last executing test programs: 5m26.703469201s ago: executing program 0 (id=1471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xprtrdma_post_linv_err\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f612e302e30"], 0x0, 0x52}, 0x28) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0) 5m25.72596959s ago: executing program 0 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="60000000000b01030000000000000000000000030800034000000001090001002a2a6e5c000000000500010000000000050001000000000008000340000000010500010000000000070001002d7d000008000240"], 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 5m25.496807318s ago: executing program 0 (id=1484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r1 = open(0x0, 0x10000, 0x0) getdents(r1, 0x0, 0x0) unshare(0x28000600) r2 = mq_open(&(0x7f0000000080)='$\x00', 0x41, 0x4a, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x4, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40045506, 0x0) 5m24.644171507s ago: executing program 0 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5m24.507542538s ago: executing program 0 (id=1507): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 5m24.095267211s ago: executing program 0 (id=1514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 5m23.767708158s ago: executing program 32 (id=1514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 4m57.742843805s ago: executing program 4 (id=1693): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}]}}, 0x0, 0x32}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c00000800038004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4b", 0x2a}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 4m53.183625422s ago: executing program 3 (id=1722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x80) 4m53.036767933s ago: executing program 3 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) 4m52.619615507s ago: executing program 3 (id=1724): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 4m51.418864054s ago: executing program 3 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 4m50.861035719s ago: executing program 3 (id=1730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000001480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000100ff02000000000000000000000000000100000e22006490780200"], 0x0) 4m50.207614342s ago: executing program 3 (id=1735): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39be, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 4m49.783866696s ago: executing program 33 (id=1735): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39be, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 4m49.764142108s ago: executing program 4 (id=1737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf775728", 0x7}], 0x2) 4m49.199829973s ago: executing program 4 (id=1744): openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m48.774747307s ago: executing program 4 (id=1747): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 4m48.4848805s ago: executing program 4 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 4m47.859551581s ago: executing program 4 (id=1752): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2000d0c0}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 4m47.591970252s ago: executing program 34 (id=1752): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2000d0c0}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 13.786941959s ago: executing program 6 (id=3480): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 13.669852888s ago: executing program 6 (id=3482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f612e302e30"], 0x0, 0x52}, 0x28) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0) 11.572900758s ago: executing program 6 (id=3493): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 11.4200265s ago: executing program 6 (id=3496): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 7.478868598s ago: executing program 6 (id=3509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 7.365017307s ago: executing program 2 (id=3502): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) 7.227669048s ago: executing program 2 (id=3503): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000007ccfb6fbdcec0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 6.9535869s ago: executing program 2 (id=3506): r0 = socket(0x1e, 0x805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r0) 6.656639294s ago: executing program 2 (id=3511): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x138000, 0x1000, 0x0, 0x4000000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, r5, 0x2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x14, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x10001, 0x200, 0xa, 0x4, 0x4, 0x1}, {0x6, 0x2, 0x4d, 0x100000000, 0x3, 0x3c9c}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) 4.703680741s ago: executing program 1 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 4.570366282s ago: executing program 1 (id=3518): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xa) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fdatasync(r2) statfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000c00)=""/232) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) rmdir(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.035671025s ago: executing program 5 (id=3521): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) 3.60047184s ago: executing program 1 (id=3522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x2000, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x5, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x2, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x402, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x0, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x6, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x103, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x80000001, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.172110755s ago: executing program 5 (id=3523): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000080000001"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"/314, @ANYRES16=r0], 0x21c}}, 0x0) 1.216264582s ago: executing program 2 (id=3524): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000007ccfb6fbdcec0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 1.215986092s ago: executing program 1 (id=3525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.206391613s ago: executing program 5 (id=3526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 1.175194865s ago: executing program 6 (id=3527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xprtrdma_post_linv_err\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f612e302e30"], 0x0, 0x52}, 0x28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0) 1.150540817s ago: executing program 5 (id=3528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 992.83143ms ago: executing program 5 (id=3529): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 986.3616ms ago: executing program 2 (id=3530): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xa) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fdatasync(r2) statfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000c00)=""/232) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) rmdir(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 701.081233ms ago: executing program 1 (id=3531): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) 95.616033ms ago: executing program 1 (id=3532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 0s ago: executing program 5 (id=3533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x138000, 0x1000, 0x0, 0x4000000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, r5, 0x2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x14, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x10001, 0x200, 0xa, 0x4, 0x4, 0x1}, {0x6, 0x2, 0x4d, 0x100000000, 0x3, 0x3c9c}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) kernel console output (not intermixed with test programs): ubj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 832.682008][ T28] audit: type=1326 audit(1755206789.875:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 832.742464][ T28] audit: type=1326 audit(1755206789.875:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 832.796714][ T28] audit: type=1326 audit(1755206789.875:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 832.859184][ T28] audit: type=1326 audit(1755206789.875:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 832.927655][ T28] audit: type=1326 audit(1755206789.875:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 833.006340][ T28] audit: type=1326 audit(1755206789.885:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 833.093364][ T28] audit: type=1326 audit(1755206789.885:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 833.221427][T13650] loop2: detected capacity change from 0 to 512 [ 833.234941][T13650] ext4: Unknown parameter 'nouser_xattr' [ 833.301021][T13650] loop2: detected capacity change from 0 to 2048 [ 833.358683][T13650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.482018][T13653] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 834.080995][ T1092] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 834.117231][ T1092] EXT4-fs (loop2): This should not happen!! Data will be lost [ 834.117231][ T1092] [ 834.155255][ T1092] EXT4-fs (loop2): Total free blocks count 0 [ 834.161318][ T1092] EXT4-fs (loop2): Free/Dirty block details [ 834.168282][ T1092] EXT4-fs (loop2): free_blocks=2415919504 [ 834.184814][ T1092] EXT4-fs (loop2): dirty_blocks=6320 [ 834.195760][ T1092] EXT4-fs (loop2): Block reservation details [ 834.201803][ T1092] EXT4-fs (loop2): i_reserved_data_blocks=395 [ 834.368688][ T2929] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 836.429293][ T5834] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 836.440256][ T5834] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 836.662081][T13671] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2225'. [ 836.688497][T13671] hsr_slave_0: left promiscuous mode [ 836.702247][T13671] hsr_slave_1: left promiscuous mode [ 836.878031][T13677] netlink: 'syz.1.2227': attribute type 3 has an invalid length. [ 837.629960][T13700] loop2: detected capacity change from 0 to 512 [ 837.722443][T13700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.770733][T13700] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 837.929708][T13700] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.2237: lblock 23 mapped to illegal pblock 18 (length 1) [ 837.981310][T13708] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 7: comm syz.2.2237: lblock 12 mapped to illegal pblock 7 (length 22) [ 838.003216][T13700] EXT4-fs (loop2): Remounting filesystem read-only [ 838.004532][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 838.023887][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 838.035068][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 838.049657][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 838.063932][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 838.074610][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 838.116215][T13706] lo speed is unknown, defaulting to 1000 [ 838.133554][T13708] EXT4-fs (loop2): Remounting filesystem read-only [ 838.187519][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.366388][ T998] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.588376][ T998] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.603816][T13733] loop6: detected capacity change from 0 to 128 [ 838.636626][T13733] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 838.661500][T13733] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.786387][T12290] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 839.408998][T13748] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2253'. [ 840.169084][T10400] Bluetooth: hci4: command tx timeout [ 840.471249][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 840.471264][ T28] audit: type=1326 audit(1755206797.845:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.500643][ T28] audit: type=1326 audit(1755206797.845:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.542224][ T28] audit: type=1326 audit(1755206797.855:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.565614][ T28] audit: type=1326 audit(1755206797.855:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.603505][ T28] audit: type=1326 audit(1755206797.855:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.631643][ T28] audit: type=1326 audit(1755206797.855:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.676336][ T28] audit: type=1326 audit(1755206797.855:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.716838][ T28] audit: type=1326 audit(1755206797.855:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.741178][ T28] audit: type=1326 audit(1755206797.855:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 840.777447][ T28] audit: type=1326 audit(1755206797.855:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 842.252545][T10400] Bluetooth: hci4: command tx timeout [ 843.025566][ T998] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.132839][ T998] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.288556][T13706] chnl_net:caif_netlink_parms(): no params data found [ 843.526402][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2281'. [ 843.679904][T13816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2283'. [ 843.704056][T13706] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.713591][T13706] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.721849][T13706] bridge_slave_0: entered allmulticast mode [ 843.748471][T13816] sd 0:0:1:0: device reset [ 843.766036][T13706] bridge_slave_0: entered promiscuous mode [ 843.850462][T13706] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.858710][T13706] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.902014][T13706] bridge_slave_1: entered allmulticast mode [ 843.926284][T13706] bridge_slave_1: entered promiscuous mode [ 844.031106][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.085269][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.129335][ T998] tipc: Left network mode [ 844.249893][T13706] team0: Port device team_slave_0 added [ 844.291618][T13706] team0: Port device team_slave_1 added [ 844.323579][T10400] Bluetooth: hci4: command tx timeout [ 844.495184][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.511113][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.544800][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.545059][T13849] atomic_op ffff88807d07e198 conn xmit_atomic 0000000000000000 [ 844.642677][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.651170][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.679516][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.966641][T13706] hsr_slave_0: entered promiscuous mode [ 844.982515][T13706] hsr_slave_1: entered promiscuous mode [ 845.023627][T13706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.031577][T13706] Cannot create hsr debugfs directory [ 846.332663][ T998] hsr_slave_0: left promiscuous mode [ 846.356275][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.370997][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.389192][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.397103][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.404779][T10400] Bluetooth: hci4: command tx timeout [ 846.412872][ T998] batadv1: left allmulticast mode [ 846.418372][ T998] batadv1: left promiscuous mode [ 846.423800][ T998] bridge0: port 3(batadv1) entered disabled state [ 846.447070][ T998] bridge_slave_1: left allmulticast mode [ 846.452862][ T998] bridge_slave_1: left promiscuous mode [ 846.460248][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.488043][ T998] bridge_slave_0: left allmulticast mode [ 846.494154][ T998] bridge_slave_0: left promiscuous mode [ 846.499997][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.599042][ T998] veth0_macvtap: left promiscuous mode [ 846.617053][T13889] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2316'. [ 846.623468][ T998] veth1_vlan: left promiscuous mode [ 846.638817][ T998] veth0_vlan: left promiscuous mode [ 846.666548][ T58] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 847.921430][ T998] team0 (unregistering): Port device team_slave_1 removed [ 847.992192][ T998] team0 (unregistering): Port device team_slave_0 removed [ 848.060685][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.070476][ T998] bond_slave_1 (unregistering): left promiscuous mode [ 848.137822][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.148149][ T998] bond_slave_0 (unregistering): left promiscuous mode [ 848.790072][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 848.790086][ T28] audit: type=1326 audit(1755206806.165:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.820343][ T28] audit: type=1326 audit(1755206806.165:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.853284][ T28] audit: type=1326 audit(1755206806.195:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.877214][ T28] audit: type=1326 audit(1755206806.195:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.900523][ T28] audit: type=1326 audit(1755206806.195:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.931575][ T28] audit: type=1326 audit(1755206806.195:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.963505][ T28] audit: type=1326 audit(1755206806.195:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 848.987847][ T28] audit: type=1326 audit(1755206806.195:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 849.022761][ T28] audit: type=1326 audit(1755206806.195:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 849.051480][ T28] audit: type=1326 audit(1755206806.225:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 849.252940][ T998] bond0 (unregistering): Released all slaves [ 849.490870][T13914] loop6: detected capacity change from 0 to 1024 [ 849.519199][T13914] EXT4-fs: inline encryption not supported [ 849.545828][T13914] EXT4-fs: Ignoring removed i_version option [ 849.582293][T13914] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 849.682857][T13914] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 2: comm syz.6.2326: lblock 2 mapped to illegal pblock 2 (length 1) [ 849.751021][T13706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 849.763634][T13706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 849.774257][T13706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 849.777313][T13914] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 48: comm syz.6.2326: lblock 0 mapped to illegal pblock 48 (length 1) [ 849.830560][T13706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 849.836610][T13914] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2326: Failed to acquire dquot type 0 [ 849.891444][T13914] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 849.902053][T13914] EXT4-fs error (device loop6): ext4_evict_inode:252: inode #11: comm syz.6.2326: mark_inode_dirty error [ 849.918759][T13914] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 849.968581][ T998] IPVS: stop unused estimator thread 0... [ 849.975865][T13914] EXT4-fs (loop6): 1 orphan inode deleted [ 850.015012][T13914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.110394][ T1092] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 850.181955][ T1092] EXT4-fs error (device loop6): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 0 [ 850.208141][T13914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.222934][T13914] EXT4-fs error (device loop6): __ext4_get_inode_loc:4483: comm syz.6.2326: Invalid inode table block 1 in block_group 0 [ 850.241795][T13914] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 850.261465][T13914] EXT4-fs error (device loop6): ext4_quota_off:7222: inode #3: comm syz.6.2326: mark_inode_dirty error [ 850.465973][T13706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.532604][T13706] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.556685][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.563991][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.610416][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.617725][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.195179][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.317304][T13706] veth0_vlan: entered promiscuous mode [ 851.357920][T13706] veth1_vlan: entered promiscuous mode [ 851.479869][T13706] veth0_macvtap: entered promiscuous mode [ 851.510223][T13706] veth1_macvtap: entered promiscuous mode [ 851.617154][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.656974][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.699650][T13706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.738800][T13706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.766344][T13706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.775345][T13706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.784664][T13706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.900747][T13706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.163040][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.181148][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.231641][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.264614][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.128885][T13993] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2353'. [ 853.877062][T14017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2363'. [ 853.920901][T14021] loop6: detected capacity change from 0 to 1024 [ 853.962922][T14021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.126174][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.145061][T14031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2368'. [ 855.334364][T14057] syz.2.2380[14057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.334495][T14057] syz.2.2380[14057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.446562][T14060] sch_fq: defrate 4294967295 ignored. [ 855.882267][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 855.882282][ T28] audit: type=1326 audit(1755206813.255:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 855.985585][ T28] audit: type=1326 audit(1755206813.255:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.077257][ T28] audit: type=1326 audit(1755206813.295:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.112404][ T28] audit: type=1326 audit(1755206813.295:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.143173][ T28] audit: type=1326 audit(1755206813.295:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.270258][ T28] audit: type=1326 audit(1755206813.295:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.701941][ T28] audit: type=1326 audit(1755206813.295:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.827052][ T28] audit: type=1326 audit(1755206813.295:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.852624][ T28] audit: type=1326 audit(1755206813.305:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 856.882476][ T28] audit: type=1326 audit(1755206813.305:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 857.298251][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 857.484023][T14114] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2406'. [ 857.568052][T14120] pim6reg: entered allmulticast mode [ 857.600359][T14120] pim6reg: left allmulticast mode [ 858.073693][T14141] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2418'. [ 858.995565][T14175] loop2: detected capacity change from 0 to 2048 [ 859.137946][T14175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.323221][T14175] lo speed is unknown, defaulting to 1000 [ 860.148868][T14186] tipc: Enabling of bearer rejected, failed to enable media [ 860.462772][T14191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2439'. [ 860.958427][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.054863][T14208] loop1: detected capacity change from 0 to 2048 [ 861.108018][T14208] loop1: p1 < > p4 [ 861.126363][T14208] loop1: p4 size 8388608 extends beyond EOD, truncated [ 861.241713][T14215] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2449'. [ 861.967333][T14232] lo speed is unknown, defaulting to 1000 [ 863.036370][T14238] loop6: detected capacity change from 0 to 1024 [ 863.117743][T14238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.209525][T14238] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.316915][T14243] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 863.441133][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.624139][T14248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2461'. [ 865.070521][T14272] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2470'. [ 866.533287][T14301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2481'. [ 867.733966][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'. [ 867.892438][T14333] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2493'. [ 867.979298][T14338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2495'. [ 869.127905][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 869.127920][ T28] audit: type=1326 audit(1755206826.505:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.147628][T14358] loop6: detected capacity change from 0 to 512 [ 869.222087][ T28] audit: type=1326 audit(1755206826.535:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.246046][ T28] audit: type=1326 audit(1755206826.545:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.285905][T14358] netlink: 'syz.6.2505': attribute type 13 has an invalid length. [ 869.333339][ T28] audit: type=1326 audit(1755206826.545:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.394397][ T28] audit: type=1326 audit(1755206826.545:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.480076][ T28] audit: type=1326 audit(1755206826.545:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.480118][ T28] audit: type=1326 audit(1755206826.545:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.480150][ T28] audit: type=1326 audit(1755206826.545:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.480184][ T28] audit: type=1326 audit(1755206826.545:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.480218][ T28] audit: type=1326 audit(1755206826.545:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 869.499174][T14368] loop6: detected capacity change from 0 to 1024 [ 869.671530][T14368] EXT4-fs: inline encryption not supported [ 869.685588][T14368] EXT4-fs: Ignoring removed i_version option [ 869.692564][T14368] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 869.732630][T14368] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #3: block 1: comm syz.6.2505: lblock 1 mapped to illegal pblock 1 (length 1) [ 869.747434][T14368] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2505: Failed to acquire dquot type 0 [ 869.771371][T14368] EXT4-fs error (device loop6): ext4_free_blocks:6681: comm syz.6.2505: Freeing blocks not in datazone - block = 0, count = 4096 [ 869.799550][T14368] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2505: Invalid inode bitmap blk 0 in block_group 0 [ 869.817278][T14368] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 869.830732][ T42] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 869.845398][T14368] EXT4-fs (loop6): 1 orphan inode deleted [ 869.852363][T14368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.869677][ T42] EXT4-fs error (device loop6): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 869.930835][T14368] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm syz.6.2505: lblock 1 mapped to illegal pblock 1 (length 1) [ 869.950875][T14368] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2505: Failed to acquire dquot type 0 [ 870.002854][T14368] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2505'. [ 870.407311][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.039024][T14358] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.050225][T14358] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.061570][T14358] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.070774][T14358] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.221773][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.259255][T14388] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2512'. [ 871.568064][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2527'. [ 872.022106][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2535'. [ 872.046961][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2535'. [ 872.376161][T14450] loop6: detected capacity change from 0 to 1024 [ 872.396637][T14450] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 872.447088][T14450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.685781][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.133145][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 874.133160][ T28] audit: type=1326 audit(1755206831.505:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 874.166598][T14516] 9pnet_fd: Insufficient options for proto=fd [ 874.179389][ T28] audit: type=1326 audit(1755206831.515:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 874.597089][T14535] @: renamed from vlan0 (while UP) [ 874.625990][T14537] 9pnet_fd: Insufficient options for proto=fd [ 875.214088][T14558] 9pnet_fd: Insufficient options for proto=fd [ 875.620600][T14573] tipc: Started in network mode [ 875.632823][T14573] tipc: Node identity ac14140f, cluster identity 4711 [ 875.659074][T14573] tipc: New replicast peer: 255.255.255.255 [ 875.681131][T14573] tipc: Enabled bearer , priority 10 [ 875.952015][T14580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2598'. [ 876.222076][ T28] audit: type=1326 audit(1755206833.595:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 876.303239][ T28] audit: type=1326 audit(1755206833.595:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 876.443311][ T28] audit: type=1326 audit(1755206833.625:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 876.593730][ T28] audit: type=1326 audit(1755206833.635:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 876.919340][T14591] syz.2.2599[14591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.117636][ T28] audit: type=1326 audit(1755206833.635:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 877.333061][T12599] tipc: Node number set to 2886997007 [ 877.792208][ T28] audit: type=1326 audit(1755206833.635:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 877.917763][ T28] audit: type=1326 audit(1755206833.635:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 878.050227][ T28] audit: type=1326 audit(1755206833.635:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 878.165787][T14603] capability: warning: `syz.6.2605' uses deprecated v2 capabilities in a way that may be insecure [ 878.461488][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'. [ 879.943713][T14638] netlink: 'syz.1.2621': attribute type 21 has an invalid length. [ 880.337853][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 880.337868][ T28] audit: type=1326 audit(1755206837.655:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.427289][T14661] loop6: detected capacity change from 0 to 1024 [ 880.440900][T14655] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 880.447097][ T28] audit: type=1326 audit(1755206837.655:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.471315][ T28] audit: type=1326 audit(1755206837.655:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.494482][ T28] audit: type=1326 audit(1755206837.655:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.517198][ T28] audit: type=1326 audit(1755206837.655:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.540152][ T28] audit: type=1326 audit(1755206837.655:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.599213][ T28] audit: type=1326 audit(1755206837.655:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.693272][ T28] audit: type=1326 audit(1755206837.655:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.717201][ T28] audit: type=1326 audit(1755206837.655:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 880.742726][ T28] audit: type=1326 audit(1755206837.655:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 882.725128][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 883.060064][T14702] syz.5.2644[14702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 883.060199][T14702] syz.5.2644[14702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 886.160974][T14702] lo speed is unknown, defaulting to 1000 [ 886.289551][T14713] syz.6.2648[14713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 886.289677][T14713] syz.6.2648[14713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 886.306252][T14713] IPv6: NLM_F_CREATE should be specified when creating new route [ 886.591739][T14723] 9pnet: p9_errstr2errno: server reported unknown error [ 886.682025][T14729] loop1: detected capacity change from 0 to 512 [ 886.694275][T14729] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 886.717762][T14729] FAT-fs (loop1): FAT read failed (blocknr 1568) [ 886.738079][T14729] FAT-fs (loop1): FAT read failed (blocknr 1568) [ 886.761420][T14731] loop2: detected capacity change from 0 to 512 [ 886.790874][T14731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.804436][T14731] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.877664][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.093184][ T5847] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 887.324824][ T5847] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 887.353128][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.376491][ T5847] usb 2-1: Product: syz [ 887.385685][ T5847] usb 2-1: Manufacturer: syz [ 887.401250][ T5847] usb 2-1: SerialNumber: syz [ 887.418693][ T5847] usb 2-1: config 0 descriptor?? [ 887.490652][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 887.490667][ T28] audit: type=1326 audit(1755206844.865:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.544262][ T28] audit: type=1326 audit(1755206844.865:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.586000][T14760] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2669'. [ 887.606289][ T28] audit: type=1326 audit(1755206844.875:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.651537][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 887.666694][ T28] audit: type=1326 audit(1755206844.875:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.725647][T14736] team_slave_0: entered promiscuous mode [ 887.731903][T14736] team_slave_1: entered promiscuous mode [ 887.759842][T14736] macvtap1: entered promiscuous mode [ 887.767711][ T28] audit: type=1326 audit(1755206844.875:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.783228][T14736] team0: entered promiscuous mode [ 887.802704][T14736] macvtap1: entered allmulticast mode [ 887.810761][ T28] audit: type=1326 audit(1755206844.875:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.811592][T14736] team0: entered allmulticast mode [ 887.836217][ T28] audit: type=1326 audit(1755206844.875:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.861287][T14736] team_slave_0: entered allmulticast mode [ 887.861401][T14736] team_slave_1: entered allmulticast mode [ 887.863019][T14736] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 887.868779][T10400] Bluetooth: hci1: command 0x0406 tx timeout [ 887.925909][T14763] team0: left allmulticast mode [ 887.930857][T14763] team_slave_0: left allmulticast mode [ 887.937013][ T28] audit: type=1326 audit(1755206844.875:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 887.961273][T14763] team_slave_1: left allmulticast mode [ 887.972858][T14763] team0: left promiscuous mode [ 887.980204][T14763] team_slave_0: left promiscuous mode [ 887.985836][T14763] team_slave_1: left promiscuous mode [ 888.115392][ T28] audit: type=1326 audit(1755206844.875:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 888.165321][ T5847] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 888.176141][ T5847] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 888.186809][ T28] audit: type=1326 audit(1755206844.875:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 888.190031][ T5847] usb 2-1: USB disconnect, device number 7 [ 889.012907][T14788] vxcan3: entered promiscuous mode [ 889.018257][T14788] vxcan3: entered allmulticast mode [ 891.097928][T14832] loop2: detected capacity change from 0 to 1024 [ 891.111523][T14832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 891.129575][T14832] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 891.159601][T14832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 891.194940][T14832] EXT4-fs error (device loop2): ext4_free_blocks:6681: comm syz.2.2701: Freeing blocks not in datazone - block = 0, count = 4096 [ 891.238812][T14832] EXT4-fs (loop2): Remounting filesystem read-only [ 891.254183][T14832] EXT4-fs (loop2): 1 orphan inode deleted [ 891.261227][T14832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.281082][ T998] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 891.305308][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.497942][T14852] loop2: detected capacity change from 0 to 764 [ 891.521062][T14852] Symlink component flag not implemented [ 891.528271][T14852] Symlink component flag not implemented (7) [ 892.566108][T14885] lo speed is unknown, defaulting to 1000 [ 893.337984][T14914] 9pnet_fd: Insufficient options for proto=fd [ 894.616242][T14934] syz.5.2742[14934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.616378][T14934] syz.5.2742[14934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.630077][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 894.630092][ T28] audit: type=1326 audit(1755206851.985:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.676793][ T28] audit: type=1326 audit(1755206851.985:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.701314][ T28] audit: type=1326 audit(1755206851.995:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.725045][ T28] audit: type=1326 audit(1755206851.995:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.725117][T14931] tipc: Enabled bearer , priority 0 [ 894.749259][ T28] audit: type=1326 audit(1755206851.995:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.780070][ T28] audit: type=1326 audit(1755206851.995:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.865982][ T28] audit: type=1326 audit(1755206851.995:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.898223][ T28] audit: type=1326 audit(1755206851.995:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.934366][ T28] audit: type=1326 audit(1755206851.995:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 894.960709][ T28] audit: type=1326 audit(1755206852.005:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 895.018304][T14946] syz.2.2747[14946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 895.018433][T14946] syz.2.2747[14946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 895.133843][T14952] netlink: 'syz.5.2751': attribute type 11 has an invalid length. [ 895.155117][T14952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2751'. [ 895.420286][T14969] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2757'. [ 895.431772][T14969] lo speed is unknown, defaulting to 1000 [ 895.838339][T14991] 9pnet_fd: Insufficient options for proto=fd [ 896.037428][T15003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2774'. [ 896.500287][T15026] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2785'. [ 896.660623][T15028] loop2: detected capacity change from 0 to 2048 [ 896.811688][T15028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.966546][T15028] lo speed is unknown, defaulting to 1000 [ 898.633686][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.918707][T15055] lo speed is unknown, defaulting to 1000 [ 900.544833][T15113] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 900.544833][T15113] program syz.1.2819 not setting count and/or reply_len properly [ 900.931620][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'. [ 901.286319][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 901.286334][ T28] audit: type=1326 audit(1755206858.665:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.373532][ T28] audit: type=1326 audit(1755206858.665:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.413188][ T28] audit: type=1326 audit(1755206858.665:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.464567][ T28] audit: type=1326 audit(1755206858.665:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.521657][ T28] audit: type=1326 audit(1755206858.665:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.553244][ T28] audit: type=1326 audit(1755206858.695:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.578906][ T28] audit: type=1326 audit(1755206858.695:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.608732][ T28] audit: type=1326 audit(1755206858.695:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.1.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 901.879662][T15166] lo speed is unknown, defaulting to 1000 [ 901.910031][ T28] audit: type=1326 audit(1755206859.285:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 901.933729][ T28] audit: type=1326 audit(1755206859.305:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 902.784005][T15177] syz_tun: entered allmulticast mode [ 902.902956][T15180] netlink: 'syz.5.2846': attribute type 10 has an invalid length. [ 902.962324][T15180] team0: Device hsr_slave_0 failed to register rx_handler [ 903.203325][T10400] Bluetooth: hci3: command 0x0406 tx timeout [ 903.484669][T15196] loop9: detected capacity change from 0 to 7 [ 903.516256][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.525621][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.543967][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.553267][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.586173][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.595428][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.608948][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.618163][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.636629][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.645898][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.655425][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.664639][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.673318][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.682538][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.690553][T15196] ldm_validate_partition_table(): Disk read failed. [ 903.701198][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.710477][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.719471][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.728745][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.738497][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 903.747763][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.756891][T15196] Dev loop9: unable to read RDB block 0 [ 903.769568][T15194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.792326][T15196] loop9: unable to read partition table [ 903.810192][T15196] loop9: partition table beyond EOD, truncated [ 903.820664][T15196] loop_reread_partitions: partition scan of loop9 (þ被xüŸø éÚ¬§½dä¦Íˆ`*`¡¯ â·û [ 903.820664][T15196] ) failed (rc=-5) [ 903.896809][T15194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.026087][T15194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.070673][T15205] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2857'. [ 904.160508][T15194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.291522][T15194] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.313030][T15194] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.332401][T15194] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.350950][T15194] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.920855][T15253] random: crng reseeded on system resumption [ 906.478990][T15259] loop2: detected capacity change from 0 to 1024 [ 907.244240][T15259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.306611][T15259] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.525423][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.726167][T15280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'. [ 909.106680][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 909.106693][ T28] audit: type=1326 audit(1755206866.485:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.161164][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2899'. [ 909.203609][ T28] audit: type=1326 audit(1755206866.485:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.314165][ T28] audit: type=1326 audit(1755206866.485:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.364999][ T28] audit: type=1326 audit(1755206866.485:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.397880][ T28] audit: type=1326 audit(1755206866.485:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.426916][ T28] audit: type=1326 audit(1755206866.485:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.487878][ T28] audit: type=1326 audit(1755206866.495:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.517828][ T28] audit: type=1326 audit(1755206866.555:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.555303][ T28] audit: type=1326 audit(1755206866.555:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.592730][ T28] audit: type=1326 audit(1755206866.555:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 909.880465][T15324] lo speed is unknown, defaulting to 1000 [ 909.894258][ T1092] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 909.969050][T15328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 909.991903][T15319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.107381][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2910'. [ 911.475401][T15358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'. [ 913.537478][T15380] netlink: 9004 bytes leftover after parsing attributes in process `syz.5.2931'. [ 913.546898][T15380] openvswitch: netlink: Flow key attr not present in new flow. [ 913.709559][T15388] 9pnet_fd: Insufficient options for proto=fd [ 913.757290][T15390] loop2: detected capacity change from 0 to 1024 [ 913.773286][T15390] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 913.857853][T15398] veth0_to_team: entered promiscuous mode [ 914.017287][T15390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.080857][T15390] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 914.149787][T15390] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 914.204510][T15390] EXT4-fs (loop2): This should not happen!! Data will be lost [ 914.204510][T15390] [ 914.214519][T15390] EXT4-fs (loop2): Total free blocks count 0 [ 914.220630][T15390] EXT4-fs (loop2): Free/Dirty block details [ 914.228045][T15390] EXT4-fs (loop2): free_blocks=20480 [ 916.232641][T15390] EXT4-fs (loop2): dirty_blocks=16 [ 916.254445][T15390] EXT4-fs (loop2): Block reservation details [ 916.272676][T15390] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 916.378883][T15408] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 916.518734][T15418] macvtap0: refused to change device tx_queue_len [ 916.924225][T15425] loop6: detected capacity change from 0 to 8192 [ 917.010830][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 917.011069][ T28] audit: type=1326 audit(1755206874.385:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.103415][ T28] audit: type=1326 audit(1755206874.385:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.154568][ T28] audit: type=1326 audit(1755206874.385:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.208984][ T28] audit: type=1326 audit(1755206874.385:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.278399][ T28] audit: type=1326 audit(1755206874.385:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.319840][ T28] audit: type=1326 audit(1755206874.425:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.351444][ T28] audit: type=1326 audit(1755206874.425:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.383269][ T28] audit: type=1326 audit(1755206874.425:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.456083][ T28] audit: type=1326 audit(1755206874.425:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 917.484584][ T28] audit: type=1326 audit(1755206874.425:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 919.594275][T15440] usb usb5: usbfs: process 15440 (syz.6.2945) did not claim interface 0 before use [ 919.637944][T15447] batman_adv: batadv0: Adding interface: dummy0 [ 919.655378][T15447] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.707589][T15447] batman_adv: batadv0: Interface activated: dummy0 [ 919.745725][T15447] batadv0: mtu less than device minimum [ 919.767970][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.781312][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.793140][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.804735][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.816396][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.827811][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.839223][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.850624][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 919.862216][T15447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 920.030712][T15457] veth0_to_team: entered promiscuous mode [ 921.666824][T15483] veth0_to_team: entered promiscuous mode [ 922.859822][T15510] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2978'. [ 922.999615][T15518] 9pnet_fd: Insufficient options for proto=fd [ 923.337615][T15541] 9pnet_fd: Insufficient options for proto=fd [ 923.364324][T15543] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 923.364324][T15543] The task syz.6.2989 (15543) triggered the difference, watch for misbehavior. [ 923.551956][T15553] nfs4: Bad value for 'source' [ 923.562926][T15551] loop1: detected capacity change from 0 to 1024 [ 923.591936][T15551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.607049][T15555] 9pnet: Unknown protocol version 9 [ 923.647660][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 923.726629][T13706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.736804][T15564] syz.2.3003[15564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 923.736924][T15564] syz.2.3003[15564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.175117][T15613] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3024'. [ 926.937074][T15639] loop6: detected capacity change from 0 to 512 [ 926.965282][T15643] netlink: 8 bytes leftover after parsing attributes in process `,&#^%'. [ 927.387192][T15661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3043'. [ 927.569303][T15667] loop1: detected capacity change from 0 to 512 [ 927.610126][T15667] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 927.619138][T15667] EXT4-fs (loop1): orphan cleanup on readonly fs [ 927.642259][T15667] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3046: corrupted inode contents [ 927.659001][T15667] EXT4-fs (loop1): Remounting filesystem read-only [ 927.666391][T15667] EXT4-fs (loop1): 1 truncate cleaned up [ 927.680982][ T2941] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 927.688652][T15673] netlink: 'syz.5.3048': attribute type 3 has an invalid length. [ 927.692534][ T2941] __quota_error: 77 callbacks suppressed [ 927.692548][ T2941] Quota error (device loop1): write_blk: dquota write failed [ 927.713261][ T2941] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 927.723634][ T2941] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 927.734294][ T2941] Quota error (device loop1): write_blk: dquota write failed [ 927.741697][ T2941] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 927.743759][T15639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.751692][ T2941] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 927.768191][ T2941] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 927.778063][ T2941] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 927.790633][T15667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 927.814470][T15639] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 927.826526][T15667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3046'. [ 927.847620][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3046'. [ 927.873196][T15639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 927.888703][T15639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 927.914512][T13706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.926014][T15639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 927.932105][T15639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 927.969360][T15639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 927.981147][T15639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 928.006699][T15639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 928.150208][ T28] audit: type=1326 audit(1755206885.525:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 928.199706][T15684] syz.1.3050[15684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 928.199834][T15684] syz.1.3050[15684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 928.242623][ T28] audit: type=1326 audit(1755206885.555:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 928.301956][ T28] audit: type=1326 audit(1755206885.555:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 928.350383][ T28] audit: type=1326 audit(1755206885.555:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.1.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 928.499583][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3059'. [ 928.756842][T15707] veth0_to_team: entered promiscuous mode [ 929.133873][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 929.923443][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 929.959963][T15725] xt_hashlimit: max too large, truncated to 1048576 [ 930.003216][ T5789] Bluetooth: hci4: command 0x0c1a tx timeout [ 930.009350][T10400] Bluetooth: hci3: command 0x0406 tx timeout [ 930.122525][T15740] loop6: detected capacity change from 0 to 2048 [ 930.330935][T15740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.423825][T15740] lo speed is unknown, defaulting to 1000 [ 930.953239][T15748] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 930.993597][T15751] sctp: [Deprecated]: syz.5.3079 (pid 15751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 930.993597][T15751] Use struct sctp_sack_info instead [ 931.203654][T10400] Bluetooth: hci2: command 0x0406 tx timeout [ 931.863644][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.003475][T10400] Bluetooth: hci1: command 0x0406 tx timeout [ 932.083217][T10400] Bluetooth: hci4: command 0x0c1a tx timeout [ 932.089869][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 932.440969][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3089'. [ 932.542120][T15779] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3089'. [ 932.602519][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3089'. [ 935.033141][T10400] Bluetooth: hci4: command 0x0c1a tx timeout [ 935.558527][T15789] tipc: Started in network mode [ 935.583219][T15789] tipc: Node identity ac14140f, cluster identity 4711 [ 935.620888][T15789] tipc: New replicast peer: 255.255.255.255 [ 935.638212][T15789] tipc: Enabled bearer , priority 10 [ 936.381320][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3098'. [ 936.753256][T13140] tipc: Node number set to 2886997007 [ 936.830484][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.069089][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 937.069102][ T28] audit: type=1326 audit(1755206894.445:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.153314][T15816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3104'. [ 937.182945][ T28] audit: type=1326 audit(1755206894.445:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.303175][ T28] audit: type=1326 audit(1755206894.475:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.411222][ T28] audit: type=1326 audit(1755206894.475:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.508429][ T28] audit: type=1326 audit(1755206894.475:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.532151][ T28] audit: type=1326 audit(1755206894.485:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.567893][ T28] audit: type=1326 audit(1755206894.485:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.683423][ T28] audit: type=1326 audit(1755206894.485:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.6.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.754157][ T28] audit: type=1326 audit(1755206894.775:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.6.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 937.830349][ T28] audit: type=1326 audit(1755206894.775:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.6.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 938.410438][T15841] netlink: 'syz.6.3115': attribute type 1 has an invalid length. [ 938.519805][T15846] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 938.528675][T15846] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3117'. [ 938.688929][T15847] syzkaller0: entered promiscuous mode [ 938.701004][T15847] syzkaller0: entered allmulticast mode [ 941.919751][T15796] net_ratelimit: 10 callbacks suppressed [ 941.919770][T15796] Set syz1 is full, maxelem 65536 reached [ 944.577200][T15897] 9pnet_fd: Insufficient options for proto=fd [ 944.750418][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 944.750433][ T28] audit: type=1326 audit(1755206902.125:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 944.809689][ T28] audit: type=1326 audit(1755206902.165:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 944.844545][ T28] audit: type=1326 audit(1755206902.165:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 944.908629][ T28] audit: type=1326 audit(1755206902.165:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 944.952407][ T28] audit: type=1326 audit(1755206902.165:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 945.030081][ T28] audit: type=1326 audit(1755206902.165:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 945.108110][ T28] audit: type=1326 audit(1755206902.165:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 945.181076][ T28] audit: type=1326 audit(1755206902.165:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 945.242275][ T28] audit: type=1326 audit(1755206902.165:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 945.312226][ T28] audit: type=1326 audit(1755206902.165:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 945.481356][T15922] 9pnet_fd: Insufficient options for proto=fd [ 946.812443][T15932] loop2: detected capacity change from 0 to 512 [ 946.858556][T15932] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 946.904530][T15932] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 946.935878][T15932] EXT4-fs (loop2): group descriptors corrupted! [ 947.264988][T15942] loop6: detected capacity change from 0 to 8192 [ 947.628602][T15944] loop1: detected capacity change from 0 to 1024 [ 947.657142][T15944] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 947.678320][T15944] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 947.709605][T15944] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 947.734227][T15944] EXT4-fs error (device loop1): ext4_get_journal_inode:5805: inode #32: comm syz.1.3157: iget: special inode unallocated [ 947.774576][T15944] EXT4-fs (loop1): no journal found [ 947.789204][T15944] EXT4-fs (loop1): can't get journal size [ 947.820532][T15944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 947.941345][T15944] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.1.3157: path /200/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 948.071252][T15949] 9pnet_fd: Insufficient options for proto=fd [ 948.099778][T13706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.064488][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 950.064502][ T28] audit: type=1326 audit(1755206907.435:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.263361][ T28] audit: type=1326 audit(1755206907.435:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.365163][ T28] audit: type=1326 audit(1755206907.505:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.411296][ T28] audit: type=1326 audit(1755206907.505:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.434547][ T28] audit: type=1326 audit(1755206907.505:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.459748][ T28] audit: type=1326 audit(1755206907.505:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.523701][ T28] audit: type=1326 audit(1755206907.505:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.567291][ T28] audit: type=1326 audit(1755206907.515:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.648450][ T28] audit: type=1326 audit(1755206907.515:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.715979][ T28] audit: type=1326 audit(1755206907.525:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 950.922315][T15984] loop6: detected capacity change from 0 to 8192 [ 951.020399][T15989] 9pnet_fd: Insufficient options for proto=fd [ 951.388308][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3174'. [ 952.144283][T16010] loop6: detected capacity change from 0 to 512 [ 952.189395][T16010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.267946][T16010] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.306557][T16010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.758747][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3187'. [ 952.760528][T16026] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3186'. [ 953.135400][T16030] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 954.569476][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3196'. [ 954.619690][T16051] bond_slave_0: entered promiscuous mode [ 954.626183][T16051] bond_slave_1: entered promiscuous mode [ 954.641606][T16051] macvlan2: entered allmulticast mode [ 954.670285][T16051] bond0: entered allmulticast mode [ 954.683546][T16051] bond_slave_0: entered allmulticast mode [ 954.700600][T16051] bond_slave_1: entered allmulticast mode [ 954.730745][T16051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 954.749173][T16051] bridge0: port 3(macvlan2) entered blocking state [ 954.775685][T16051] bridge0: port 3(macvlan2) entered disabled state [ 954.801426][T16051] macvlan2: entered promiscuous mode [ 954.829708][T16051] bond0: entered promiscuous mode [ 954.837846][T16051] bridge0: port 3(macvlan2) entered blocking state [ 954.844533][T16051] bridge0: port 3(macvlan2) entered forwarding state [ 955.054025][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3198'. [ 955.223331][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3199'. [ 955.428974][T16064] loop1: detected capacity change from 0 to 8192 [ 956.610000][T16080] loop6: detected capacity change from 0 to 128 [ 956.653022][T16080] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 956.719545][T16080] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.025937][T12290] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 957.860925][T16096] syz.2.3210[16096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 957.864354][T16096] syz.2.3210[16096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 957.992356][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 958.499431][T16103] loop2: detected capacity change from 0 to 512 [ 958.580076][T16103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 958.658447][T16103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 958.684904][T16103] System zones: 0-2, 18-18, 34-34 [ 958.701603][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 958.701617][ T28] audit: type=1326 audit(1755206916.075:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 958.743927][T16103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.803635][T16103] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.859969][ T28] audit: type=1326 audit(1755206916.075:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 958.983337][ T28] audit: type=1326 audit(1755206916.145:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.059787][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.101407][ T28] audit: type=1326 audit(1755206916.145:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.156680][ T28] audit: type=1326 audit(1755206916.145:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.339280][ T28] audit: type=1326 audit(1755206916.145:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.445289][ T28] audit: type=1326 audit(1755206916.145:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.533203][ T28] audit: type=1326 audit(1755206916.165:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.583585][ T28] audit: type=1326 audit(1755206916.165:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 959.594689][T16111] loop1: detected capacity change from 0 to 8192 [ 959.628447][ T28] audit: type=1326 audit(1755206916.165:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdf1358ebe9 code=0x7ffc0000 [ 960.768428][T16131] loop2: detected capacity change from 0 to 512 [ 960.862315][T16131] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.3221: missing EA_INODE flag [ 960.918262][T16131] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.3221: error while reading EA inode 11 err=-117 [ 960.976827][T16131] EXT4-fs (loop2): 1 orphan inode deleted [ 961.005382][T16131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.181348][T12689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.522881][T16139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3224'. [ 962.151973][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3230'. [ 962.191998][T16160] tipc: Enabling of bearer rejected, failed to enable media [ 962.241702][T16160] loop1: detected capacity change from 0 to 128 [ 962.258964][T16160] FAT-fs (loop1): Directory bread(block 162) failed [ 962.272249][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3230'. [ 962.279402][T16160] FAT-fs (loop1): Directory bread(block 163) failed [ 962.290867][T16160] FAT-fs (loop1): Directory bread(block 164) failed [ 962.299869][T16160] FAT-fs (loop1): Directory bread(block 165) failed [ 962.307947][T16160] FAT-fs (loop1): Directory bread(block 166) failed [ 962.314843][T16160] FAT-fs (loop1): Directory bread(block 167) failed [ 962.321903][T16160] FAT-fs (loop1): Directory bread(block 168) failed [ 962.329891][T16160] FAT-fs (loop1): Directory bread(block 169) failed [ 963.521485][T16184] netlink: 'syz.1.3239': attribute type 13 has an invalid length. [ 963.564894][T16184] netlink: 'syz.1.3239': attribute type 17 has an invalid length. [ 963.812160][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 963.812173][ T28] audit: type=1326 audit(1755206921.185:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 963.990724][ T28] audit: type=1326 audit(1755206921.295:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f468b12add9 code=0x7ffc0000 [ 964.133678][ T28] audit: type=1326 audit(1755206921.295:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.221292][ T28] audit: type=1326 audit(1755206921.295:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.519953][ T28] audit: type=1326 audit(1755206921.895:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.2.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.641749][ T28] audit: type=1326 audit(1755206921.915:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.2.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.739196][ T28] audit: type=1326 audit(1755206921.965:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.2.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.767377][ T28] audit: type=1326 audit(1755206921.965:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.2.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.790012][ T28] audit: type=1326 audit(1755206921.965:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.2.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.822926][ T28] audit: type=1326 audit(1755206921.965:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16196 comm="syz.2.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 964.920049][T16184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 964.968312][T16201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3245'. [ 965.144203][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'. [ 968.485435][T16232] netlink: 'syz.6.3255': attribute type 1 has an invalid length. [ 968.570311][T16234] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3257'. [ 968.786755][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3259'. [ 968.978479][T16237] loop2: detected capacity change from 0 to 8192 [ 970.277794][T16256] loop6: detected capacity change from 0 to 512 [ 970.318075][T16256] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 970.550813][T16256] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 970.599006][T16256] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 971.087535][T16262] loop6: detected capacity change from 0 to 1024 [ 971.134693][T16262] EXT4-fs: Ignoring removed nobh option [ 971.157711][T16262] EXT4-fs: Ignoring removed bh option [ 971.175212][T16262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 971.284522][T16262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.307168][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 972.607658][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.738153][T16288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 974.270626][T16301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3277'. [ 975.012856][T16311] netlink: 'syz.5.3282': attribute type 13 has an invalid length. [ 975.292991][T16318] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.3282'. [ 975.512827][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.520757][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.691222][T16311] batman_adv: batadv0: Interface deactivated: dummy0 [ 975.692145][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3287'. [ 976.079678][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 976.079692][ T28] audit: type=1326 audit(1755206933.455:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.149756][ T28] audit: type=1326 audit(1755206933.455:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.184503][T16311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.201415][ T28] audit: type=1326 audit(1755206933.455:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.247179][ T28] audit: type=1326 audit(1755206933.455:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.277408][ T28] audit: type=1326 audit(1755206933.455:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.300677][ T28] audit: type=1326 audit(1755206933.455:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.324623][ T28] audit: type=1326 audit(1755206933.465:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.349164][ T28] audit: type=1326 audit(1755206933.465:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.380631][ T28] audit: type=1326 audit(1755206933.465:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.407071][ T28] audit: type=1326 audit(1755206933.465:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16340 comm="syz.6.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 976.718763][T16311] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.728271][T16311] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.739139][T16311] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.748150][T16311] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.863432][ T8784] lo speed is unknown, defaulting to 1000 [ 976.935348][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 976.982737][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 977.256309][T16361] loop2: detected capacity change from 0 to 512 [ 977.265806][T16361] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 977.378058][T16365] loop6: detected capacity change from 0 to 164 [ 977.417011][T16365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 977.436204][T16365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 977.562096][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3305'. [ 977.865507][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'. [ 977.931357][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 978.375804][T16390] loop2: detected capacity change from 0 to 512 [ 978.408919][T16390] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 978.561556][T16392] can0: slcan on ttyS3. [ 978.614793][T16392] can0 (unregistered): slcan off ttyS3. [ 978.692547][T16393] netlink: 'syz.2.3312': attribute type 4 has an invalid length. [ 979.210792][T16399] loop1: detected capacity change from 0 to 8192 [ 979.441766][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'. [ 979.689511][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 981.373309][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 981.373323][ T28] audit: type=1326 audit(1755206938.745:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.451498][ T28] audit: type=1326 audit(1755206938.745:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.537712][ T28] audit: type=1326 audit(1755206938.785:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.561684][ T28] audit: type=1326 audit(1755206938.785:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.584781][ T28] audit: type=1326 audit(1755206938.785:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.625365][ T28] audit: type=1326 audit(1755206938.785:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.669691][ T28] audit: type=1326 audit(1755206938.795:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 981.699870][ T28] audit: type=1326 audit(1755206938.795:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f589b98e7eb code=0x7ffc0000 [ 981.731674][ T28] audit: type=1326 audit(1755206938.795:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f589b98d550 code=0x7ffc0000 [ 981.783292][ T28] audit: type=1326 audit(1755206938.795:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16466 comm="syz.6.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 983.093111][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3348'. [ 988.615573][T16542] lo speed is unknown, defaulting to 1000 [ 989.437051][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 989.456903][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.926042][T16546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.511622][T16550] syzkaller0: entered promiscuous mode [ 990.538846][T16550] syzkaller0: entered allmulticast mode [ 991.912712][T16573] loop2: detected capacity change from 0 to 512 [ 991.934515][T16573] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 993.300062][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.581735][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 996.595006][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3376'. [ 996.609547][T16577] netem: change failed [ 996.806812][T16585] loop2: detected capacity change from 0 to 164 [ 996.978362][T16585] syz.2.3380: attempt to access beyond end of device [ 996.978362][T16585] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 997.011488][T16585] syz.2.3380: attempt to access beyond end of device [ 997.011488][T16585] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 998.329659][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 998.917651][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 998.917665][ T28] audit: type=1326 audit(1755206956.295:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 998.976367][T16609] syzkaller0: entered promiscuous mode [ 998.981903][T16609] syzkaller0: entered allmulticast mode [ 998.989567][ T28] audit: type=1326 audit(1755206956.335:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.043144][ T28] audit: type=1326 audit(1755206956.365:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.123879][ T28] audit: type=1326 audit(1755206956.365:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.178368][ T28] audit: type=1326 audit(1755206956.365:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.265439][ T28] audit: type=1326 audit(1755206956.375:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.324357][ T28] audit: type=1326 audit(1755206956.375:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.381812][ T28] audit: type=1326 audit(1755206956.375:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.427582][ T28] audit: type=1326 audit(1755206956.375:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.434595][T16626] openvswitch: netlink: Flow actions attr not present in new flow. [ 999.503359][ T28] audit: type=1326 audit(1755206956.375:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.6.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b98ebe9 code=0x7ffc0000 [ 999.883450][T16632] loop6: detected capacity change from 0 to 2048 [ 1000.088282][T16632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.411149][T16632] lo speed is unknown, defaulting to 1000 [ 1006.698648][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1006.698662][ T28] audit: type=1326 audit(1755206964.075:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1006.768586][ T28] audit: type=1326 audit(1755206964.075:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1006.854683][ T28] audit: type=1326 audit(1755206964.075:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1006.890761][ T28] audit: type=1326 audit(1755206964.075:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1006.949094][ T28] audit: type=1326 audit(1755206964.075:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1007.023389][ T28] audit: type=1326 audit(1755206964.125:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1007.074274][ T28] audit: type=1326 audit(1755206964.125:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1007.114405][ T28] audit: type=1326 audit(1755206964.135:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1007.152313][ T28] audit: type=1326 audit(1755206964.135:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1007.215185][ T28] audit: type=1326 audit(1755206964.135:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1007.488161][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.588027][T16664] syzkaller0: entered promiscuous mode [ 1007.603947][T16664] syzkaller0: entered allmulticast mode [ 1007.722581][T16676] syz.5.3412[16676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.722857][T16676] syz.5.3412[16676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.077243][T16685] loop1: detected capacity change from 0 to 512 [ 1008.130659][T16685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1008.152019][T16685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1008.168679][T16685] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3415: Failed to acquire dquot type 1 [ 1008.192311][T16685] EXT4-fs (loop1): 1 truncate cleaned up [ 1008.212352][T16685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1021.011472][T16685] lo speed is unknown, defaulting to 1000 [ 1021.048103][T16693] lo speed is unknown, defaulting to 1000 [ 1021.133808][T16698] 9pnet_fd: Insufficient options for proto=fd [ 1021.250160][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1021.250173][ T28] audit: type=1326 audit(1755206978.595:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.280293][ T28] audit: type=1326 audit(1755206978.595:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.303130][ T28] audit: type=1326 audit(1755206978.615:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.326452][ T28] audit: type=1326 audit(1755206978.615:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.351164][ T28] audit: type=1326 audit(1755206978.615:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.376326][ T28] audit: type=1326 audit(1755206978.615:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.401335][ T28] audit: type=1326 audit(1755206978.615:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.436571][ T28] audit: type=1326 audit(1755206978.625:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1021.467954][ T28] audit: type=1326 audit(1755206978.625:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f468b18d550 code=0x7ffc0000 [ 1021.504706][ T28] audit: type=1326 audit(1755206978.625:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.2.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f468b190417 code=0x7ffc0000 [ 1021.960387][T16719] syzkaller0: entered promiscuous mode [ 1021.966074][T16719] syzkaller0: entered allmulticast mode [ 1022.249968][T13706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.443442][T16749] kthread_run failed with err -4 [ 1026.556779][T16760] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1026.692097][T16765] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3445'. [ 1026.751227][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 1026.751244][ T28] audit: type=1326 audit(1755206984.115:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1026.838744][ T28] audit: type=1326 audit(1755206984.115:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1026.888176][ T28] audit: type=1326 audit(1755206984.115:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1026.921997][ T28] audit: type=1326 audit(1755206984.115:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1026.946608][ T28] audit: type=1326 audit(1755206984.115:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1026.971793][ T28] audit: type=1326 audit(1755206984.115:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1026.996245][ T28] audit: type=1326 audit(1755206984.115:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1027.020055][ T28] audit: type=1326 audit(1755206984.115:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1027.046941][ T28] audit: type=1326 audit(1755206984.115:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1027.075750][ T28] audit: type=1326 audit(1755206984.115:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f468b18ebe9 code=0x7ffc0000 [ 1027.105922][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1027.402592][T16791] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3454'. [ 1027.716519][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3462'. [ 1027.736409][T16808] erspan0: entered promiscuous mode [ 1027.872289][T16808] erspan0: left promiscuous mode [ 1027.950101][T16811] veth9: entered promiscuous mode [ 1028.051816][T16813] syzkaller0: entered promiscuous mode [ 1028.057482][T16813] syzkaller0: entered allmulticast mode [ 1028.174766][T16818] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3466'. [ 1034.744796][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1034.744811][ T28] audit: type=1326 audit(1755206992.125:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1034.843371][ T28] audit: type=1326 audit(1755206992.125:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1034.908890][ T28] audit: type=1326 audit(1755206992.155:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1034.940098][T16864] 9pnet_fd: Insufficient options for proto=fd [ 1034.966982][ T28] audit: type=1326 audit(1755206992.155:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.045003][ T28] audit: type=1326 audit(1755206992.155:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.068490][ T28] audit: type=1326 audit(1755206992.175:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.079570][T16866] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.091486][ T28] audit: type=1326 audit(1755206992.175:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.132379][ T28] audit: type=1326 audit(1755206992.175:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.195146][ T28] audit: type=1326 audit(1755206992.175:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.358152][T16866] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.399099][ T28] audit: type=1326 audit(1755206992.175:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.5.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1035.718852][T16866] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.823432][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1035.985841][T16866] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.592362][T16866] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.685411][T16866] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.732941][T16866] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.802081][T16883] syzkaller0: entered promiscuous mode [ 1036.809350][T16883] syzkaller0: entered allmulticast mode [ 1036.827665][T16866] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.154641][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3495'. [ 1037.166105][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3495'. [ 1037.333343][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3496'. [ 1040.734262][T16892] tipc: Enabling of bearer rejected, failed to enable media [ 1040.742687][T16894] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 1040.751439][T16894] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1040.778815][T16897] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1041.031669][T16907] loop1: detected capacity change from 0 to 8192 [ 1041.076952][T16913] syzkaller0: entered promiscuous mode [ 1041.082620][T16913] syzkaller0: entered allmulticast mode [ 1041.165881][T16917] 9pnet_fd: Insufficient options for proto=fd [ 1041.358821][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1041.358835][ T28] audit: type=1326 audit(1755206998.735:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.403461][ T28] audit: type=1326 audit(1755206998.765:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.467352][ T28] audit: type=1326 audit(1755206998.765:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.520683][ T28] audit: type=1326 audit(1755206998.765:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.543923][ T28] audit: type=1326 audit(1755206998.765:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.627096][ T28] audit: type=1326 audit(1755206998.765:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.680063][ T28] audit: type=1326 audit(1755206998.775:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.774701][ T28] audit: type=1326 audit(1755206998.775:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.854466][ T28] audit: type=1326 audit(1755206998.775:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1041.898796][ T28] audit: type=1326 audit(1755206998.775:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16921 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1043.129467][T16949] 9pnet_fd: Insufficient options for proto=fd [ 1044.161427][T16959] loop1: detected capacity change from 0 to 8192 [ 1047.201873][T16971] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3523'. [ 1047.348880][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 1047.348894][ T28] audit: type=1326 audit(1755207004.725:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.418186][ T28] audit: type=1326 audit(1755207004.765:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.453660][ T28] audit: type=1326 audit(1755207004.765:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.507801][ T28] audit: type=1326 audit(1755207004.765:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.583576][ T28] audit: type=1326 audit(1755207004.765:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.638151][ T28] audit: type=1326 audit(1755207004.775:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.670409][ T28] audit: type=1326 audit(1755207004.775:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.712260][ T28] audit: type=1326 audit(1755207004.775:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1047.847348][ T28] audit: type=1326 audit(1755207004.775:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1048.093884][ T28] audit: type=1326 audit(1755207004.775:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.5.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cc18ebe9 code=0x7ffc0000 [ 1048.285287][T16987] loop2: detected capacity change from 0 to 8192 [ 1153.532983][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1153.539981][ C1] rcu: 0-...!: (1 ticks this GP) idle=3fcc/1/0x4000000000000000 softirq=72451/72451 fqs=1 [ 1153.552383][ C1] rcu: (detected by 1, t=10503 jiffies, g=90185, q=195 ncpus=2) [ 1153.560136][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1153.565363][ C0] NMI backtrace for cpu 0 [ 1153.565382][ C0] CPU: 0 PID: 16986 Comm: syz.6.3527 Not tainted 6.6.101-syzkaller #0 [ 1153.565396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1153.565408][ C0] RIP: 0010:lock_acquire+0x151/0x410 [ 1153.565431][ C0] Code: 01 00 00 41 83 3e 00 0f 85 01 01 00 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 fa <48> c7 c7 20 c7 aa 8a e8 53 25 06 09 65 ff 05 74 80 9b 7e 45 31 c9 [ 1153.565442][ C0] RSP: 0018:ffffc90000007b80 EFLAGS: 00000046 [ 1153.565455][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 45dca8ad4f333800 [ 1153.565464][ C0] RDX: 0000000000000000 RSI: ffffffff8afc6760 RDI: ffffffff8afc6720 [ 1153.565473][ C0] RBP: ffffc90000007c88 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 1153.565483][ C0] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 1ffff92000000f7c [ 1153.565493][ C0] R13: ffff8880b8e2b958 R14: 0000000000000046 R15: dffffc0000000000 [ 1153.565502][ C0] FS: 00007f589c8816c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1153.565514][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1153.565523][ C0] CR2: 00007fe23a7f5d98 CR3: 000000004bec5000 CR4: 00000000003506f0 [ 1153.565536][ C0] Call Trace: [ 1153.565543][ C0] [ 1153.565555][ C0] ? advance_sched+0x9f9/0xc80 [ 1153.565573][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1153.565589][ C0] ? advance_sched+0x9f9/0xc80 [ 1153.565601][ C0] ? advance_sched+0x9f9/0xc80 [ 1153.565616][ C0] _raw_spin_lock_irq+0xa3/0xe0 [ 1153.565636][ C0] ? __hrtimer_run_queues+0x5e3/0xc40 [ 1153.565651][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1153.565676][ C0] __hrtimer_run_queues+0x5e3/0xc40 [ 1153.565693][ C0] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1153.565711][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1153.565725][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1153.565745][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 1153.565776][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1153.565794][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1153.565815][ C0] [ 1153.565818][ C0] [ 1153.565823][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1153.565845][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 1153.565859][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 1153.565875][ C0] RSP: 0018:ffffc9000f8df480 EFLAGS: 00000206 [ 1153.565886][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 45dca8ad4f333800 [ 1153.565894][ C0] RDX: 0000000000000000 RSI: ffffffff8aaacbc0 RDI: ffffffff8afc6780 [ 1153.565904][ C0] RBP: ffffc9000f8df588 R08: dffffc0000000000 R09: 1ffffffff21b46b9 [ 1153.565913][ C0] R10: dffffc0000000000 R11: fffffbfff21b46ba R12: 1ffff92001f1be9c [ 1153.565923][ C0] R13: ffff888030b50590 R14: 0000000000000246 R15: dffffc0000000000 [ 1153.565944][ C0] ? __might_sleep+0xe0/0xe0 [ 1153.565961][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1153.565978][ C0] ? ring_buffer_lock_reserve+0xb60/0xed0 [ 1153.565995][ C0] __mutex_lock+0x129/0xcc0 [ 1153.566011][ C0] ? __unix_dgram_recvmsg+0x1e3/0xd60 [ 1153.566031][ C0] ? __unix_dgram_recvmsg+0x1e3/0xd60 [ 1153.566047][ C0] ? mutex_lock_nested+0x20/0x20 [ 1153.566063][ C0] ? mark_lock+0x94/0x320 [ 1153.566079][ C0] ? __lock_acquire+0x1334/0x7c80 [ 1153.566092][ C0] ? trace_buffer_unlock_commit_regs+0x149/0x600 [ 1153.566113][ C0] __unix_dgram_recvmsg+0x1e3/0xd60 [ 1153.566135][ C0] ? unix_unhash+0x10/0x10 [ 1153.566154][ C0] ? rcu_is_watching+0x15/0xb0 [ 1153.566173][ C0] ? mark_lock+0x94/0x320 [ 1153.566187][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 1153.566202][ C0] ? unix_dgram_sendmsg+0x1720/0x1720 [ 1153.566220][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 1153.566238][ C0] ____sys_recvmsg+0x49b/0x5b0 [ 1153.566263][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1153.566288][ C0] ? import_iovec+0x73/0xa0 [ 1153.566309][ C0] ___sys_recvmsg+0x1b6/0x510 [ 1153.566330][ C0] ? __sys_recvmsg+0x270/0x270 [ 1153.566358][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1153.566376][ C0] ? __might_fault+0xc6/0x120 [ 1153.566388][ C0] ? __might_fault+0xaa/0x120 [ 1153.566401][ C0] do_recvmmsg+0x360/0x7d0 [ 1153.566424][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1153.566447][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 1153.566460][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 1153.566481][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 1153.566501][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 1153.566521][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1153.566541][ C0] do_syscall_64+0x55/0xb0 [ 1153.566555][ C0] ? clear_bhb_loop+0x40/0x90 [ 1153.566566][ C0] ? clear_bhb_loop+0x40/0x90 [ 1153.566580][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.566599][ C0] RIP: 0033:0x7f589b98ebe9 [ 1153.566617][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.566627][ C0] RSP: 002b:00007f589c881038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1153.566640][ C0] RAX: ffffffffffffffda RBX: 00007f589bbb6090 RCX: 00007f589b98ebe9 [ 1153.566650][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1153.566675][ C0] RBP: 00007f589ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1153.566683][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1153.566691][ C0] R13: 00007f589bbb6128 R14: 00007f589bbb6090 R15: 00007fffde302798 [ 1153.566708][ C0] [ 1153.567356][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g90185 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1154.112632][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1154.122605][ C1] rcu: RCU grace-period kthread stack dump: [ 1154.128495][ C1] task:rcu_preempt state:R running task stack:27304 pid:17 ppid:2 flags:0x00004000 [ 1154.139289][ C1] Call Trace: [ 1154.142573][ C1] [ 1154.145511][ C1] __schedule+0x14d2/0x44d0 [ 1154.150055][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1154.155959][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1154.161181][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1154.167089][ C1] ? asan.module_dtor+0x20/0x20 [ 1154.172049][ C1] ? enqueue_timer+0x225/0x530 [ 1154.176820][ C1] ? __mod_timer+0x984/0xdb0 [ 1154.181538][ C1] schedule+0xbd/0x170 [ 1154.185827][ C1] schedule_timeout+0x160/0x280 [ 1154.190711][ C1] ? console_conditional_schedule+0x40/0x40 [ 1154.196628][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1154.202535][ C1] ? update_process_times+0x1b0/0x1b0 [ 1154.208096][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1154.213906][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 1154.218778][ C1] ? dump_blkd_tasks+0x810/0x810 [ 1154.223717][ C1] ? rcu_gp_init+0x1510/0x1510 [ 1154.228572][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1154.233428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1154.238635][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1154.243855][ C1] rcu_gp_kthread+0x99/0x380 [ 1154.248460][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1154.253583][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1154.258627][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1154.263667][ C1] kthread+0x2fa/0x390 [ 1154.267858][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1154.272998][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1154.277587][ C1] ret_from_fork+0x48/0x80 [ 1154.282025][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1154.286646][ C1] ret_from_fork_asm+0x11/0x20 [ 1154.291431][ C1] [ 1154.294712][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1154.301029][ C1] CPU: 1 PID: 16992 Comm: syz.1.3532 Not tainted 6.6.101-syzkaller #0 [ 1154.309191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1154.319335][ C1] RIP: 0010:smp_call_function_many_cond+0xddf/0x1130 [ 1154.326030][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 da d6 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 15 d3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 f9 d2 [ 1154.345643][ C1] RSP: 0018:ffffc9000f7c7900 EFLAGS: 00000293 [ 1154.351768][ C1] RAX: ffffffff817ac297 RBX: 1ffff110171c87d9 RCX: ffff888029c69e00 [ 1154.359757][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1154.367741][ C1] RBP: ffffc9000f7c7a80 R08: ffffffff90da3527 R09: 1ffffffff21b46a4 [ 1154.375713][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: ffff8880b8e43ec8 [ 1154.383857][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d588 R15: 0000000000000000 [ 1154.391834][ C1] FS: 000055559103f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1154.401200][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1154.407779][ C1] CR2: 000000110c3eec29 CR3: 000000002ef54000 CR4: 00000000003506e0 [ 1154.416186][ C1] Call Trace: [ 1154.419637][ C1] [ 1154.422575][ C1] ? text_poke_sync+0x30/0x30 [ 1154.427266][ C1] ? smp_call_function_many+0x40/0x40 [ 1154.432637][ C1] ? text_poke+0xc0/0xc0 [ 1154.436974][ C1] ? __mutex_trylock_common+0x153/0x250 [ 1154.442633][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1154.448823][ C1] ? text_poke_sync+0x30/0x30 [ 1154.453695][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1154.458903][ C1] ? syscall_trace_enter+0x150/0x150 [ 1154.464227][ C1] text_poke_bp_batch+0x318/0x930 [ 1154.469283][ C1] ? text_poke_loc_init+0x820/0x820 [ 1154.474484][ C1] ? mutex_lock_nested+0x20/0x20 [ 1154.479426][ C1] ? text_poke_queue+0x49/0x190 [ 1154.484279][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 1154.490546][ C1] text_poke_finish+0x30/0x50 [ 1154.495283][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1154.501313][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1154.507568][ C1] static_key_disable+0x1a/0x20 [ 1154.512631][ C1] tracepoint_probe_unregister+0x6ad/0x930 [ 1154.518880][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1154.523749][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 1154.529047][ C1] bpf_link_free+0x131/0x310 [ 1154.533697][ C1] ? idr_preload_end+0x200/0x200 [ 1154.538654][ C1] bpf_link_release+0x6e/0x80 [ 1154.543363][ C1] __fput+0x234/0x970 [ 1154.547467][ C1] task_work_run+0x1ce/0x250 [ 1154.552098][ C1] ? task_work_cancel+0x240/0x240 [ 1154.557158][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1154.562634][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1154.567931][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1154.573573][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1154.579341][ C1] do_syscall_64+0x61/0xb0 [ 1154.583846][ C1] ? clear_bhb_loop+0x40/0x90 [ 1154.588640][ C1] ? clear_bhb_loop+0x40/0x90 [ 1154.593350][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.599270][ C1] RIP: 0033:0x7fdf1358ebe9 [ 1154.603736][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.623364][ C1] RSP: 002b:00007ffc84308108 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1154.631849][ C1] RAX: 0000000000000000 RBX: 00000000000fff58 RCX: 00007fdf1358ebe9 [ 1154.639831][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1154.647890][ C1] RBP: 00007fdf137b7da0 R08: 0000000000000001 R09: 00000004843083ff [ 1154.655959][ C1] R10: 0000001b33c20000 R11: 0000000000000246 R12: 00007fdf137b5fac [ 1154.663927][ C1] R13: 00007fdf137b5fa0 R14: ffffffffffffffff R15: 00007ffc84308220 [ 1154.671920][ C1]