last executing test programs: 1m31.442022087s ago: executing program 2 (id=860): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m30.78216453s ago: executing program 2 (id=877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m30.70082562s ago: executing program 2 (id=890): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 1m30.572273981s ago: executing program 2 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 1m30.533830471s ago: executing program 2 (id=885): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x801c, &(0x7f0000000040)={[{@i_version}]}, 0x1, 0x503, &(0x7f0000000880)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001442, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 1m30.262901463s ago: executing program 2 (id=893): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(r1) 1m15.103896625s ago: executing program 32 (id=893): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(r1) 36.734983463s ago: executing program 5 (id=2100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x20, 0x0, 0x7ffc1ff9}]}) epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 36.625618694s ago: executing program 5 (id=2104): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./bus\x00') 36.530747755s ago: executing program 5 (id=2107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 36.440458325s ago: executing program 5 (id=2111): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 36.302099806s ago: executing program 5 (id=2114): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 36.084502006s ago: executing program 5 (id=2118): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) socket$kcm(0x2, 0x1000000000000005, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 36.084223986s ago: executing program 33 (id=2118): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) socket$kcm(0x2, 0x1000000000000005, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 34.759284762s ago: executing program 1 (id=2141): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 34.658646792s ago: executing program 1 (id=2142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 34.500453053s ago: executing program 1 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc1}}) 34.275565224s ago: executing program 1 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 34.178357935s ago: executing program 1 (id=2148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) 33.961308045s ago: executing program 1 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 33.887880916s ago: executing program 34 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 20.819886051s ago: executing program 4 (id=2456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) 20.465977503s ago: executing program 4 (id=2463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xffffffffffffffff, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x7) 20.217916934s ago: executing program 4 (id=2466): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff) 20.217560394s ago: executing program 4 (id=2467): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) 20.133898454s ago: executing program 4 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000020000000600000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 20.032894044s ago: executing program 4 (id=2470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000150a0102"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 19.951277605s ago: executing program 35 (id=2470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000150a0102"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 1.336777194s ago: executing program 8 (id=3012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 1.241956674s ago: executing program 8 (id=3018): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 1.172392395s ago: executing program 3 (id=3020): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000890) 1.168835994s ago: executing program 7 (id=3021): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e0000000000000000000000000040000000000000000000000000000000000000000000380002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000020000000000000000000000000000000000000000000000008"], 0xb0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.152382824s ago: executing program 8 (id=3022): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.027035305s ago: executing program 7 (id=3023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 954.932705ms ago: executing program 3 (id=3025): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 857.606336ms ago: executing program 3 (id=3028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 666.838027ms ago: executing program 3 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000006"], 0x38}}, 0x0) 518.748277ms ago: executing program 3 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 456.321498ms ago: executing program 7 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 446.108598ms ago: executing program 0 (id=3035): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000008c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x800, 0xa4018, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) 437.890367ms ago: executing program 3 (id=3036): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 431.016778ms ago: executing program 6 (id=3037): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 376.589718ms ago: executing program 0 (id=3038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) close(r0) 376.323868ms ago: executing program 6 (id=3039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r3, 0x0, 0x0) 331.277728ms ago: executing program 0 (id=3040): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x14, 0x1, {0x0, 0xb, 0x2}}}}, @qdisc_kind_options=@q_cbq={{}, {0x0, 0x2, [@TCA_CBS_PARMS={0x0, 0x1, {0x2, '\x00', 0x8, 0x3, 0x4, 0xf}}, @TCA_CBS_PARMS={0x0, 0x1, {0x3, '\x00', 0x4, 0x3b2e, 0x8, 0x7}}, @TCA_CBS_PARMS={0x0, 0x1, {0x3, '\x00', 0x10001, 0x400, 0xfffffff7, 0x51e}}, @TCA_CBS_PARMS={0x0, 0x1, {0x5, '\x00', 0x10000, 0x5, 0x2}}, @TCA_CBS_PARMS={0x0, 0x1, {0xf7, '\x00', 0x2, 0x8, 0x1, 0x9}}]}}]}, 0x40}}, 0x0) 330.966278ms ago: executing program 6 (id=3041): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x453, 0x42c, 0x0, 0x0, "a7"}, 0x14}}, 0x40010) 255.955758ms ago: executing program 8 (id=3042): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001ec0)={&(0x7f0000001b40)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x4}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001b80)="b0207e3d8f013fa802955f980362e91abf0f44da4576949469ac19271d27072753b813a9ac7759650d159ad3b41aea858dc4eca555125bbd93c83f66fb64c5b50535ace297c1042dfa43a06fe38b5753e261d3512137886f0d06258a0ec36b669a1c80c8ca2c4bd0b1fa24c529503db5bf1a761738724b8cfe2649250f801b2c27b53f552bf1982accf16aae6231e27e0e9e", 0x92}, {&(0x7f0000001c80)}, {0x0}], 0x3}, 0x20000040) 255.261108ms ago: executing program 6 (id=3052): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000002000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 219.763738ms ago: executing program 7 (id=3043): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f00000002c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 217.216168ms ago: executing program 0 (id=3054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 197.072629ms ago: executing program 6 (id=3044): open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x9}) 160.296569ms ago: executing program 0 (id=3045): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 146.260519ms ago: executing program 6 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 145.335839ms ago: executing program 7 (id=3058): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2, @broadcast}], 0x10) 85.430749ms ago: executing program 8 (id=3047): r0 = io_uring_setup(0x30d1, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 52.06905ms ago: executing program 7 (id=3048): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x3) r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0xfba3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 29.28248ms ago: executing program 8 (id=3049): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=3050): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): m 0 to 1024 [ 94.392539][ T7477] EXT4-fs: Ignoring removed orlov option [ 94.398328][ T7477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.399435][ T4557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.427804][ T7489] rdma_op ffff88811938ed80 conn xmit_rdma 0000000000000000 [ 94.457595][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'. [ 94.492445][ T7477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.582981][ T7503] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1368'. [ 94.608573][ T7507] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 94.654382][ T6683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.309775][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 95.309792][ T29] audit: type=1326 audit(1732589210.988:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.339621][ T29] audit: type=1326 audit(1732589210.988:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.363474][ T29] audit: type=1326 audit(1732589210.988:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.435400][ T29] audit: type=1326 audit(1732589210.988:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.458900][ T29] audit: type=1326 audit(1732589210.988:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.482637][ T29] audit: type=1326 audit(1732589210.988:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.506268][ T29] audit: type=1326 audit(1732589210.988:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 95.529687][ T29] audit: type=1400 audit(1732589211.068:2393): avc: denied { read } for pid=3006 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.551782][ T29] audit: type=1400 audit(1732589211.068:2394): avc: denied { search } for pid=3006 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.573585][ T29] audit: type=1400 audit(1732589211.068:2395): avc: denied { append } for pid=3006 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.139066][ T7594] loop5: detected capacity change from 0 to 512 [ 96.197336][ T7594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.242686][ T7594] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.372212][ T6683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.762733][ T7611] bond1: entered promiscuous mode [ 96.767860][ T7611] bond1: entered allmulticast mode [ 96.794642][ T7611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.820179][ T7611] bond1 (unregistering): Released all slaves [ 96.888277][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1416'. [ 97.116336][ T7636] syz.0.1425[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.116471][ T7636] syz.0.1425[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.132050][ T7636] syz.0.1425[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.248644][ T7646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.388018][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 97.428495][ T7660] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 97.467579][ T7664] hsr0: entered promiscuous mode [ 97.502894][ T7664] macsec1: entered allmulticast mode [ 97.508516][ T7664] hsr0: entered allmulticast mode [ 97.513638][ T7664] hsr_slave_0: entered allmulticast mode [ 97.519383][ T7664] hsr_slave_1: entered allmulticast mode [ 97.575931][ T7664] hsr0: left allmulticast mode [ 97.580821][ T7664] hsr_slave_0: left allmulticast mode [ 97.586390][ T7664] hsr_slave_1: left allmulticast mode [ 97.932946][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1454'. [ 97.968014][ T7703] IPVS: Error joining to the multicast group [ 97.968553][ T7702] netlink: 'syz.5.1454': attribute type 10 has an invalid length. [ 98.026633][ T7702] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.307881][ T7735] macvtap0: entered promiscuous mode [ 98.314436][ T7735] macvtap0: left promiscuous mode [ 99.519126][ T4168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.687035][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 99.759474][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 99.832352][ T7829] loop5: detected capacity change from 0 to 512 [ 99.847507][ T7829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.877314][ T7829] EXT4-fs (loop5): 1 truncate cleaned up [ 99.883685][ T7829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.933134][ T6683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.965634][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1499'. [ 99.974753][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1499'. [ 100.102477][ T7849] hub 6-0:1.0: USB hub found [ 100.107421][ T7849] hub 6-0:1.0: 8 ports detected [ 100.158143][ T7854] serio: Serial port ptm0 [ 100.165838][ T4557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.353825][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 100.353844][ T29] audit: type=1400 audit(1732589216.028:2677): avc: denied { read append } for pid=7884 comm="syz.1.1509" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.383848][ T29] audit: type=1400 audit(1732589216.028:2678): avc: denied { open } for pid=7884 comm="syz.1.1509" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.519576][ T29] audit: type=1400 audit(1732589216.098:2679): avc: denied { sys_module } for pid=7886 comm="syz.5.1510" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.540753][ T29] audit: type=1400 audit(1732589216.098:2680): avc: denied { module_load } for pid=7886 comm="syz.5.1510" path="/sys/power/wakeup_count" dev="sysfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 100.565050][ T29] audit: type=1400 audit(1732589216.178:2681): avc: denied { create } for pid=7899 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.604902][ T29] audit: type=1326 audit(1732589216.268:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 100.628493][ T29] audit: type=1326 audit(1732589216.268:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 100.652162][ T29] audit: type=1326 audit(1732589216.278:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 100.675839][ T29] audit: type=1326 audit(1732589216.278:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 100.723607][ T29] audit: type=1326 audit(1732589216.378:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7914 comm="syz.5.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c266e819 code=0x7ffc0000 [ 100.922052][ T7927] uprobe: syz.5.1519:7927 failed to unregister, leaking uprobe [ 100.936727][ T7947] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 101.129116][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1532'. [ 101.341355][ T7984] loop4: detected capacity change from 0 to 1764 [ 101.601546][ T8012] sd 0:0:1:0: device reset [ 102.269000][ T8056] loop4: detected capacity change from 0 to 512 [ 102.308362][ T8056] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1556: casefold flag without casefold feature [ 102.370139][ T8056] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1556: couldn't read orphan inode 15 (err -117) [ 102.419286][ T8056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.497681][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.816568][ T8081] loop5: detected capacity change from 0 to 164 [ 102.873540][ T8081] Unable to read rock-ridge attributes [ 102.906242][ T8081] Unable to read rock-ridge attributes [ 103.232890][ T8122] loop4: detected capacity change from 0 to 512 [ 103.254286][ T8122] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.284619][ T8122] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 103.301627][ T8122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0082] [ 103.310209][ T8122] System zones: 1-12 [ 103.316232][ T8122] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1587: corrupted in-inode xattr: e_value size too large [ 103.370263][ T8122] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1587: couldn't read orphan inode 15 (err -117) [ 103.401636][ T8122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.580054][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.668463][ T8149] loop3: detected capacity change from 0 to 2048 [ 103.724135][ T8149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.761073][ T8149] EXT4-fs (loop3): shut down requested (0) [ 103.834963][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.896511][ T8160] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1600'. [ 103.971557][ T8163] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 103.971557][ T8163] program syz.3.1599 not setting count and/or reply_len properly [ 104.581427][ T8205] loop4: detected capacity change from 0 to 512 [ 104.631770][ T8205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.649629][ T4177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.689501][ T8205] EXT4-fs (loop4): 1 truncate cleaned up [ 104.695679][ T8205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.937734][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 104.940467][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.141287][ T8239] syz.0.1632[8239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.141364][ T8239] syz.0.1632[8239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.159892][ T8235] loop5: detected capacity change from 0 to 2048 [ 105.183405][ T8239] syz.0.1632[8239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.183980][ T8239] Process accounting resumed [ 105.251751][ T8235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.341388][ T6683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.374678][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 105.374693][ T29] audit: type=1400 audit(1732589221.048:2852): avc: denied { module_request } for pid=8247 comm="syz.3.1636" kmod="crypto-cbc(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.473892][ T8256] Invalid ELF header magic: != ELF [ 105.863100][ T8290] loop4: detected capacity change from 0 to 2048 [ 105.921305][ T1974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.940999][ T8290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.000369][ T29] audit: type=1400 audit(1732589221.678:2853): avc: denied { read write } for pid=8289 comm="syz.4.1646" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.023155][ T29] audit: type=1400 audit(1732589221.678:2854): avc: denied { open } for pid=8289 comm="syz.4.1646" path="/326/file0/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.061128][ T29] audit: type=1400 audit(1732589221.738:2855): avc: denied { read write } for pid=8304 comm="syz.1.1653" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.084814][ T29] audit: type=1400 audit(1732589221.738:2856): avc: denied { open } for pid=8304 comm="syz.1.1653" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.114720][ T8305] syz.1.1653[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.114809][ T8305] syz.1.1653[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.133250][ T8305] syz.1.1653[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.179752][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.207882][ T29] audit: type=1400 audit(1732589221.828:2857): avc: denied { ioctl } for pid=8307 comm="syz.5.1664" path="socket:[17287]" dev="sockfs" ino=17287 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.233224][ T29] audit: type=1400 audit(1732589221.828:2858): avc: denied { setopt } for pid=8307 comm="syz.5.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.378873][ T29] audit: type=1400 audit(1732589222.048:2859): avc: denied { read } for pid=8325 comm="syz.4.1661" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.431003][ T29] audit: type=1400 audit(1732589222.088:2860): avc: denied { open } for pid=8325 comm="syz.4.1661" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.455755][ T29] audit: type=1400 audit(1732589222.088:2861): avc: denied { ioctl } for pid=8325 comm="syz.4.1661" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.935689][ T8358] ip6gre2: entered allmulticast mode [ 107.201695][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 107.209208][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.216664][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.224095][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 107.231533][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.238942][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.246441][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.253929][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.261465][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.268993][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.276589][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.284091][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.291537][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.299010][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.306429][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.329212][ T8380] x_tables: duplicate underflow at hook 1 [ 107.418844][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.426315][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 107.433833][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.441408][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.448966][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.456377][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.463887][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.471379][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.478822][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.486282][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.493725][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.501157][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.508597][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.516279][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.523788][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.531273][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.538809][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.546358][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.553802][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.561241][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.568784][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.576261][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.583722][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.591153][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.598558][ T3398] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.610408][ T3398] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 107.737350][ T8399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.870058][ T8414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1697'. [ 108.033918][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 108.078303][ T8430] serio: Serial port ttyS3 [ 108.308858][ T8447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.477300][ T8459] hub 2-0:1.0: USB hub found [ 108.485260][ T8459] hub 2-0:1.0: 8 ports detected [ 108.631192][ T8470] bridge_slave_0: left allmulticast mode [ 108.637016][ T8470] bridge_slave_0: left promiscuous mode [ 108.642887][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.675076][ T8470] bridge_slave_1: left allmulticast mode [ 108.680889][ T8470] bridge_slave_1: left promiscuous mode [ 108.686811][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.722990][ T8470] bond0: (slave bond_slave_0): Releasing backup interface [ 108.739113][ T8470] bond0: (slave bond_slave_1): Releasing backup interface [ 108.762458][ T8470] team0: Port device team_slave_0 removed [ 108.777580][ T8470] team0: Port device team_slave_1 removed [ 108.784577][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.792237][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.804361][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.812279][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.040598][ T8491] hub 2-0:1.0: USB hub found [ 109.052628][ T8491] hub 2-0:1.0: 8 ports detected [ 109.121776][ T8503] vhci_hcd: default hub control req: 8001 v0011 i0000 l0 [ 109.137922][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'. [ 109.168626][ T8504] bond1: entered promiscuous mode [ 109.173802][ T8504] bond1: entered allmulticast mode [ 109.180303][ T8504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.324357][ T8523] syz.4.1752[8523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.324454][ T8523] syz.4.1752[8523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.336917][ T8523] syz.4.1752[8523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.690299][ T1974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.852622][ T8545] bridge0: port 3() entered blocking state [ 109.858824][ T8545] bridge0: port 3() entered disabled state [ 109.865202][ T8545] : entered allmulticast mode [ 109.870280][ T8545] bond_slave_0: entered allmulticast mode [ 109.876123][ T8545] bond_slave_1: entered allmulticast mode [ 109.904729][ T8545] : entered promiscuous mode [ 109.909739][ T8545] bond_slave_0: entered promiscuous mode [ 109.915643][ T8545] bond_slave_1: entered promiscuous mode [ 109.929296][ T8545] bridge0: port 3() entered blocking state [ 109.935454][ T8545] bridge0: port 3() entered forwarding state [ 109.943686][ T8550] : left allmulticast mode [ 109.948374][ T8550] bond_slave_0: left allmulticast mode [ 109.953982][ T8550] bond_slave_1: left allmulticast mode [ 109.959577][ T8550] : left promiscuous mode [ 109.964119][ T8550] bond_slave_0: left promiscuous mode [ 109.969824][ T8550] bond_slave_1: left promiscuous mode [ 109.975628][ T8550] bridge0: port 3() entered disabled state [ 109.976380][ T8552] syz.5.1763[8552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.513913][ T8575] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 110.589172][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 110.589203][ T29] audit: type=1326 audit(1732589226.268:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.5.1784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22c266e819 code=0x0 [ 110.737806][ T29] audit: type=1400 audit(1732589226.408:2937): avc: denied { mounton } for pid=8588 comm="syz.0.1778" path="/cgroup" dev="proc" ino=17736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.819843][ T29] audit: type=1326 audit(1732589226.488:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 110.843420][ T29] audit: type=1326 audit(1732589226.488:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 110.866799][ T29] audit: type=1326 audit(1732589226.488:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 110.890377][ T29] audit: type=1326 audit(1732589226.488:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 110.913827][ T29] audit: type=1326 audit(1732589226.488:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 111.032420][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'. [ 111.084389][ T29] audit: type=1326 audit(1732589226.758:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 111.107982][ T29] audit: type=1326 audit(1732589226.758:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 111.131489][ T29] audit: type=1326 audit(1732589226.758:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af845e819 code=0x7ffc0000 [ 111.248150][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1794'. [ 111.552461][ T8634] atomic_op ffff8881171b9d28 conn xmit_atomic 0000000000000000 [ 111.679441][ T4177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.496756][ T8685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.542430][ T8685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.632066][ T8685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.711885][ T8685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.829878][ T8685] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.890239][ T8685] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.903072][ T8697] bridge0: port 3(vlan0) entered blocking state [ 112.909590][ T8697] bridge0: port 3(vlan0) entered disabled state [ 112.937074][ T8697] vlan0: entered allmulticast mode [ 112.959127][ T8697] vlan0: left allmulticast mode [ 112.975964][ T8685] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.021128][ T8685] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.182773][ T8707] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 113.191336][ T8707] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 113.262363][ T8711] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 113.288033][ T8715] Cannot find add_set index 0 as target [ 113.453427][ T8733] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 113.475650][ T8733] IPVS: Error joining to the multicast group [ 113.525358][ T8740] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 113.574773][ T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 113.582321][ T35] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 113.594621][ T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.640864][ T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x6 [ 113.648361][ T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 113.656730][ T35] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 113.777070][ T8761] netlink: 'syz.1.1857': attribute type 3 has an invalid length. [ 113.997817][ T8772] bpf_get_probe_write_proto: 2 callbacks suppressed [ 113.997835][ T8772] syz.5.1863[8772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.016714][ T8772] syz.5.1863[8772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.041507][ T8772] syz.5.1863[8772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.132599][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1865'. [ 114.350207][ T8801] block device autoloading is deprecated and will be removed. [ 114.918411][ T8846] netlink: 'syz.4.1895': attribute type 3 has an invalid length. [ 114.928758][ T8846] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1895'. [ 115.035097][ T8851] loop1: detected capacity change from 0 to 1024 [ 115.065296][ T8851] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.080043][ T8851] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 115.227889][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1901'. [ 115.255953][ T8862] all: renamed from erspan0 (while UP) [ 115.352521][ T8872] loop1: detected capacity change from 0 to 2048 [ 115.382441][ T8872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.436076][ T8872] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.510547][ T8872] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 1 with error 28 [ 115.523321][ T8872] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.523321][ T8872] [ 115.533118][ T8872] EXT4-fs (loop1): Total free blocks count 0 [ 115.539164][ T8872] EXT4-fs (loop1): Free/Dirty block details [ 115.545067][ T8872] EXT4-fs (loop1): free_blocks=2415919104 [ 115.550876][ T8872] EXT4-fs (loop1): dirty_blocks=32 [ 115.556093][ T8872] EXT4-fs (loop1): Block reservation details [ 115.562190][ T8872] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 115.570255][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.631264][ T8898] syz.5.1917[8898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.631404][ T8898] syz.5.1917[8898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.647122][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 115.672603][ T8898] syz.5.1917[8898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.689908][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 115.689927][ T29] audit: type=1400 audit(1732589231.358:3099): avc: denied { setopt } for pid=8897 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.940313][ T8928] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 115.946883][ T8928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.954450][ T8928] vhci_hcd vhci_hcd.0: Device attached [ 115.971520][ T8936] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 115.971520][ T8936] program syz.4.1932 not setting count and/or reply_len properly [ 116.000543][ T29] audit: type=1326 audit(1732589231.638:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.024112][ T29] audit: type=1326 audit(1732589231.638:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.047570][ T29] audit: type=1326 audit(1732589231.638:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.071288][ T29] audit: type=1326 audit(1732589231.648:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.094876][ T29] audit: type=1326 audit(1732589231.648:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.118308][ T29] audit: type=1326 audit(1732589231.678:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.141824][ T29] audit: type=1326 audit(1732589231.678:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.165634][ T29] audit: type=1326 audit(1732589231.678:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.189318][ T29] audit: type=1326 audit(1732589231.678:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb49ef9e819 code=0x7ffc0000 [ 116.220755][ T8932] vhci_hcd: connection closed [ 116.220896][ T11] vhci_hcd: stop threads [ 116.230086][ T11] vhci_hcd: release socket [ 116.234520][ T11] vhci_hcd: disconnect device [ 116.288974][ T3398] vhci_hcd: vhci_device speed not set [ 116.310583][ T8945] syz.1.1935[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.311933][ T8945] syz.1.1935[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.363304][ T8945] syz.1.1935[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.402141][ T8945] cgroup: fork rejected by pids controller in /syz1 [ 116.429114][ T8954] netlink: 'syz.3.1939': attribute type 29 has an invalid length. [ 116.452644][ T8954] netlink: 'syz.3.1939': attribute type 29 has an invalid length. [ 116.469932][ T8954] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1939'. [ 116.569196][ T8961] hub 9-0:1.0: USB hub found [ 116.587138][ T8961] hub 9-0:1.0: 8 ports detected [ 116.660201][ T8963] gretap0: entered promiscuous mode [ 116.665723][ T8963] vlan2: entered promiscuous mode [ 116.705623][ T4557] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.773933][ T4557] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.850596][ T4557] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.921949][ T4557] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.016150][ T4557] bridge_slave_1: left allmulticast mode [ 117.021959][ T4557] bridge_slave_1: left promiscuous mode [ 117.027888][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.063140][ T4557] bridge_slave_0: left allmulticast mode [ 117.069001][ T4557] bridge_slave_0: left promiscuous mode [ 117.074698][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.221438][ T4557]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.233459][ T4557]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.243040][ T4557]  (unregistering): Released all slaves [ 117.253385][ T4557] bond0 (unregistering): Released all slaves [ 117.329599][ T4557] tipc: Disabling bearer [ 117.334983][ T4557] tipc: Left network mode [ 117.373095][ T4557] hsr_slave_0: left promiscuous mode [ 117.383373][ T4557] hsr_slave_1: left promiscuous mode [ 117.393714][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.401719][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.426653][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.434212][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.450329][ T4557] veth1_macvtap: left promiscuous mode [ 117.455885][ T4557] veth0_macvtap: left promiscuous mode [ 117.461555][ T4557] veth1_vlan: left promiscuous mode [ 117.466805][ T4557] veth0_vlan: left promiscuous mode [ 117.607247][ T4557] team0 (unregistering): Port device team_slave_1 removed [ 117.639887][ T4557] team0 (unregistering): Port device team_slave_0 removed [ 117.660039][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 117.755164][ T9037] bridge: RTM_NEWNEIGH bridge1 with NTF_USE is not supported [ 117.791579][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 117.881899][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1975'. [ 118.007900][ T9061] syz.5.1981[9061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.023256][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.042015][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.051613][ T8984] bridge_slave_0: entered allmulticast mode [ 118.058380][ T8984] bridge_slave_0: entered promiscuous mode [ 118.068010][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.075322][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.085107][ T8984] bridge_slave_1: entered allmulticast mode [ 118.125543][ T8984] bridge_slave_1: entered promiscuous mode [ 118.173959][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.186014][ T4557] IPVS: stop unused estimator thread 0... [ 118.202459][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.280855][ T8984] team0: Port device team_slave_0 added [ 118.296279][ T8984] team0: Port device team_slave_1 added [ 118.366662][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.373698][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.399911][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.419253][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.426253][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.452463][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.491718][ T8984] hsr_slave_0: entered promiscuous mode [ 118.509325][ T8984] hsr_slave_1: entered promiscuous mode [ 118.523824][ T8984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.554450][ T8984] Cannot create hsr debugfs directory [ 118.619753][ T9099] IPv6: Can't replace route, no match found [ 118.927470][ T8984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.947050][ T8984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.965125][ T8984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.983825][ T8984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.110198][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.153761][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.186282][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.193525][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.227147][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.234356][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.255452][ T8984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.443137][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.472787][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2027'. [ 119.618088][ T8984] veth0_vlan: entered promiscuous mode [ 119.636928][ T8984] veth1_vlan: entered promiscuous mode [ 119.670655][ T8984] veth0_macvtap: entered promiscuous mode [ 119.678638][ T8984] veth1_macvtap: entered promiscuous mode [ 119.694955][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.705606][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.716056][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.726520][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.736415][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.746898][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.776044][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2033'. [ 119.784339][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.797130][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.807765][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.817644][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.828207][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.838411][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.849050][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.903125][ T9190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2037'. [ 119.917850][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.981246][ T8984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.990111][ T8984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.999007][ T8984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.007731][ T8984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.034512][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 120.066189][ T9207] bpf_get_probe_write_proto: 2 callbacks suppressed [ 120.066212][ T9207] syz.3.2043[9207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.073168][ T9207] syz.3.2043[9207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.084960][ T9207] syz.3.2043[9207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.253663][ T9219] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.273359][ T9219] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 120.388355][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 120.462386][ T9233] loop1: detected capacity change from 0 to 512 [ 120.532239][ T9233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.545897][ T9245] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 120.574528][ T9233] EXT4-fs (loop1): 1 truncate cleaned up [ 120.591616][ T9233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.613305][ T9233] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 833155809 (only 1 groups) [ 120.627706][ T9252] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.679379][ T8984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.695025][ T9252] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.740354][ T9252] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.775729][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 120.775746][ T29] audit: type=1326 audit(1732589236.448:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235e0e819 code=0x7ffc0000 [ 120.850821][ T29] audit: type=1326 audit(1732589236.488:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f1235e0e819 code=0x7ffc0000 [ 120.874420][ T29] audit: type=1326 audit(1732589236.488:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235e0e819 code=0x7ffc0000 [ 120.897895][ T29] audit: type=1326 audit(1732589236.488:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235e0e819 code=0x7ffc0000 [ 120.929687][ T9252] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.986475][ T9252] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.025106][ T9252] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.075689][ T9252] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.104515][ T9252] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.140919][ T9288] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2080'. [ 121.227331][ T29] audit: type=1400 audit(1732589236.898:3746): avc: denied { connect } for pid=9300 comm="syz.3.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.263072][ T9303] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2085'. [ 121.296574][ T9303] 0ªX¹¦D: renamed from gretap0 (while UP) [ 121.317873][ T9303] 0ªX¹¦D: entered allmulticast mode [ 121.325497][ T29] audit: type=1326 audit(1732589236.998:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37aed157e7 code=0x7ffc0000 [ 121.353784][ T9303] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 121.406525][ T29] audit: type=1326 audit(1732589236.998:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37aecba1a9 code=0x7ffc0000 [ 121.430023][ T29] audit: type=1326 audit(1732589236.998:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 121.453844][ T29] audit: type=1326 audit(1732589236.998:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37aed157e7 code=0x7ffc0000 [ 121.477360][ T29] audit: type=1326 audit(1732589236.998:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37aecba1a9 code=0x7ffc0000 [ 121.624287][ T9332] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.730825][ T9341] syz.3.2105[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.730920][ T9341] syz.3.2105[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.742855][ T9341] syz.3.2105[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.624384][ T9375] chnl_net:caif_netlink_parms(): no params data found [ 122.744748][ T9375] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.752027][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.763884][ T9375] bridge_slave_0: entered allmulticast mode [ 122.770581][ T9375] bridge_slave_0: entered promiscuous mode [ 122.778517][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.785678][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.825556][ T9375] bridge_slave_1: entered allmulticast mode [ 122.843153][ T9375] bridge_slave_1: entered promiscuous mode [ 122.914721][ T9375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.941596][ T9375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.993861][ T9375] team0: Port device team_slave_0 added [ 123.010059][ T9375] team0: Port device team_slave_1 added [ 123.043701][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.050838][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.076868][ T9375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.089754][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.096724][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.122857][ T9375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.183253][ T9375] hsr_slave_0: entered promiscuous mode [ 123.196379][ T9375] hsr_slave_1: entered promiscuous mode [ 123.210487][ T9375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.218088][ T9375] Cannot create hsr debugfs directory [ 123.431296][ T9375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.455555][ T9375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.472456][ T9375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.484670][ T9375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.601108][ T9375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.631264][ T9375] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.651578][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.658708][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.693483][ T9440] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 123.702917][ T9438] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.716490][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.723620][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.742220][ T9440] IPVS: Error joining to the multicast group [ 123.754944][ T9442] bridge0: port 3(vlan0) entered blocking state [ 123.761346][ T9442] bridge0: port 3(vlan0) entered disabled state [ 123.768484][ T9442] vlan0: entered allmulticast mode [ 123.776640][ T9442] vlan0: left allmulticast mode [ 123.786550][ T9438] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.801793][ T9375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.851075][ T9438] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.895401][ T9375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.904415][ T9449] loop1: detected capacity change from 0 to 512 [ 123.921722][ T9438] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.935363][ T9449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.973426][ T9449] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.051711][ T8984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.223340][ T9375] veth0_vlan: entered promiscuous mode [ 124.238066][ T9375] veth1_vlan: entered promiscuous mode [ 124.273559][ T9375] veth0_macvtap: entered promiscuous mode [ 124.286433][ T9375] veth1_macvtap: entered promiscuous mode [ 124.305309][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.315950][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.326016][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.336601][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.346453][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.356985][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.366906][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.377373][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.394069][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.406974][ T1974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.424359][ T9471] tipc: Enabling of bearer rejected, already enabled [ 124.436053][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.446651][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.456629][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.467183][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.477083][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.487727][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.497805][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.508309][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.551044][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.581265][ T1974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.595709][ T9375] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.604644][ T9375] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.613477][ T9375] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.622473][ T9375] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.704338][ T1974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.722588][ T9438] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.753360][ T9438] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.781753][ T9438] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.797856][ T1974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.832538][ T9438] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.935330][ T9495] SELinux: security policydb version 18 (MLS) not backwards compatible [ 124.954247][ T1974] bridge_slave_1: left allmulticast mode [ 124.960258][ T1974] bridge_slave_1: left promiscuous mode [ 124.965675][ T9495] SELinux: failed to load policy [ 124.965893][ T1974] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.004632][ T1974] bridge_slave_0: left allmulticast mode [ 125.010401][ T1974] bridge_slave_0: left promiscuous mode [ 125.016123][ T1974] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.151555][ T9501] loop6: detected capacity change from 0 to 512 [ 125.182353][ T9501] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.220970][ T9501] EXT4-fs (loop6): 1 truncate cleaned up [ 125.232703][ T1974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.250252][ T9501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.274542][ T1974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.305186][ T1974] bond0 (unregistering): Released all slaves [ 125.352267][ T1974] hsr_slave_0: left promiscuous mode [ 125.353669][ T9501] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.2158: inode #1073372648: comm syz.6.2158: iget: illegal inode # [ 125.371716][ T1974] hsr_slave_1: left promiscuous mode [ 125.377638][ T1974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.385130][ T1974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.411996][ T9501] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.2158: error while reading EA inode 1073372648 err=-117 [ 125.430035][ T1974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.437510][ T1974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.459888][ T9501] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2158: corrupted xattr block 33: invalid header [ 125.499903][ T9501] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 125.509307][ T1974] veth1_macvtap: left promiscuous mode [ 125.514890][ T1974] veth0_macvtap: left promiscuous mode [ 125.520614][ T1974] veth1_vlan: left promiscuous mode [ 125.525942][ T1974] veth0_vlan: left promiscuous mode [ 125.598496][ T9505] uprobe: syz.0.2160:9505 failed to unregister, leaking uprobe [ 125.616410][ T9375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.700560][ T1974] team0 (unregistering): Port device team_slave_1 removed [ 125.721414][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2164'. [ 125.735222][ T1974] team0 (unregistering): Port device team_slave_0 removed [ 125.808242][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 125.808260][ T29] audit: type=1400 audit(1732589241.478:3876): avc: denied { connect } for pid=9521 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.860116][ T29] audit: type=1400 audit(1732589241.538:3877): avc: denied { read } for pid=9525 comm="syz.3.2169" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 125.882893][ T29] audit: type=1400 audit(1732589241.538:3878): avc: denied { open } for pid=9525 comm="syz.3.2169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 125.917326][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 125.929073][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 125.940189][ T9514] all: renamed from gretap0 (while UP) [ 125.999448][ T9477] chnl_net:caif_netlink_parms(): no params data found [ 126.074795][ T9540] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2177'. [ 126.104693][ T9540] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2177'. [ 126.215814][ T9554] loop6: detected capacity change from 0 to 512 [ 126.235722][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.241756][ T9554] EXT4-fs: Ignoring removed oldalloc option [ 126.242899][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.289064][ T9554] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.300792][ T9477] bridge_slave_0: entered allmulticast mode [ 126.307584][ T9477] bridge_slave_0: entered promiscuous mode [ 126.354856][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.362025][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.373707][ T9554] EXT4-fs (loop6): 1 truncate cleaned up [ 126.386593][ T9554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.408132][ T9477] bridge_slave_1: entered allmulticast mode [ 126.426739][ T9477] bridge_slave_1: entered promiscuous mode [ 126.452475][ T29] audit: type=1326 audit(1732589242.118:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.476562][ T29] audit: type=1326 audit(1732589242.128:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.500123][ T29] audit: type=1326 audit(1732589242.128:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.523585][ T29] audit: type=1326 audit(1732589242.128:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.547134][ T29] audit: type=1326 audit(1732589242.128:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.570816][ T29] audit: type=1326 audit(1732589242.128:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.594256][ T29] audit: type=1326 audit(1732589242.128:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafe31e819 code=0x7ffc0000 [ 126.623964][ T9559] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2183'. [ 126.663532][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.708222][ T9477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.709021][ T9375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.788141][ T9477] team0: Port device team_slave_0 added [ 126.807816][ T9477] team0: Port device team_slave_1 added [ 126.859041][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.866052][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.892198][ T9477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.925601][ T9567] SELinux: failed to load policy [ 126.930683][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.937702][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.963930][ T9477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.041511][ T9477] hsr_slave_0: entered promiscuous mode [ 127.055154][ T9477] hsr_slave_1: entered promiscuous mode [ 127.071126][ T9477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.079423][ T9477] Cannot create hsr debugfs directory [ 127.088385][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 127.153224][ T9576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2189'. [ 127.190093][ T9576] all: renamed from erspan0 (while UP) [ 127.286899][ T9477] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 127.326379][ T9477] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 127.348313][ T9477] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 127.375540][ T9477] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 127.484987][ T9600] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2200'. [ 127.496673][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.515515][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.553345][ T1974] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.560493][ T1974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.614120][ T1974] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.621307][ T1974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.663548][ T9612] loop6: detected capacity change from 0 to 256 [ 127.726339][ T9477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.736843][ T9477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.837771][ T9612] FAT-fs (loop6): Directory bread(block 64) failed [ 127.852704][ T9612] FAT-fs (loop6): Directory bread(block 65) failed [ 127.867477][ T9612] FAT-fs (loop6): Directory bread(block 66) failed [ 127.875647][ T9612] FAT-fs (loop6): Directory bread(block 67) failed [ 127.882968][ T9612] FAT-fs (loop6): Directory bread(block 68) failed [ 127.889575][ T9612] FAT-fs (loop6): Directory bread(block 69) failed [ 127.896331][ T9612] FAT-fs (loop6): Directory bread(block 70) failed [ 127.902803][ T9477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.902923][ T9612] FAT-fs (loop6): Directory bread(block 71) failed [ 127.916812][ T9612] FAT-fs (loop6): Directory bread(block 72) failed [ 127.923418][ T9612] FAT-fs (loop6): Directory bread(block 73) failed [ 127.938764][ T9626] uprobe: syz.3.2212:9626 failed to unregister, leaking uprobe [ 127.968786][ T9631] all: renamed from erspan0 (while UP) [ 128.050133][ T9639] @: renamed from bond0 (while UP) [ 128.164751][ T9650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9650 comm=syz.6.2217 [ 128.308014][ T9477] veth0_vlan: entered promiscuous mode [ 128.315285][ T9663] sd 0:0:1:0: device reset [ 128.335937][ T9477] veth1_vlan: entered promiscuous mode [ 128.352801][ T9477] veth0_macvtap: entered promiscuous mode [ 128.360121][ T9477] veth1_macvtap: entered promiscuous mode [ 128.370247][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.380759][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.390688][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.401303][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.411187][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.421649][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.431561][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.442047][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.452683][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.461370][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.471896][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.481871][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.492448][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.502337][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.512934][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.522830][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.533409][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.543990][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.574566][ T9477] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.583465][ T9477] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.592263][ T9477] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.601012][ T9477] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.822706][ T9687] loop6: detected capacity change from 0 to 128 [ 128.938558][ T9698] __nla_validate_parse: 5 callbacks suppressed [ 128.938577][ T9698] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2237'. [ 129.160471][ T9711] netem: change failed [ 129.334344][ T9724] loop6: detected capacity change from 0 to 512 [ 129.371513][ T9724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.449950][ T9724] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.535098][ T9724] Process accounting resumed [ 129.582369][ T9724] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 129.674415][ T9375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.701773][ T9740] netlink: 'syz.0.2254': attribute type 29 has an invalid length. [ 129.711921][ T9740] netlink: 'syz.0.2254': attribute type 29 has an invalid length. [ 129.720719][ T9740] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2254'. [ 130.031670][ T9759] block device autoloading is deprecated and will be removed. [ 130.060882][ T9759] syz.0.2265: attempt to access beyond end of device [ 130.060882][ T9759] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.357542][ T9779] loop7: detected capacity change from 0 to 8192 [ 130.367016][ T9786] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.384165][ T9788] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2275'. [ 130.564165][ T9793] block device autoloading is deprecated and will be removed. [ 130.590239][ T9793] syz.3.2280: attempt to access beyond end of device [ 130.590239][ T9793] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.772571][ T9802] bridge_slave_0: left allmulticast mode [ 130.778369][ T9802] bridge_slave_0: left promiscuous mode [ 130.784160][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.830143][ T9802] bridge_slave_1: left allmulticast mode [ 130.835852][ T9802] bridge_slave_1: left promiscuous mode [ 130.841882][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.927521][ T9802] : (slave bond_slave_0): Releasing backup interface [ 130.975591][ T9802] : (slave bond_slave_1): Releasing backup interface [ 130.991380][ T9809] loop0: detected capacity change from 0 to 512 [ 131.012537][ T9809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.061877][ T9802] team0: Port device team_slave_0 removed [ 131.088800][ T9809] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.102246][ T9802] team0: Port device team_slave_1 removed [ 131.109847][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.111764][ T9809] Process accounting resumed [ 131.117289][ T9802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.130900][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.138336][ T9802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.163143][ T9809] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 131.244427][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.312316][ T9816] sd 0:0:1:0: device reset [ 131.826294][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 131.826310][ T29] audit: type=1400 audit(1732589247.498:3934): avc: denied { create } for pid=9834 comm="syz.0.2296" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.900315][ T29] audit: type=1400 audit(1732589247.548:3935): avc: denied { prog_load } for pid=9834 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.910126][ T9836] block device autoloading is deprecated and will be removed. [ 131.919534][ T29] audit: type=1400 audit(1732589247.548:3936): avc: denied { bpf } for pid=9834 comm="syz.0.2296" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.947592][ T29] audit: type=1400 audit(1732589247.548:3937): avc: denied { perfmon } for pid=9834 comm="syz.0.2296" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.968553][ T29] audit: type=1400 audit(1732589247.548:3938): avc: denied { prog_run } for pid=9834 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.987735][ T29] audit: type=1400 audit(1732589247.568:3939): avc: denied { write } for pid=9834 comm="syz.0.2296" name="file0" dev="tmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.010327][ T29] audit: type=1400 audit(1732589247.568:3940): avc: denied { open } for pid=9834 comm="syz.0.2296" path="/526/file0" dev="tmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.033225][ T29] audit: type=1400 audit(1732589247.578:3941): avc: denied { map_create } for pid=9839 comm="syz.6.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.052414][ T29] audit: type=1400 audit(1732589247.578:3942): avc: denied { map_read map_write } for pid=9839 comm="syz.6.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.088772][ T29] audit: type=1400 audit(1732589247.688:3943): avc: denied { create } for pid=9842 comm="syz.3.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.345046][ T9857] bridge_slave_0: left allmulticast mode [ 132.350808][ T9857] bridge_slave_0: left promiscuous mode [ 132.356576][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.388830][ T9857] bridge_slave_1: left allmulticast mode [ 132.394525][ T9857] bridge_slave_1: left promiscuous mode [ 132.400367][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.417278][ T9857] @: (slave bond_slave_0): Releasing backup interface [ 132.429571][ T9868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9868 comm=syz.4.2311 [ 132.444384][ T9857] @: (slave bond_slave_1): Releasing backup interface [ 132.454561][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2311'. [ 132.467583][ T9857] team0: Port device team_slave_0 removed [ 132.476938][ T9857] team0: Port device team_slave_1 removed [ 132.483979][ T9857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.491502][ T9857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.503531][ T9857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.511023][ T9857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.531860][ T9873] program syz.0.2314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.657944][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.701930][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.746348][ T9874] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 132.811397][ T9874] bond0: (slave vti0): Error -95 calling set_mac_address [ 132.844657][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 132.859172][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 132.888103][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 133.015731][ T9880] infiniband syz1: set active [ 133.020516][ T9880] infiniband syz1: added vcan0 [ 133.040987][ T24] vcan0 speed is unknown, defaulting to 1000 [ 133.732819][ T9902] xt_TPROXY: Can be used only with -p tcp or -p udp [ 133.769862][ T9880] RDS/IB: syz1: added [ 133.774296][ T9880] smc: adding ib device syz1 with port count 1 [ 133.780622][ T9880] smc: ib device syz1 port 1 has pnetid [ 133.786831][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 133.809008][ T3397] vcan0 speed is unknown, defaulting to 1000 [ 133.830084][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 133.862108][ T9915] syz.3.2334[9915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.862178][ T9915] syz.3.2334[9915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.890995][ T9914] wireguard0: entered promiscuous mode [ 133.907891][ T9914] wireguard0: entered allmulticast mode [ 133.921206][ T9915] syz.3.2334[9915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.957402][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 134.093792][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 134.211235][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 134.317615][ T9880] vcan0 speed is unknown, defaulting to 1000 [ 134.533692][ T9955] IPv6: Can't replace route, no match found [ 134.993945][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2371'. [ 135.101947][T10013] wg2: entered promiscuous mode [ 135.106970][T10013] wg2: entered allmulticast mode [ 135.131841][T10017] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.366895][T10037] program syz.4.2390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.390506][T10039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10039 comm=syz.0.2389 [ 135.442805][T10045] loop7: detected capacity change from 0 to 512 [ 135.449089][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 135.454653][T10046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.470630][T10045] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 135.491233][T10045] EXT4-fs (loop7): 1 truncate cleaned up [ 135.497339][T10045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.584033][T10039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.622515][T10039] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 135.673433][T10039] bond1: (slave vti0): Error -95 calling set_mac_address [ 135.955803][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2408'. [ 136.195916][T10099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10099 comm=syz.6.2415 [ 136.226809][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2415'. [ 136.265372][T10099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.297825][T10111] netem: incorrect gi model size [ 136.302956][T10111] netem: change failed [ 136.368717][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.446964][T10108] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 136.460261][T10108] bond0: (slave vti0): Error -95 calling set_mac_address [ 136.599209][T10125] loop0: detected capacity change from 0 to 256 [ 136.847660][T10146] loop0: detected capacity change from 0 to 1024 [ 136.856094][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 136.856107][ T29] audit: type=1400 audit(1732589252.538:4140): avc: denied { bind } for pid=10139 comm="syz.6.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.894771][T10146] EXT4-fs: Ignoring removed nobh option [ 136.900512][T10146] EXT4-fs: Ignoring removed orlov option [ 136.922528][T10146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.972196][ T29] audit: type=1400 audit(1732589252.648:4141): avc: denied { write } for pid=10145 comm="syz.0.2438" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.994087][ T29] audit: type=1400 audit(1732589252.648:4142): avc: denied { add_name } for pid=10145 comm="syz.0.2438" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.015247][ T9477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.058072][ T29] audit: type=1400 audit(1732589252.648:4143): avc: denied { create } for pid=10145 comm="syz.0.2438" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.078836][ T29] audit: type=1400 audit(1732589252.648:4144): avc: denied { read } for pid=10147 comm="syz.6.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.098222][ T29] audit: type=1400 audit(1732589252.648:4145): avc: denied { write open } for pid=10145 comm="syz.0.2438" path="/561/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.121581][ T29] audit: type=1400 audit(1732589252.648:4146): avc: denied { read } for pid=10145 comm="syz.0.2438" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.143358][ T29] audit: type=1400 audit(1732589252.678:4147): avc: denied { unmount } for pid=9477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 137.234577][ T29] audit: type=1326 audit(1732589252.908:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489c81e819 code=0x7ffc0000 [ 137.294092][ T29] audit: type=1326 audit(1732589252.938:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f489c81e819 code=0x7ffc0000 [ 137.322972][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.365016][T10169] netem: change failed [ 137.636083][T10197] loop7: detected capacity change from 0 to 256 [ 138.293676][ T1974] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.390020][ T1974] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.430195][ T1974] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.511640][ T1974] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.910339][ T1974]  (unregistering): Released all slaves [ 138.928694][ T1974] bond0 (unregistering): Released all slaves [ 138.970356][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2478'. [ 139.017317][T10225] vcan0 speed is unknown, defaulting to 1000 [ 139.065855][T10252] netlink: 'syz.3.2479': attribute type 153 has an invalid length. [ 139.208564][ T1974] hsr_slave_0: left promiscuous mode [ 139.226747][ T1974] hsr_slave_1: left promiscuous mode [ 139.251888][ T1974] veth1_macvtap: left promiscuous mode [ 139.257459][ T1974] veth0_macvtap: left promiscuous mode [ 139.263142][ T1974] veth1_vlan: left promiscuous mode [ 139.268454][ T1974] veth0_vlan: left promiscuous mode [ 139.444092][T10269] xt_hashlimit: max too large, truncated to 1048576 [ 139.481213][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 139.512073][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 139.730608][T10225] chnl_net:caif_netlink_parms(): no params data found [ 139.851387][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2499'. [ 139.974532][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.981823][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.996886][T10225] bridge_slave_0: entered allmulticast mode [ 140.003518][T10225] bridge_slave_0: entered promiscuous mode [ 140.010357][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.017821][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.025210][T10225] bridge_slave_1: entered allmulticast mode [ 140.031821][T10225] bridge_slave_1: entered promiscuous mode [ 140.053179][T10225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.063639][T10225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.085644][T10225] team0: Port device team_slave_0 added [ 140.092611][T10225] team0: Port device team_slave_1 added [ 140.112170][T10225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.119202][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.145284][T10225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.156855][T10225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.163908][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.189865][T10225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.213722][T10317] netlink: 'syz.7.2506': attribute type 3 has an invalid length. [ 140.225253][T10225] hsr_slave_0: entered promiscuous mode [ 140.232986][T10225] hsr_slave_1: entered promiscuous mode [ 140.239161][T10319] syz.0.2507[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.239245][T10319] syz.0.2507[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.258118][T10225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.277452][T10319] syz.0.2507[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.288576][T10225] Cannot create hsr debugfs directory [ 140.307317][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2504'. [ 140.582764][T10225] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 140.611430][T10225] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 140.629275][T10225] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 140.647789][T10225] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 140.778281][T10225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.822903][T10225] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.849461][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.856653][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.892633][T10363] netlink: 'syz.0.2528': attribute type 13 has an invalid length. [ 140.909484][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.916682][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.976961][T10365] vcan0 speed is unknown, defaulting to 1000 [ 141.003175][ T35] kernel write not supported for file /1258/net/psched (pid: 35 comm: kworker/1:1) [ 141.084681][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.137214][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.171888][T10225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.600365][T10225] veth0_vlan: entered promiscuous mode [ 141.631950][T10225] veth1_vlan: entered promiscuous mode [ 141.680058][T10225] veth0_macvtap: entered promiscuous mode [ 141.709398][T10225] veth1_macvtap: entered promiscuous mode [ 141.746402][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.756932][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.767389][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.778305][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.788270][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.798731][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809694][T10225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.817981][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.828549][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.838477][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.849096][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.858930][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.869409][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.894607][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 141.894621][ T29] audit: type=1400 audit(1732589257.568:4247): avc: denied { ioctl } for pid=10415 comm="syz.0.2537" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.971840][T10225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.986640][ T29] audit: type=1400 audit(1732589257.658:4248): avc: denied { map } for pid=10422 comm="syz.3.2541" path="socket:[26326]" dev="sockfs" ino=26326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 141.996603][T10421] vlan2: entered promiscuous mode [ 142.056913][T10225] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.065847][T10225] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.074686][T10225] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.083424][T10225] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.183992][T10440] loop7: detected capacity change from 0 to 128 [ 142.205013][ T29] audit: type=1400 audit(1732589257.878:4249): avc: denied { mounton } for pid=10225 comm="syz-executor" path="/root/syzkaller.Lzm9OP/syz-tmp" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 142.220730][T10442] loop3: detected capacity change from 0 to 2048 [ 142.229608][ T29] audit: type=1400 audit(1732589257.878:4250): avc: denied { mounton } for pid=10225 comm="syz-executor" path="/root/syzkaller.Lzm9OP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 142.262846][ T29] audit: type=1400 audit(1732589257.878:4251): avc: denied { mounton } for pid=10225 comm="syz-executor" path="/root/syzkaller.Lzm9OP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 142.303863][T10440] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 142.316053][ T29] audit: type=1400 audit(1732589257.978:4252): avc: denied { mounton } for pid=10225 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 142.341468][T10442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.385092][ T29] audit: type=1400 audit(1732589258.038:4253): avc: denied { append } for pid=10441 comm="syz.3.2549" path="/538/file2/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.409567][ T29] audit: type=1400 audit(1732589258.038:4254): avc: denied { read write } for pid=10225 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.434215][ T29] audit: type=1400 audit(1732589258.038:4255): avc: denied { open } for pid=10225 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.458526][ T29] audit: type=1400 audit(1732589258.038:4256): avc: denied { ioctl } for pid=10225 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.946362][T10442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.971435][T10442] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 142.983998][T10442] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.983998][T10442] [ 142.993690][T10442] EXT4-fs (loop3): Total free blocks count 0 [ 142.999785][T10442] EXT4-fs (loop3): Free/Dirty block details [ 143.005702][T10442] EXT4-fs (loop3): free_blocks=2415919104 [ 143.011635][T10442] EXT4-fs (loop3): dirty_blocks=8192 [ 143.017031][T10442] EXT4-fs (loop3): Block reservation details [ 143.023060][T10442] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 143.029750][ T1645] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 143.260628][T10455] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 143.333360][T10478] tipc: Started in network mode [ 143.338282][T10478] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 143.345558][T10478] tipc: Enabled bearer , priority 0 [ 143.736056][T10502] syz.3.2573[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.736185][T10502] syz.3.2573[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.736269][T10502] syz.3.2573[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.880079][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.898995][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.906404][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.913912][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.921460][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.928977][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.936442][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.943896][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.951341][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.958776][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.966287][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.973736][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.981182][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.988603][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 143.996151][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.003639][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.011075][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.018480][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.025960][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.033456][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.041414][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.048849][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.056304][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.063823][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.071347][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.078873][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.086280][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.093815][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.101327][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.108794][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.116215][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.123817][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.131303][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.138766][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.146232][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.153743][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.161295][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.168737][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.176148][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.183627][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.191095][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.198578][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.206121][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 144.270449][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2576'. [ 144.330159][ T35] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 144.350989][ T4849] tipc: Node number set to 11578026 [ 144.427236][T10513] loop0: detected capacity change from 0 to 1024 [ 144.448778][T10513] EXT4-fs: test_dummy_encryption option not supported [ 144.567514][T10523] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2582'. [ 144.650246][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 144.748908][T10535] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.792223][T10541] vlan2: entered allmulticast mode [ 144.797506][T10541] bridge_slave_0: entered allmulticast mode [ 144.824074][T10541] bridge_slave_0: left allmulticast mode [ 144.963222][T10556] loop3: detected capacity change from 0 to 164 [ 144.982322][T10552] x_tables: unsorted underflow at hook 1 [ 145.012874][T10556] Unable to read rock-ridge attributes [ 145.025350][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2599'. [ 145.051142][T10556] Unable to read rock-ridge attributes [ 145.068257][T10560] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 145.134553][T10566] batadv0: entered promiscuous mode [ 145.156473][T10566] batadv_slave_0: entered promiscuous mode [ 145.170355][T10568] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 145.241976][T10577] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.358265][T10585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2611'. [ 145.467498][T10596] syz.6.2616[10596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.467725][T10596] syz.6.2616[10596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.508754][T10596] syz.6.2616[10596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.531444][T10600] tipc: Started in network mode [ 145.547920][T10600] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 145.555246][T10600] tipc: Enabled bearer , priority 0 [ 145.634465][T10607] netlink: 'syz.3.2621': attribute type 12 has an invalid length. [ 145.642467][T10607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2621'. [ 145.692569][T10613] loop0: detected capacity change from 0 to 128 [ 145.756009][T10613] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.774076][T10613] ext4 filesystem being mounted at /597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.849598][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.139648][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2639'. [ 146.285550][T10658] netlink: 'syz.8.2644': attribute type 322 has an invalid length. [ 146.344949][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 146.374800][T10662] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.416601][T10664] team0: Device ipvlan1 failed to register rx_handler [ 146.565117][T10671] loop0: detected capacity change from 0 to 512 [ 146.594562][T10671] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.2650: casefold flag without casefold feature [ 146.665753][T10671] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2650: couldn't read orphan inode 15 (err -117) [ 146.677820][ T24] tipc: Node number set to 11578026 [ 146.711956][T10679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.719329][T10679] IPv6: NLM_F_CREATE should be set when creating new route [ 146.746463][T10671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.844750][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.876069][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 147.028183][T10703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2663'. [ 147.039359][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 147.039374][ T29] audit: type=1326 audit(1732589262.718:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.111788][ T29] audit: type=1326 audit(1732589262.748:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.135718][ T29] audit: type=1326 audit(1732589262.748:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.159383][ T29] audit: type=1326 audit(1732589262.748:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.183148][ T29] audit: type=1326 audit(1732589262.748:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.206837][ T29] audit: type=1326 audit(1732589262.748:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.230539][ T29] audit: type=1326 audit(1732589262.748:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.254073][ T29] audit: type=1326 audit(1732589262.748:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.277713][ T29] audit: type=1326 audit(1732589262.748:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.301430][ T29] audit: type=1326 audit(1732589262.748:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 147.384100][T10709] bond1: entered promiscuous mode [ 147.389262][T10709] bond1: entered allmulticast mode [ 147.420003][T10709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.451797][T10709] bond1 (unregistering): Released all slaves [ 147.556872][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2681'. [ 147.568825][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2681'. [ 147.733133][T10750] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.736612][T10756] xt_hashlimit: max too large, truncated to 1048576 [ 147.794944][T10756] Cannot find set identified by id 0 to match [ 147.802961][T10750] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.862676][T10750] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.931865][T10750] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.003344][T10750] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.035332][T10750] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.073426][T10750] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.103853][T10750] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.335157][T10790] geneve0: entered allmulticast mode [ 148.488065][T10804] loop8: detected capacity change from 0 to 512 [ 148.622121][T10810] bridge0: port 3(vlan2) entered blocking state [ 148.628466][T10810] bridge0: port 3(vlan2) entered disabled state [ 148.655310][T10810] vlan2: entered allmulticast mode [ 148.672704][T10810] vlan2: left allmulticast mode [ 148.828904][T10822] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1109 [ 148.882846][T10826] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2722'. [ 149.165790][T10849] xt_hashlimit: max too large, truncated to 1048576 [ 149.271423][T10857] netlink: 'syz.0.2734': attribute type 3 has an invalid length. [ 149.619062][T10883] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 149.619062][T10883] program syz.0.2741 not setting count and/or reply_len properly [ 149.895436][T10891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.979455][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2747'. [ 149.988496][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2747'. [ 150.190739][T10917] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 150.481972][T10937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.506291][T10937] __nla_validate_parse: 1 callbacks suppressed [ 150.506310][T10937] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2765'. [ 150.525072][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.533665][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.700372][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2774'. [ 150.721145][T10957] IPVS: Error joining to the multicast group [ 150.810326][T10967] netlink: 'syz.8.2779': attribute type 29 has an invalid length. [ 150.822276][T10967] netlink: 'syz.8.2779': attribute type 29 has an invalid length. [ 150.831228][T10967] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2779'. [ 150.864965][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2780'. [ 150.966154][T10986] sd 0:0:1:0: device reset [ 151.004879][T10993] Cannot find add_set index 0 as target [ 151.037766][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2794'. [ 151.096289][T11004] smc: net device bond0 applied user defined pnetid SYZ0 [ 151.114342][T11004] smc: net device bond0 erased user defined pnetid SYZ0 [ 151.397902][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.420002][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2815'. [ 151.423266][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.430841][T11045] loop3: detected capacity change from 0 to 512 [ 151.459479][T11045] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.468667][T11045] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 151.471152][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2815'. [ 151.501119][T11045] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 151.510637][T11045] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 151.519323][T11045] System zones: 0-2, 18-18, 34-34 [ 151.526626][T11045] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 151.559807][T11045] EXT4-fs (loop3): 1 truncate cleaned up [ 151.567778][T11045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.607898][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.798154][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2834'. [ 151.908702][T11091] loop8: detected capacity change from 0 to 1764 [ 151.924385][T11091] iso9660: Unknown parameter 'iocharsmt' [ 152.010269][T11103] loop3: detected capacity change from 0 to 164 [ 152.049513][T11103] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 152.096175][T11118] devtmpfs: Unknown parameter 'posixacl' [ 152.154850][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2853'. [ 152.227145][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 152.227164][ T29] audit: type=1400 audit(1866806995.896:4594): avc: denied { create } for pid=11139 comm="syz.7.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.319507][ T29] audit: type=1400 audit(1866806995.996:4595): avc: denied { read } for pid=11146 comm="syz.7.2862" path="socket:[29481]" dev="sockfs" ino=29481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.417696][ T29] audit: type=1326 audit(1866806996.086:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.443043][ T29] audit: type=1326 audit(1866806996.086:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.466798][ T29] audit: type=1326 audit(1866806996.086:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.490575][ T29] audit: type=1326 audit(1866806996.086:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.497256][T11156] loop3: detected capacity change from 0 to 1024 [ 152.514189][ T29] audit: type=1326 audit(1866806996.086:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.514225][ T29] audit: type=1326 audit(1866806996.086:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.514287][ T29] audit: type=1326 audit(1866806996.086:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.514319][ T29] audit: type=1326 audit(1866806996.086:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aed1e819 code=0x7ffc0000 [ 152.616984][T11156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.651043][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.926615][T11193] loop7: detected capacity change from 0 to 512 [ 152.971384][T11201] syz.6.2876[11201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.991441][T11193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.017341][T11193] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.322860][T11220] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 153.339399][ T9477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.385402][T11227] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2889'. [ 153.731399][T11248] bond1: entered promiscuous mode [ 153.736671][T11248] bond1: entered allmulticast mode [ 153.762045][T11248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.803619][T11255] x_tables: unsorted underflow at hook 1 [ 153.832270][T11259] rdma_op ffff88812ec71580 conn xmit_rdma 0000000000000000 [ 153.991250][T11281] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 154.012225][T11287] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.089293][T11296] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 154.089293][T11296] program syz.7.2920 not setting count and/or reply_len properly [ 154.173002][T11308] vlan2: entered allmulticast mode [ 154.178200][T11308] bridge_slave_0: entered allmulticast mode [ 154.190983][T11308] bridge_slave_0: left allmulticast mode [ 154.333532][T11333] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.625277][T11361] loop0: detected capacity change from 0 to 512 [ 154.684627][T11361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.714619][T11372] syz.3.2955[11372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.714727][T11372] syz.3.2955[11372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.739720][T11361] ext4 filesystem being mounted at /658/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.780065][T11372] syz.3.2955[11372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.796426][T11372] 9pnet: Could not find request transport: 0xffffffffffffffff [ 154.838567][T11379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.845867][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 154.850765][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.913292][T11386] random: crng reseeded on system resumption [ 154.943306][T11390] netlink: 'syz.3.2963': attribute type 2 has an invalid length. [ 155.065228][T11399] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.073789][T11399] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.082235][T11399] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.090676][T11399] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.101529][T11399] geneve0: entered allmulticast mode [ 155.157302][T11411] hub 8-0:1.0: USB hub found [ 155.165966][T11411] hub 8-0:1.0: 8 ports detected [ 155.215897][T11415] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 155.444160][T11435] loop8: detected capacity change from 0 to 512 [ 155.458437][T11435] EXT4-fs: Ignoring removed orlov option [ 155.477537][T11435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.496931][T11435] EXT4-fs (loop8): orphan cleanup on readonly fs [ 155.515673][T11435] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2985: bg 0: block 248: padding at end of block bitmap is not set [ 155.554992][T11435] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2985: Failed to acquire dquot type 1 [ 155.577766][T11438] loop3: detected capacity change from 0 to 512 [ 155.587734][T11433] geneve0: entered allmulticast mode [ 155.595442][T11435] EXT4-fs (loop8): 1 truncate cleaned up [ 155.609927][T11435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.656117][T11435] EXT4-fs: Ignoring removed orlov option [ 155.665939][T11438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.693204][T11435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.707118][T11438] ext4 filesystem being mounted at /631/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.748100][T11435] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 155.770628][T11446] __nla_validate_parse: 8 callbacks suppressed [ 155.770646][T11446] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2989'. [ 155.809979][T11435] EXT4-fs error (device loop8): __ext4_remount:6749: comm syz.8.2985: Abort forced by user [ 155.878560][T11435] EXT4-fs (loop8): Remounting filesystem read-only [ 155.885266][T11435] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 155.961362][T11435] ext4 filesystem being remounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.024315][T11435] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 156.049263][T11435] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 156.078417][T11457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2992'. [ 156.124303][T10225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.415338][T11466] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 156.424222][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.484106][T11468] loop3: detected capacity change from 0 to 512 [ 156.551970][T11468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.586013][T11468] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.767098][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.182171][T11524] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1109 [ 157.197729][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3020'. [ 157.483072][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 157.483089][ T29] audit: type=1326 audit(1866807001.156:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.550480][ T29] audit: type=1326 audit(1866807001.156:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.574370][ T29] audit: type=1326 audit(1866807001.196:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.598049][ T29] audit: type=1326 audit(1866807001.196:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.603413][T11550] netlink: 'syz.6.3029': attribute type 10 has an invalid length. [ 157.621597][ T29] audit: type=1326 audit(1866807001.196:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.621696][ T29] audit: type=1326 audit(1866807001.196:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.676860][ T29] audit: type=1326 audit(1866807001.196:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.705695][ T29] audit: type=1326 audit(1866807001.196:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.729309][ T29] audit: type=1326 audit(1866807001.196:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.752769][ T29] audit: type=1326 audit(1866807001.196:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.0.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881363e819 code=0x7ffc0000 [ 157.816675][T11550] team0: Device hsr_slave_0 failed to register rx_handler [ 157.926180][T11562] bond2: entered promiscuous mode [ 157.931382][T11562] bond2: entered allmulticast mode [ 157.939284][T11562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.960113][T11562] bond2 (unregistering): Released all slaves [ 158.356597][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 158.387684][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 158.399166][ T24] ================================================================== [ 158.407442][ T24] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 158.414491][ T24] [ 158.416810][ T24] read-write to 0xffff888237c2e8a4 of 4 bytes by task 3397 on cpu 0: [ 158.424868][ T24] wq_worker_running+0x98/0x130 [ 158.429738][ T24] schedule_timeout+0xb8/0x160 [ 158.434605][ T24] wait_for_common+0xfb/0x1c0 [ 158.439281][ T24] usb_start_wait_urb+0xdc/0x190 [ 158.444226][ T24] usb_control_msg+0x182/0x240 [ 158.449012][ T24] hub_ext_port_status+0xbf/0x480 [ 158.454046][ T24] hub_event+0x538/0x2910 [ 158.458400][ T24] process_scheduled_works+0x483/0x9a0 [ 158.463858][ T24] worker_thread+0x51d/0x6f0 [ 158.468449][ T24] kthread+0x1d1/0x210 [ 158.472521][ T24] ret_from_fork+0x4b/0x60 [ 158.476942][ T24] ret_from_fork_asm+0x1a/0x30 [ 158.481712][ T24] [ 158.484034][ T24] read to 0xffff888237c2e8a4 of 4 bytes by task 24 on cpu 1: [ 158.491418][ T24] kick_pool+0x4d/0x2c0 [ 158.495591][ T24] __queue_work+0x8bb/0xb40 [ 158.500134][ T24] queue_work_on+0xd3/0x180 [ 158.504661][ T24] wg_queue_enqueue_per_peer_tx+0x124/0x260 [ 158.510564][ T24] wg_packet_encrypt_worker+0xa00/0xbb0 [ 158.516209][ T24] process_scheduled_works+0x483/0x9a0 [ 158.521676][ T24] worker_thread+0x51d/0x6f0 [ 158.526268][ T24] kthread+0x1d1/0x210 [ 158.530339][ T24] ret_from_fork+0x4b/0x60 [ 158.534762][ T24] ret_from_fork_asm+0x1a/0x30 [ 158.539529][ T24] [ 158.541855][ T24] value changed: 0x00000000 -> 0x00000001 [ 158.547580][ T24] [ 158.549900][ T24] Reported by Kernel Concurrency Sanitizer on: [ 158.556040][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 158.566280][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.576341][ T24] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 158.582938][ T24] ==================================================================