5): Can't find a valid FAT filesystem [ 388.676221][T29166] netlink: 'syz.4.10007': attribute type 1 has an invalid length. [ 388.684073][T29166] netlink: 'syz.4.10007': attribute type 2 has an invalid length. [ 388.696864][T29166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10007'. [ 389.029849][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10012'. [ 389.096413][T29189] loop7: detected capacity change from 0 to 128 [ 389.141214][T29189] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.161094][T29189] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.241252][T29200] loop7: detected capacity change from 0 to 2048 [ 389.271312][T29200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.284610][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10021'. [ 389.302337][T29200] EXT4-fs (loop7): shut down requested (0) [ 389.321562][T29200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 389.330674][T29200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 389.347630][T29200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 389.370343][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.407081][T29221] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10026'. [ 389.416234][T29221] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10026'. [ 389.425468][T29221] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10026'. [ 389.658362][T29256] netlink: 'syz.1.10038': attribute type 1 has an invalid length. [ 389.666230][T29256] netlink: 'syz.1.10038': attribute type 2 has an invalid length. [ 389.674607][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10038'. [ 389.686674][T29260] bond0: (slave team0): Releasing backup interface [ 389.696868][T29260] team0 (unregistering): Port device team_slave_0 removed [ 389.706678][T29260] team0 (unregistering): Port device team_slave_1 removed [ 389.845284][T29316] netlink: 'syz.0.10052': attribute type 10 has an invalid length. [ 389.860426][T29316] dummy0: entered promiscuous mode [ 389.867590][T29316] bond0: (slave dummy0): Releasing backup interface [ 389.883862][T29316] bridge0: port 3(dummy0) entered blocking state [ 389.890371][T29316] bridge0: port 3(dummy0) entered disabled state [ 389.897801][T29316] dummy0: entered allmulticast mode [ 389.904079][T29318] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 389.997913][T29336] loop0: detected capacity change from 0 to 1024 [ 390.013912][T29336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.034327][T29336] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.048899][T29336] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 390.064676][T29336] EXT4-fs (loop0): Remounting filesystem read-only [ 390.081567][T26458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.111372][T29362] netlink: 'syz.1.10068': attribute type 10 has an invalid length. [ 390.116143][T29361] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 390.126426][T29362] dummy0: entered promiscuous mode [ 390.143755][T29362] bridge0: port 3(dummy0) entered blocking state [ 390.150164][T29362] bridge0: port 3(dummy0) entered disabled state [ 390.158518][T29362] dummy0: entered allmulticast mode [ 390.166626][T29364] x_tables: duplicate underflow at hook 1 [ 390.173778][T29362] bridge0: port 3(dummy0) entered blocking state [ 390.180306][T29362] bridge0: port 3(dummy0) entered forwarding state [ 390.218519][T29374] loop1: detected capacity change from 0 to 128 [ 390.246909][T29377] netlink: 'syz.4.10075': attribute type 1 has an invalid length. [ 390.257779][T29379] loop7: detected capacity change from 0 to 256 [ 390.390989][ T3593] usb usb6-port1: attempt power cycle [ 390.658075][T29403] serio: Serial port ptm0 [ 390.856189][T29432] netlink: 'syz.4.10092': attribute type 10 has an invalid length. [ 390.864321][T29432] __nla_validate_parse: 6 callbacks suppressed [ 390.864330][T29432] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10092'. [ 391.016246][T29450] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10099'. [ 391.032751][T29452] loop0: detected capacity change from 0 to 512 [ 391.041477][T29452] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.049589][T29452] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 391.058414][T29452] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.10100: attempt to clear invalid blocks 2 len 1 [ 391.071704][T29452] EXT4-fs (loop0): Remounting filesystem read-only [ 391.078578][T29452] EXT4-fs (loop0): 1 truncate cleaned up [ 391.084670][T29452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.091199][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10101'. [ 391.106179][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10101'. [ 391.127972][T26458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.337490][T29492] team0 (unregistering): Port device team_slave_0 removed [ 391.358096][T29492] team0 (unregistering): Port device team_slave_1 removed [ 391.562186][T29562] loop1: detected capacity change from 0 to 256 [ 391.648492][T29580] xt_hashlimit: max too large, truncated to 1048576 [ 391.767403][T29597] serio: Serial port ptm0 [ 391.814230][T29609] loop1: detected capacity change from 0 to 128 [ 391.823719][T29609] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.836830][T29609] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 391.837711][T29614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.878495][T29614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.927371][T26490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.987898][T29636] pim6reg1: entered promiscuous mode [ 391.993407][T29636] pim6reg1: entered allmulticast mode [ 392.134208][ T3593] usb usb6-port1: unable to enumerate USB device [ 392.249953][T29702] netlink: 'syz.1.10168': attribute type 10 has an invalid length. [ 392.257946][T29702] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10168'. [ 392.306801][T29710] loop1: detected capacity change from 0 to 2048 [ 392.374967][T29710] loop1: unable to read partition table [ 392.380845][T29710] loop1: partition table beyond EOD, truncated [ 392.387073][T29710] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 393.477365][T29750] netlink: 'syz.0.10184': attribute type 10 has an invalid length. [ 393.485398][T29750] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10184'. [ 393.528930][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 393.528945][ T29] audit: type=1326 audit(2000004198.115:31684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29737 comm="syz.1.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 393.558833][ T29] audit: type=1326 audit(2000004198.115:31685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29737 comm="syz.1.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81c5ae929 code=0x7ffc0000 [ 393.589035][T29753] loop0: detected capacity change from 0 to 2048 [ 393.672406][T29753] loop0: unable to read partition table [ 393.678485][T29753] loop0: partition table beyond EOD, truncated [ 393.684743][T29753] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 393.699034][T29773] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10192'. [ 393.765142][T29785] ref_ctr_offset mismatch. inode: 0x4df offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 393.894851][ T29] audit: type=1326 audit(2000004198.493:31686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 393.918743][ T29] audit: type=1326 audit(2000004198.493:31687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 393.942470][ T29] audit: type=1326 audit(2000004198.493:31688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 393.966679][ T29] audit: type=1326 audit(2000004198.493:31689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 393.990435][ T29] audit: type=1326 audit(2000004198.493:31690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 394.014248][ T29] audit: type=1326 audit(2000004198.504:31691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 394.038027][ T29] audit: type=1326 audit(2000004198.598:31692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 394.061744][ T29] audit: type=1326 audit(2000004198.598:31693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29815 comm="syz.0.10205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 394.116581][T29818] loop7: detected capacity change from 0 to 164 [ 394.123733][T29818] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 394.132973][T29818] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 394.190678][T29845] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10211'. [ 394.314485][T29869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10217'. [ 394.412068][T29876] SELinux: policydb version 0 does not match my version range 15-34 [ 394.420475][T29876] SELinux: failed to load policy [ 394.520596][T29898] loop7: detected capacity change from 0 to 8192 [ 394.622877][T29929] SELinux: policydb version 0 does not match my version range 15-34 [ 394.635085][T29929] SELinux: failed to load policy [ 394.650224][T29933] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 394.690431][T29935] 9pnet_fd: Insufficient options for proto=fd [ 394.750698][T29944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10241'. [ 394.871156][T29967] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 395.026677][T29995] loop7: detected capacity change from 0 to 128 [ 395.042284][T29998] tipc: Started in network mode [ 395.047299][T29998] tipc: Node identity ac14140f, cluster identity 4711 [ 395.055597][T29998] tipc: New replicast peer: 255.255.255.255 [ 395.061846][T29998] tipc: Enabled bearer , priority 7 [ 395.087783][T30002] loop1: detected capacity change from 0 to 164 [ 395.095277][T30002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.105073][T30002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.303799][T30058] loop7: detected capacity change from 0 to 128 [ 395.319851][T30058] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.332629][T30058] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.366190][T26456] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.559557][T30087] netlink: 'syz.7.10284': attribute type 3 has an invalid length. [ 395.616179][T30095] wireguard0: entered promiscuous mode [ 395.621860][T30095] wireguard0: entered allmulticast mode [ 395.869136][T25340] usb usb2-port1: attempt power cycle [ 396.011073][ T3527] tipc: Node number set to 2886997007 [ 396.513166][T30153] sd 0:0:1:0: device reset [ 396.576534][T30162] loop1: detected capacity change from 0 to 128 [ 396.595153][T30162] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.614005][T30162] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.657297][T26490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.702988][T30174] loop1: detected capacity change from 0 to 512 [ 396.730421][T30179] __nla_validate_parse: 6 callbacks suppressed [ 396.730473][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10319'. [ 396.745776][T30179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10319'. [ 396.758261][T30179] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.767049][T30179] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.775944][T30179] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.784686][T30179] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.835520][T30174] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 396.851238][T30174] EXT4-fs (loop1): mount failed [ 396.857978][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10319'. [ 396.867098][T30179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10319'. [ 396.971736][T30194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10323'. [ 397.112968][T30212] loop7: detected capacity change from 0 to 16384 [ 397.630563][T25340] usb usb2-port1: unable to enumerate USB device [ 397.637079][T29823] vhci_hcd: invalid port number 224 [ 397.673992][T30235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10339'. [ 397.683022][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10339'. [ 397.695699][T30235] wireguard0: entered promiscuous mode [ 397.701288][T30235] wireguard0: entered allmulticast mode [ 397.784027][T30253] loop0: detected capacity change from 0 to 512 [ 397.803355][T30253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.816450][T30253] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.839629][T26458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.169027][T30314] serio: Serial port ptm0 [ 398.321897][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 398.321989][ T29] audit: type=1400 audit(2000004203.144:31998): avc: denied { create } for pid=30328 comm="syz.5.10376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 398.322881][T30329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10376'. [ 398.339614][ T29] audit: type=1400 audit(2000004203.144:31999): avc: denied { write } for pid=30328 comm="syz.5.10376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 398.888501][ T29] audit: type=1400 audit(2000004203.732:32000): avc: denied { open } for pid=30331 comm="syz.7.10377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 398.908045][ T29] audit: type=1400 audit(2000004203.732:32001): avc: denied { kernel } for pid=30331 comm="syz.7.10377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 398.927850][ T29] audit: type=1400 audit(2000004203.732:32002): avc: denied { read write } for pid=30330 comm="syz.5.10378" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 398.951668][ T29] audit: type=1400 audit(2000004203.732:32003): avc: denied { open } for pid=30330 comm="syz.5.10378" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 398.955538][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x1 [ 398.975234][ T29] audit: type=1400 audit(2000004203.742:32004): avc: denied { tracepoint } for pid=30331 comm="syz.7.10377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 398.982602][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.010114][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.017625][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.025149][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.032746][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.040181][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x4 [ 399.047676][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.055140][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.062565][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.069988][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x2 [ 399.077444][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.084918][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.092630][ T2958] usb usb6-port1: attempt power cycle [ 399.093606][ T29] audit: type=1400 audit(2000004203.931:32005): avc: denied { module_request } for pid=30334 comm="syz.4.10387" kmod="crypto-rfc7539(chacha20,poly1305)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 399.121978][ T29] audit: type=1400 audit(2000004203.952:32006): avc: denied { map } for pid=30320 comm="syz.0.10372" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.122070][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.146448][ T29] audit: type=1400 audit(2000004203.952:32007): avc: denied { read write } for pid=30320 comm="syz.0.10372" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.178971][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.186497][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.194106][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x2 [ 399.201595][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.209090][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.216654][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.224176][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.231680][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.239178][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.246788][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.254296][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.261788][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.269269][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.276748][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.284364][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.291896][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.299455][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.306880][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.314358][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.321880][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.329361][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.336870][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.338923][T30344] loop0: detected capacity change from 0 to 256 [ 399.344283][ T3527] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 399.374029][ T3527] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 399.429643][T30360] netlink: 'syz.0.10382': attribute type 1 has an invalid length. [ 399.483467][T30387] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 399.575435][T30389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.585046][T30389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.620541][T30397] Falling back ldisc for ptm0. [ 399.673212][T30413] loop5: detected capacity change from 0 to 512 [ 399.683621][T30413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 399.702556][T30413] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.10393: Unimplemented hash flags: 0x0001 [ 399.714214][T30413] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10393: Corrupt directory, running e2fsck is recommended [ 399.734335][T30413] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.10393: Unimplemented hash flags: 0x0001 [ 399.746211][T30413] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10393: Corrupt directory, running e2fsck is recommended [ 399.762026][T30413] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.10393: Unimplemented hash flags: 0x0001 [ 399.773761][T30413] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10393: Corrupt directory, running e2fsck is recommended [ 399.806526][T30413] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.10393: Unimplemented hash flags: 0x0001 [ 399.818343][T30413] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10393: Corrupt directory, running e2fsck is recommended [ 399.832564][T30413] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.10393: Unimplemented hash flags: 0x0001 [ 399.844285][T30413] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10393: Corrupt directory, running e2fsck is recommended [ 399.874489][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.917555][T30441] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10405'. [ 399.988051][T30451] netlink: 271 bytes leftover after parsing attributes in process `syz.5.10410'. [ 400.032723][T30457] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 400.100373][T30466] loop7: detected capacity change from 0 to 512 [ 400.110537][T30466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 400.127855][T30466] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.10417: Unimplemented hash flags: 0x0001 [ 400.139571][T30466] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.10417: Corrupt directory, running e2fsck is recommended [ 400.156093][T30466] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.10417: Unimplemented hash flags: 0x0001 [ 400.167803][T30466] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.10417: Corrupt directory, running e2fsck is recommended [ 400.197718][T30466] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.10417: Unimplemented hash flags: 0x0001 [ 400.209412][T30466] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.10417: Corrupt directory, running e2fsck is recommended [ 400.223371][T30466] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.10417: Unimplemented hash flags: 0x0001 [ 400.235177][T30466] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.10417: Corrupt directory, running e2fsck is recommended [ 400.249309][T30466] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.10417: Unimplemented hash flags: 0x0001 [ 400.260947][T30466] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.10417: Corrupt directory, running e2fsck is recommended [ 400.285069][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.330242][T30479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.342088][T30479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.706798][T30496] chnl_net:caif_netlink_parms(): no params data found [ 400.740738][T30496] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.748020][T30496] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.755269][T30496] bridge_slave_0: entered allmulticast mode [ 400.761669][T30496] bridge_slave_0: entered promiscuous mode [ 400.768652][T30496] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.775763][T30496] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.782956][T30496] bridge_slave_1: entered allmulticast mode [ 400.789587][T30496] bridge_slave_1: entered promiscuous mode [ 400.807971][T30496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.818156][T30496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.839421][T30496] team0: Port device team_slave_0 added [ 400.849811][T30496] team0: Port device team_slave_1 added [ 400.862909][T30709] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 400.869449][T30709] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 400.877156][T30709] vhci_hcd vhci_hcd.0: Device attached [ 400.886332][T30709] loop5: detected capacity change from 0 to 512 [ 400.896986][T30496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.904051][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.930428][T30496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.937129][T30709] EXT4-fs (loop5): 1 orphan inode deleted [ 400.942005][T30496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.953790][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.963400][T30709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.979797][T30496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.003358][ T8202] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 1 [ 401.018495][T30709] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.040639][ T2958] usb usb6-port1: unable to enumerate USB device [ 401.049404][T30222] hub 6-0:1.0: USB hub found [ 401.054342][T30714] vhci_hcd: connection closed [ 401.054826][T30222] hub 6-0:1.0: 8 ports detected [ 401.055147][ T8212] vhci_hcd: stop threads [ 401.068699][ T8212] vhci_hcd: release socket [ 401.073173][ T8212] vhci_hcd: disconnect device [ 401.081752][T30496] hsr_slave_0: entered promiscuous mode [ 401.087854][T30496] hsr_slave_1: entered promiscuous mode [ 401.093903][T30496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.102103][T30496] Cannot create hsr debugfs directory [ 401.372821][T30496] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 401.382659][T30496] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 401.391984][T30496] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 401.400820][T30496] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.443886][T30496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.455921][T30880] loop7: detected capacity change from 0 to 512 [ 401.456936][T30496] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.462933][T30880] EXT4-fs: Ignoring removed nobh option [ 401.472791][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.481514][ T8212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.492432][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.499625][ T8212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.508020][T30880] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10441: iget: bad i_size value: 38620345925642 [ 401.521107][T30880] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10441: couldn't read orphan inode 15 (err -117) [ 401.534105][T30880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.538797][T30496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.556944][T30496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.582281][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.583112][T30880] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.10441: bg 0: block 5: invalid block bitmap [ 401.634284][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.643123][T30496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.842376][T30496] veth0_vlan: entered promiscuous mode [ 401.852160][T30496] veth1_vlan: entered promiscuous mode [ 401.870004][T30496] veth0_macvtap: entered promiscuous mode [ 401.877443][T30496] veth1_macvtap: entered promiscuous mode [ 401.909260][T30496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.929721][T30496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.947025][T30496] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.955885][T30496] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.964588][T30496] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.973460][T30496] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.123816][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x1 [ 402.131327][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.138804][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.146322][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.153733][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.161269][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.168732][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x4 [ 402.176294][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.183843][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.191303][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.198873][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 402.206312][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.213763][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.222131][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.229588][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.237150][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.244592][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 402.252187][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.259582][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.267213][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.274830][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.282268][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.289786][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.297252][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.304705][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.312316][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.319940][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.327507][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.334905][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.342408][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.349942][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.357511][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.364964][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.372444][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.380122][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.387695][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.395181][ T3593] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 402.401879][T30945] loop5: detected capacity change from 0 to 512 [ 402.414877][T30945] EXT4-fs: Ignoring removed nobh option [ 402.423079][T30945] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.10453: iget: bad i_size value: 38620345925642 [ 402.440872][ T3593] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 402.456660][T30945] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.10453: couldn't read orphan inode 15 (err -117) [ 402.503990][T30945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.522886][T30945] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10453: bg 0: block 5: invalid block bitmap [ 402.547792][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.636997][T30971] __nla_validate_parse: 1 callbacks suppressed [ 402.637012][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10461'. [ 402.749448][ T3385] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 402.756956][ T3385] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 402.764346][ T3385] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 402.772301][ T3385] hid-generic 0000:0004:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 402.869699][ T2958] usb usb6-port1: attempt power cycle [ 402.879543][T30992] ªªªªªª: renamed from vlan0 (while UP) [ 403.240499][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 403.240514][ T29] audit: type=1400 audit(2000004208.298:32194): avc: denied { mounton } for pid=31001 comm="syz.5.10485" path="/378/file0" dev="tmpfs" ino=1996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 403.275262][ T29] audit: type=1326 audit(2000004208.340:32195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.302695][ T29] audit: type=1326 audit(2000004208.340:32196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.326647][ T29] audit: type=1326 audit(2000004208.340:32197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.350429][ T29] audit: type=1326 audit(2000004208.340:32198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.374134][ T29] audit: type=1326 audit(2000004208.340:32199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.397942][ T29] audit: type=1326 audit(2000004208.340:32200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.421881][ T29] audit: type=1326 audit(2000004208.340:32201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.445586][ T29] audit: type=1326 audit(2000004208.340:32202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.469333][ T29] audit: type=1326 audit(2000004208.340:32203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127062e929 code=0x7ffc0000 [ 403.552861][T31017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.562764][T31017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.607050][T31029] netlink: 'syz.5.10487': attribute type 21 has an invalid length. [ 403.615101][T31029] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.989971][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10488'. [ 404.066636][T31035] loop0: detected capacity change from 0 to 512 [ 404.083871][T31035] EXT4-fs: Ignoring removed nobh option [ 404.094655][T31035] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.10489: iget: bad i_size value: 38620345925642 [ 404.110228][T31035] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.10489: couldn't read orphan inode 15 (err -117) [ 404.124047][T31035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.142035][T31035] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.10489: bg 0: block 5: invalid block bitmap [ 404.167942][T26458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.642129][T31070] netlink: 51 bytes leftover after parsing attributes in process `syz.8.10500'. [ 404.698889][ T2958] usb usb6-port1: unable to enumerate USB device [ 405.396819][T31142] loop7: detected capacity change from 0 to 128 [ 405.404963][T31142] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.417223][T31142] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.439493][T26456] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.530624][T31159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.540213][T31159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.574601][T31167] netlink: 'syz.1.10536': attribute type 2 has an invalid length. [ 405.582545][T31167] netlink: 'syz.1.10536': attribute type 1 has an invalid length. [ 405.590438][T31167] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10536'. [ 405.691878][T31179] SELinux: ebitmap: truncated map [ 405.697494][T31179] SELinux: failed to load policy [ 405.764067][T31194] netlink: 51 bytes leftover after parsing attributes in process `syz.0.10548'. [ 405.861837][T31211] loop1: detected capacity change from 0 to 128 [ 405.888836][T31211] syz.1.10557: attempt to access beyond end of device [ 405.888836][T31211] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 405.916041][T31211] syz.1.10557: attempt to access beyond end of device [ 405.916041][T31211] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 405.941845][T31211] syz.1.10557: attempt to access beyond end of device [ 405.941845][T31211] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 405.975928][T31211] syz.1.10557: attempt to access beyond end of device [ 405.975928][T31211] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 405.990290][T31211] syz.1.10557: attempt to access beyond end of device [ 405.990290][T31211] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 406.004634][T31211] syz.1.10557: attempt to access beyond end of device [ 406.004634][T31211] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 406.020972][T31211] syz.1.10557: attempt to access beyond end of device [ 406.020972][T31211] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 406.038666][T31211] syz.1.10557: attempt to access beyond end of device [ 406.038666][T31211] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 406.054502][T31211] syz.1.10557: attempt to access beyond end of device [ 406.054502][T31211] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 406.159949][T31245] loop1: detected capacity change from 0 to 2048 [ 406.203804][T31245] Alternate GPT is invalid, using primary GPT. [ 406.210079][T31245] loop1: p1 p2 p3 [ 406.305553][T31272] loop1: detected capacity change from 0 to 1024 [ 406.320236][T31272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.338957][T31272] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.364004][T31272] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.10576: Freeing blocks not in datazone - block = 0, count = 16 [ 406.396154][T26490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.405784][T31280] loop8: detected capacity change from 0 to 1024 [ 406.435620][T31280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.448130][T31280] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.463724][T31280] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.10578: lblock 1 mapped to illegal pblock 1 (length 1) [ 406.479189][T31280] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 406.491536][T31280] EXT4-fs (loop8): This should not happen!! Data will be lost [ 406.491536][T31280] [ 406.511724][T30496] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.555327][T31304] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 406.724455][T31338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10601'. [ 406.733718][T31338] netem: change failed [ 406.764650][T31358] loop8: detected capacity change from 0 to 512 [ 406.785855][T31358] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 406.802059][T31358] EXT4-fs (loop8): invalid journal inode [ 406.813136][T31358] EXT4-fs (loop8): can't get journal size [ 406.828992][T31358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 406.845889][T31358] System zones: 1-12, 13-13 [ 406.867786][T31358] EXT4-fs (loop8): 1 truncate cleaned up [ 406.895670][T31358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.945713][T30496] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.102269][T31420] loop5: detected capacity change from 0 to 164 [ 407.110265][T31420] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 407.402569][T31531] loop5: detected capacity change from 0 to 128 [ 407.443367][T31455] chnl_net:caif_netlink_parms(): no params data found [ 407.448205][T31531] syz.5.10634: attempt to access beyond end of device [ 407.448205][T31531] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 407.570320][T31455] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.577724][T31455] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.617130][T31455] bridge_slave_0: entered allmulticast mode [ 407.635753][T31455] bridge_slave_0: entered promiscuous mode [ 407.651076][T31455] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.658397][T31455] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.678794][T31455] bridge_slave_1: entered allmulticast mode [ 407.687037][T31455] bridge_slave_1: entered promiscuous mode [ 407.714237][T31455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.728654][T31455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.756965][T31639] SELinux: ebitmap: truncated map [ 407.768170][T31639] SELinux: failed to load policy [ 407.787627][T31455] team0: Port device team_slave_0 added [ 407.805433][T31455] team0: Port device team_slave_1 added [ 407.842324][T31455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.849314][T31455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.875400][T31455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.889027][T31455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.896116][T31455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.922104][T31455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.983659][T31455] hsr_slave_0: entered promiscuous mode [ 407.994845][T31455] hsr_slave_1: entered promiscuous mode [ 408.001315][T31734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10647'. [ 408.011218][T31455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.026572][T31455] Cannot create hsr debugfs directory [ 408.043471][T31735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10646'. [ 408.057451][T31735] netem: change failed [ 408.103450][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 408.103506][ T29] audit: type=1400 audit(2000004213.411:32439): avc: denied { read } for pid=31775 comm="syz.1.10652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.190972][T31809] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10656'. [ 408.236799][T31809] batadv1: entered promiscuous mode [ 408.242113][T31809] batadv1: entered allmulticast mode [ 408.311773][T31851] loop8: detected capacity change from 0 to 164 [ 408.321076][T31851] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 408.330188][T31856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10663'. [ 408.351074][T31856] netem: change failed [ 408.385018][ T29] audit: type=1326 audit(2000004213.715:32440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.408848][ T29] audit: type=1326 audit(2000004213.715:32441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.464631][ T29] audit: type=1326 audit(2000004213.757:32442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.488371][ T29] audit: type=1326 audit(2000004213.757:32443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.512547][ T29] audit: type=1326 audit(2000004213.757:32444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.536469][ T29] audit: type=1326 audit(2000004213.757:32445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.560178][ T29] audit: type=1326 audit(2000004213.757:32446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.583978][ T29] audit: type=1326 audit(2000004213.757:32447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.608044][ T29] audit: type=1326 audit(2000004213.757:32448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31870 comm="syz.8.10667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 408.666017][T31455] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 408.689147][T31455] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 408.717433][T31455] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 408.743431][T31455] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 408.845345][T31455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.861182][T31455] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.872356][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.879425][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.902903][T31455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.913514][T31455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.931455][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.938834][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.058191][T31455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.129567][T31975] loop5: detected capacity change from 0 to 128 [ 409.153699][T31975] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.158723][T31984] loop1: detected capacity change from 0 to 512 [ 409.171202][T31975] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.210262][T25138] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.211074][T31984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.232970][T31984] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.264034][T31984] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 409.287391][T26490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.320261][T31455] veth0_vlan: entered promiscuous mode [ 409.346971][T31455] veth1_vlan: entered promiscuous mode [ 409.363062][T32024] loop5: detected capacity change from 0 to 512 [ 409.371565][T32024] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 409.385635][T32024] EXT4-fs (loop5): invalid journal inode [ 409.388273][T31455] veth0_macvtap: entered promiscuous mode [ 409.391335][T32024] EXT4-fs (loop5): can't get journal size [ 409.400547][T31455] veth1_macvtap: entered promiscuous mode [ 409.403630][T32024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 409.416908][T32024] System zones: 1-12, 13-13 [ 409.417426][T31455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.428859][T32024] EXT4-fs (loop5): 1 truncate cleaned up [ 409.434979][T32024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.437415][T31455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.458615][T31455] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.467634][T31455] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.476436][T31455] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.485293][T31455] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.523172][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.554994][T32040] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10711'. [ 409.840427][T32069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10710'. [ 409.910558][T32077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10724'. [ 409.961780][T32086] loop5: detected capacity change from 0 to 512 [ 409.968496][T32086] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.975065][T32086] EXT4-fs: Ignoring removed bh option [ 409.985327][T32086] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 409.996621][T32086] EXT4-fs (loop5): 1 truncate cleaned up [ 410.002751][T32086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.101544][T25138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.163367][T32113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10727'. [ 410.172497][T32113] netlink: 'syz.5.10727': attribute type 7 has an invalid length. [ 410.180388][T32113] netlink: 'syz.5.10727': attribute type 8 has an invalid length. [ 410.188304][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10727'. [ 410.773106][T32175] loop1: detected capacity change from 0 to 128 [ 410.781345][T32175] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.794056][T32175] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.819481][T26490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.964084][T32197] netlink: 'syz.1.10747': attribute type 3 has an invalid length. [ 410.971967][T32197] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.10747'. [ 411.000935][T32203] netlink: 'syz.1.10750': attribute type 1 has an invalid length. [ 411.303740][T32238] netlink: 'syz.9.10764': attribute type 1 has an invalid length. [ 411.517320][T32260] loop8: detected capacity change from 0 to 8192 [ 411.904925][T32322] loop8: detected capacity change from 0 to 2048 [ 411.933985][T32322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.953661][T32316] program syz.5.10795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.108025][T30496] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.217470][T32344] loop8: detected capacity change from 0 to 512 [ 412.224684][T32344] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.231205][T32344] EXT4-fs: Ignoring removed bh option [ 412.237422][T32344] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 412.249697][T32344] EXT4-fs (loop8): 1 truncate cleaned up [ 412.257425][T32344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.475998][T30496] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.559605][T32389] netlink: 'syz.5.10818': attribute type 3 has an invalid length. [ 412.734309][T32408] loop9: detected capacity change from 0 to 512 [ 412.741333][T32408] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.747900][T32408] EXT4-fs: Ignoring removed bh option [ 412.754286][T32408] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 412.767914][T32408] EXT4-fs (loop9): 1 truncate cleaned up [ 412.780806][T32408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.992437][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 412.992451][ T29] audit: type=1400 audit(2000004218.545:32622): avc: denied { connect } for pid=32436 comm="syz.7.10839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.037430][T31455] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.049891][ T29] audit: type=1326 audit(2000004218.608:32623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.073774][ T29] audit: type=1326 audit(2000004218.608:32624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.099234][ T29] audit: type=1326 audit(2000004218.650:32625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.122915][ T29] audit: type=1326 audit(2000004218.650:32626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.146730][ T29] audit: type=1326 audit(2000004218.650:32627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.170599][ T29] audit: type=1326 audit(2000004218.650:32628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.194323][ T29] audit: type=1326 audit(2000004218.650:32629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.218129][ T29] audit: type=1326 audit(2000004218.650:32630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.241953][ T29] audit: type=1326 audit(2000004218.650:32631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32440 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f900e929 code=0x7ffc0000 [ 413.268419][T32447] serio: Serial port ptm0 [ 413.413194][T32482] loop1: detected capacity change from 0 to 512 [ 413.419649][T32478] loop5: detected capacity change from 0 to 8192 [ 413.428526][T32482] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.435063][T32482] EXT4-fs: Ignoring removed bh option [ 413.456240][T32482] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 413.499811][T32482] EXT4-fs (loop1): 1 truncate cleaned up [ 413.511592][T32482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.714846][T32528] __nla_validate_parse: 5 callbacks suppressed [ 413.714863][T32528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10871'. [ 413.721321][T26490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.730019][T32528] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10871'. [ 413.885927][T32558] loop7: detected capacity change from 0 to 2048 [ 413.914410][T32558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.990233][T32575] SELinux: failed to load policy [ 414.057337][T32598] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 414.112688][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.235428][T32629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.245396][T32629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.254767][T32629] netlink: 27 bytes leftover after parsing attributes in process `syz.9.10912'. [ 414.310592][T32643] loop7: detected capacity change from 0 to 512 [ 414.320074][T32643] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10918: bg 0: block 393: padding at end of block bitmap is not set [ 414.335491][T32643] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 414.345491][T32643] EXT4-fs (loop7): 2 truncates cleaned up [ 414.351791][T32643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.378376][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.468273][T32661] SELinux: failed to load policy [ 414.495102][T32668] loop5: detected capacity change from 0 to 2048 [ 414.511866][T32674] serio: Serial port ptm0 [ 414.540057][T32668] Alternate GPT is invalid, using primary GPT. [ 414.546385][T32668] loop5: p1 p2 p3 [ 414.681472][T32726] sd 0:0:1:0: device reset [ 414.726253][T32737] SELinux: failed to load policy [ 414.746801][T32741] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10953'. [ 414.859285][T32755] loop7: detected capacity change from 0 to 1024 [ 414.866867][T32755] EXT4-fs: Ignoring removed orlov option [ 414.883908][T32755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.961608][ T302] SELinux: failed to load policy [ 415.053741][ T303] ================================================================== [ 415.061861][ T303] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 415.071277][ T303] [ 415.073612][ T303] read-write to 0xffff8881072eba18 of 4 bytes by task 32755 on cpu 1: [ 415.081767][ T303] __writeback_single_inode+0x1e3/0x7c0 [ 415.087323][ T303] writeback_single_inode+0x167/0x3e0 [ 415.092690][ T303] sync_inode_metadata+0x5b/0x90 [ 415.097630][ T303] generic_buffers_fsync_noflush+0xd9/0x120 [ 415.103531][ T303] ext4_sync_file+0x1ab/0x690 [ 415.108204][ T303] vfs_fsync_range+0x10a/0x130 [ 415.112978][ T303] ext4_buffered_write_iter+0x34f/0x3c0 [ 415.118519][ T303] ext4_file_write_iter+0x383/0xf00 [ 415.123711][ T303] iter_file_splice_write+0x5ef/0x970 [ 415.129081][ T303] direct_splice_actor+0x153/0x2a0 [ 415.134199][ T303] splice_direct_to_actor+0x30f/0x680 [ 415.139571][ T303] do_splice_direct+0xda/0x150 [ 415.144332][ T303] do_sendfile+0x380/0x650 [ 415.148741][ T303] __x64_sys_sendfile64+0x105/0x150 [ 415.153935][ T303] x64_sys_call+0xb39/0x2fb0 [ 415.158520][ T303] do_syscall_64+0xd2/0x200 [ 415.163014][ T303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.168899][ T303] [ 415.171211][ T303] read to 0xffff8881072eba18 of 4 bytes by task 303 on cpu 0: [ 415.178658][ T303] generic_buffers_fsync_noflush+0x80/0x120 [ 415.184553][ T303] ext4_sync_file+0x1ab/0x690 [ 415.189225][ T303] vfs_fsync_range+0x10a/0x130 [ 415.193988][ T303] ext4_buffered_write_iter+0x34f/0x3c0 [ 415.199529][ T303] ext4_file_write_iter+0x383/0xf00 [ 415.204719][ T303] iter_file_splice_write+0x5ef/0x970 [ 415.210102][ T303] direct_splice_actor+0x153/0x2a0 [ 415.215215][ T303] splice_direct_to_actor+0x30f/0x680 [ 415.220586][ T303] do_splice_direct+0xda/0x150 [ 415.225351][ T303] do_sendfile+0x380/0x650 [ 415.229766][ T303] __x64_sys_sendfile64+0x105/0x150 [ 415.234959][ T303] x64_sys_call+0xb39/0x2fb0 [ 415.239543][ T303] do_syscall_64+0xd2/0x200 [ 415.244038][ T303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.249927][ T303] [ 415.252336][ T303] value changed: 0x0000003a -> 0x00000002 [ 415.258038][ T303] [ 415.260361][ T303] Reported by Kernel Concurrency Sanitizer on: [ 415.266497][ T303] CPU: 0 UID: 0 PID: 303 Comm: syz.7.10960 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(voluntary) [ 415.278931][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.289234][ T303] ================================================================== [ 415.317846][T26456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.