last executing test programs: 1m53.918791693s ago: executing program 32 (id=300): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x1) rt_sigtimedwait(&(0x7f00000005c0)={[0x401]}, 0x0, 0x0, 0x8) 1m40.688469673s ago: executing program 33 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 52.378274412s ago: executing program 5 (id=1982): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10040045}, 0x0) 52.370298262s ago: executing program 2 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 52.359011852s ago: executing program 5 (id=1984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r2, 0x23) 52.348257562s ago: executing program 2 (id=1985): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d0100001984"], 0x0) 52.109627717s ago: executing program 2 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@oldalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000180)='./file1\x00') 52.109449667s ago: executing program 5 (id=1988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 52.069979008s ago: executing program 2 (id=1990): unshare(0x6a040000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) 52.039583908s ago: executing program 5 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 51.996954369s ago: executing program 5 (id=1995): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 51.923783261s ago: executing program 2 (id=1996): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) cachestat(r2, &(0x7f0000000000)={0x4fa8, 0x2}, &(0x7f0000000040), 0x0) 51.886928251s ago: executing program 34 (id=1997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 51.844122692s ago: executing program 35 (id=2000): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 51.803721743s ago: executing program 5 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002d3d7000eedbdf252c070000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 51.803637513s ago: executing program 36 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002d3d7000eedbdf252c070000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 47.657177224s ago: executing program 2 (id=2003): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(0x3) 47.656292984s ago: executing program 37 (id=2003): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(0x3) 25.941010541s ago: executing program 9 (id=2576): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioperm(0x1, 0x9, 0xfffffffffffffff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) dup3(r2, r0, 0x0) 25.819015643s ago: executing program 9 (id=2592): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x10, r1}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x2000c010) 25.776675214s ago: executing program 9 (id=2584): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 25.721406415s ago: executing program 9 (id=2587): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) tkill(r1, 0x14) 25.677169256s ago: executing program 9 (id=2589): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 25.651355336s ago: executing program 9 (id=2591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 22.597867537s ago: executing program 7 (id=2672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 22.491759779s ago: executing program 7 (id=2674): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000b80)=ANY=[], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[], 0x0) 22.366532821s ago: executing program 7 (id=2678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 21.491332328s ago: executing program 7 (id=2686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 21.490719128s ago: executing program 7 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 21.224926324s ago: executing program 7 (id=2702): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 21.195912954s ago: executing program 38 (id=2702): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 12.119494852s ago: executing program 4 (id=2800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000000, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 11.773320269s ago: executing program 4 (id=2811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') io_uring_setup(0xa4e, &(0x7f0000000180)={0x0, 0xb10f, 0x20200, 0x2, 0x1f4}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) syz_read_part_table(0x5ab, &(0x7f00000007c0)="$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") 11.625866682s ago: executing program 4 (id=2813): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r3}, 0x18) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11.562694033s ago: executing program 4 (id=2815): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c80, &(0x7f00000000c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}]}, 0x1, 0x79c, &(0x7f0000001cc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_clone3(&(0x7f0000000380)={0x44800000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') 11.19875745s ago: executing program 4 (id=2817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}}, 0x84) 11.168965631s ago: executing program 39 (id=2591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 10.647759381s ago: executing program 4 (id=2824): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x50}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3}) 10.634199231s ago: executing program 40 (id=2824): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x50}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3}) 404.708983ms ago: executing program 6 (id=3141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) 401.670352ms ago: executing program 3 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') 397.760282ms ago: executing program 8 (id=3143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x109, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 363.051563ms ago: executing program 6 (id=3145): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(0x0, 0x26, 0x0) 345.358563ms ago: executing program 6 (id=3146): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 331.344234ms ago: executing program 6 (id=3147): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x200000000000000, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) 329.844094ms ago: executing program 3 (id=3148): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 318.843054ms ago: executing program 0 (id=3149): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 312.598674ms ago: executing program 6 (id=3150): r0 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000300), &(0x7f0000000340), 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xd45, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000014c0), 0x1, 0x10d141) ioctl$BLKSSZGET(r1, 0x1268, &(0x7f0000003b80)) 298.722494ms ago: executing program 0 (id=3151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) 297.157214ms ago: executing program 3 (id=3152): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 284.649235ms ago: executing program 6 (id=3153): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0xfffffffffffffd07, 0xc4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0xfc, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x7000000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 269.024125ms ago: executing program 8 (id=3154): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) 263.191835ms ago: executing program 0 (id=3155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 259.647646ms ago: executing program 3 (id=3156): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000200)={0x7, 0x40200007, 0x0, 0x6, 0x7, 0x40}) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 245.788736ms ago: executing program 8 (id=3157): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 229.586226ms ago: executing program 8 (id=3158): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 225.995736ms ago: executing program 0 (id=3159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 213.292546ms ago: executing program 3 (id=3161): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 167.560377ms ago: executing program 3 (id=3163): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 167.010647ms ago: executing program 8 (id=3165): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)='_', 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000280), 0x2d}, 0x2) 150.899277ms ago: executing program 8 (id=3167): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 95.704639ms ago: executing program 1 (id=3168): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r0) 95.512688ms ago: executing program 0 (id=3169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="6a0af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a26c7670568982b4e020f698393a1587aee89eb5603111ced3a0f3881f9c24561f1b2607995daa56f151905ea23c22624c12533d3984e835a3c61a7a9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0c884625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130bd030000c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2369149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300005d2c4df17c91e5451f1e44467a1ed30480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf607aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a9963b924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8241ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcfffffffffaffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda420d3e53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fd73c294290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd96058e7bf5b51cce33bd30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c9b2c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbd008fc1be8ea216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d253118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998e340aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1502a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c6d083cf2fb4598a4743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b9314dcdfadafff7ca3243a9c40a67ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b368a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e35fd7834f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c674e6e549227d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb07005dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3badf2f6ffda1360c2786e16937ab61d7dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68ac3c64458943fc59c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5fb3abc96478924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0cb3d67bbcd9b91072659d872976b796e2b81025edb5f45f785e2019ca659be7e8ae953325a27564fdab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfd1016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d0f6c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e7cdd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7b828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c6b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c51ff4040068ae2676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e9f367f2eb36eed56c037991d4026f8c743c1360a29d8177d1250ff303e207f02c33b6009abb9948d7e787c863998f0a5f1b3761e8006c8095dd0adb892e5f020a1e1032f3b4ad237e9573faa2bece611b2af8de93c3157af2a1797f696493dcda51b9c63f31f85f82689d23c1bb1b2027f6583ec9d1418e684183480cb2ce5dae947313be0000000000009b941d0c4e344baf15e63f581e9ead164a550d5d78864b0218ac8a33ee3433de56a991c72a046386223ff52c139ed3ebed412c78112524ee6b3385b2954cc89e2635d4d62d51b18b196716032e9fd4d8a5cefcd8c36125bfb92efc658fb0b7d2e933f9957fc78dc15eb3e0fc77cb84177e41db5a65c7dd3a4b3431d2f52c4c3971a83b12e399b3e91281fa1200591430fcd74269f3f14332b175225120432b0babc737be65257fbc833c096fcb8b1d5731e6f95e8259bc1aa73e75132b28aedf5bb34f5c33c319b4e25b951189d5c03815e0259448ed9c51e6e6c371e387ad82734990a37071c6225a2116db67b503f48460430b6fe6c57eca9b4ddd5c699d1883891f047ac9792eeca5f9465bfe4d6e5faf78d81b376415935d145151a47b23af15d61db53a5afcf0a792afa5e43e2f742449c1a4cbdad69dc5c1013aa36fba2013ffb4b65216618222469ab0a63d141cd11b31caadeea6e9ee58854684350bffc86f09fc563b1a68c03b828ab51fe2e36594ab83cb5a9d4417231b0988bc38b073a88054e8a066b89e24e5d651d891acfd13518f3538c9c6c91bba247ff3a5fd41934a932c7b23bfb7ac9f1a9bf72243e56508ab8e31d99287ad5bb0795e48598b4b752cf801e29d3919ae547b51392bd9bd74b8e2dd5f384b5d721d7a877227797807119746ba65f42c291e3510d80b6c0bcfad2e8bdc51f07c9916f2f9364381b633518d0fc14834aaa5c2302b6040cdc0e09626f3f86cd2eba4736d4c6e0fe8f778851f5484a179fc4c430258f06bf2c08c11a36ff4dd4bd8ff174feaff7c29154d751fbb7c122d515541a9c8421536e032f8fe5170925c83c91600b7e3d9827bf984d30a3193e1b2c3bda2494c67686a7b308ab19d884ff074071b14d8a016758b6aca4b2c9f904cda56ca14fe97b26ba61cc11c95c34e324bceb8d11ccb65744759fb602fdee6f09e07f60a8937da7b2196c6586824961386a81df193491fb050308c96227b84ef9d782b912aed6d2b86e2edb373a0d5a51e6a442eedfe0a3d4b11d8426e6fb6b50a302f03477ee5746189c3765d9c1de0cb0b32f44ef0c8d3e97aecd7a588ce76d4664f7cd4f2d73ef8030144fb459e85656831742dacfcfd018fb1620e5bd2d1913e3d069d0990ddfe4577a4c639485f5fbc7cfe8703842a8e00000000000000000000000000000044013357f3db4f3d593817847481eed577be82a6eb45fb9ffd62ce99fd5e9b5e5ddfada42b2c3a70ad4e21fd09351ce78496f71c28da5e626f6ce1f277021bc094f057a2e9d6f7cd5f778fcb4a6731e03b947740fc8b332eeb9e5104cc8d2bf6eed83907f084f00f616ef29ed7bcbef74319a2ee81ea70b09f0afc61b53b6f96b2edc7e7d76694a8ba9abcc01e1b4476fc254a13d62806ded5170546bc23065572f0a39140659f919f86e0059e22035aae1e954fbb9fa8cf0760cf3c7c1d3e822ec3aecfb1347e947a871c4347571b9f9f6aa21c2257335405cb065dd6e60cfe9d0e5cf4b6ac2f6efa6c4b3d9ce5a41b8b391c8da52e67b5a60c4f791d36fc1f0538301b554ebe115bf2974b17c97f20201fa192eacd8d7c4687e774e08e3d5cd17c5ad52ed0a32fe938ff1d8d4b87d44bab2b3118efb95014c16c5674d8c8c61cd0a8ba3a3f623e4542b30d193a0c81ece179ad4af7db3e3adfce43c886cf50f55b45294f11c1b4fcc42e435f7042651de550b12291cee52c1fb622f654b36918f5de6ac212e847d313bc13c4396e286a085566837d660b51165efb063826ebd341be48ebf9217bb2ea261fd990ed"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 94.818268ms ago: executing program 1 (id=3170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 62.807329ms ago: executing program 0 (id=3171): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 32.88798ms ago: executing program 1 (id=3172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 17.42449ms ago: executing program 1 (id=3173): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 288.71µs ago: executing program 1 (id=3174): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 1 (id=3175): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(r2, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): t 8472 - 0 [ 97.645274][ T8200] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.700448][ T4065] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.708762][ T4065] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.739649][ T4065] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.747995][ T4065] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.766137][ T4065] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.774407][ T4065] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.783554][ T4065] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.791921][ T4065] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.867108][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.875883][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.949171][ T4065] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.957876][ T4065] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.973943][ T4065] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.982498][ T4065] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.012381][ T4065] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.020674][ T4065] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.029310][ T4065] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.037637][ T4065] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.128479][ T8246] loop5: detected capacity change from 0 to 128 [ 98.142117][ T8246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 98.150593][ T8246] System zones: 1-3, 19-19, 35-36 [ 98.157760][ T8246] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.189746][ T4241] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.278532][ T8261] ref_ctr increment failed for inode: 0x7be offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888109952840 [ 98.299962][ T8261] ref_ctr increment failed for inode: 0x7be offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888109952840 [ 98.329014][ T8260] uprobe: syz.1.1933:8260 failed to unregister, leaking uprobe [ 98.371127][ T8269] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 98.404668][ T8260] uprobe: syz.1.1933:8260 failed to unregister, leaking uprobe [ 98.612890][ T8291] loop1: detected capacity change from 0 to 2048 [ 98.635951][ T8291] EXT4-fs (loop1): failed to initialize system zone (-117) [ 98.643452][ T8291] EXT4-fs (loop1): mount failed [ 98.824099][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.832695][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.858209][ T8315] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 99.204466][ T8322] __nla_validate_parse: 7 callbacks suppressed [ 99.204479][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1957'. [ 99.257366][ T8328] bridge0: entered promiscuous mode [ 99.262716][ T8328] macsec1: entered promiscuous mode [ 99.268526][ T8328] bridge0: port 1(macsec1) entered blocking state [ 99.275210][ T8328] bridge0: port 1(macsec1) entered disabled state [ 99.281977][ T8328] macsec1: entered allmulticast mode [ 99.287550][ T8328] bridge0: entered allmulticast mode [ 99.293379][ T8328] macsec1: left allmulticast mode [ 99.298456][ T8328] bridge0: left allmulticast mode [ 99.304094][ T8328] bridge0: left promiscuous mode [ 99.418529][ T8336] loop5: detected capacity change from 0 to 512 [ 99.425768][ T8336] EXT4-fs: Ignoring removed oldalloc option [ 99.436437][ T8336] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.447954][ T8336] EXT4-fs (loop5): 1 truncate cleaned up [ 99.454231][ T8336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.477952][ T4241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.575000][ T8345] lo speed is unknown, defaulting to 1000 [ 99.583127][ T8349] netlink: 64 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 99.673975][ T8356] netlink: 'syz.6.1972': attribute type 1 has an invalid length. [ 99.681838][ T8356] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1972'. [ 99.717088][ T8362] netlink: 'syz.2.1975': attribute type 4 has an invalid length. [ 99.746535][ T2991] lo speed is unknown, defaulting to 1000 [ 99.752424][ T2991] syz2: Port: 1 Link DOWN [ 99.758398][ T8362] netlink: 'syz.2.1975': attribute type 4 has an invalid length. [ 99.792658][ T8366] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1977'. [ 99.846973][ T8362] bridge0: port 1(bond0) entered disabled state [ 99.908434][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.929674][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.986970][ T2991] lo speed is unknown, defaulting to 1000 [ 99.992884][ T3407] lo speed is unknown, defaulting to 1000 [ 100.005877][ T4065] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.014325][ T4065] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.047598][ T4065] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.056114][ T4065] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.068684][ T4065] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.077319][ T4065] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.109663][ T4065] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.118155][ T4065] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.167269][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 100.167289][ T29] audit: type=1326 audit(870.165:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.196503][ T29] audit: type=1326 audit(870.165:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.219289][ T29] audit: type=1326 audit(870.186:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.242042][ T29] audit: type=1326 audit(870.186:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.265031][ T29] audit: type=1326 audit(870.186:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.287921][ T29] audit: type=1326 audit(870.186:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.310887][ T29] audit: type=1326 audit(870.186:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.333832][ T29] audit: type=1326 audit(870.186:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.367080][ T29] audit: type=1326 audit(870.239:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.390194][ T29] audit: type=1326 audit(870.239:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.5.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0552eba9 code=0x7ffc0000 [ 100.435623][ T8411] tipc: Failed to remove unknown binding: 66,1,1/0:1361816101/1361816103 [ 100.446449][ T8411] tipc: Failed to remove unknown binding: 66,1,1/0:1361816101/1361816103 [ 100.454943][ T8411] tipc: Failed to remove unknown binding: 66,1,1/0:1361816101/1361816103 [ 100.498089][ T8413] lo speed is unknown, defaulting to 1000 [ 100.795312][ T4126] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.805149][ T4126] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.852477][ T4126] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.862281][ T4126] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.900413][ T4126] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.910172][ T4126] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.947896][ T4126] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.957670][ T4126] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.006105][ T4126] bridge_slave_1: left allmulticast mode [ 101.011764][ T4126] bridge_slave_1: left promiscuous mode [ 101.017643][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.025625][ T4126] bridge_slave_0: left promiscuous mode [ 101.031320][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.060907][ T4126] team0: Port device geneve1 removed [ 101.167588][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.176907][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.185998][ T4126] bond0 (unregistering): Released all slaves [ 101.194062][ T4126] bond1 (unregistering): (slave veth7): Releasing active interface [ 101.201984][ T4126] dummy0: entered promiscuous mode [ 101.208270][ T4126] bond1 (unregistering): (slave dummy0): Releasing active interface [ 101.217192][ T4126] bond1 (unregistering): Released all slaves [ 101.273155][ T4126] IPVS: stopping backup sync thread 5780 ... [ 101.296141][ T4126] hsr_slave_0: left promiscuous mode [ 101.301936][ T4126] hsr_slave_1: left promiscuous mode [ 101.307660][ T4126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.315538][ T4126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.348202][ T4126] team0 (unregistering): Port device team_slave_1 removed [ 101.357357][ T4126] team0 (unregistering): Port device team_slave_0 removed [ 103.030761][ T8473] lo speed is unknown, defaulting to 1000 [ 103.073080][ T8473] chnl_net:caif_netlink_parms(): no params data found [ 103.103223][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.110529][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.117637][ T8473] bridge_slave_0: entered allmulticast mode [ 103.124450][ T8473] bridge_slave_0: entered promiscuous mode [ 103.131793][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.138953][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.146078][ T8473] bridge_slave_1: entered allmulticast mode [ 103.152620][ T8473] bridge_slave_1: entered promiscuous mode [ 103.167461][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.177705][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.194996][ T8473] team0: Port device team_slave_0 added [ 103.201557][ T8473] team0: Port device team_slave_1 added [ 103.215491][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.222576][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.248660][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.259816][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.266837][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.293109][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.315418][ T8473] hsr_slave_0: entered promiscuous mode [ 103.321453][ T8473] hsr_slave_1: entered promiscuous mode [ 103.327154][ T8473] debugfs: 'hsr0' already exists in 'hsr' [ 103.332961][ T8473] Cannot create hsr debugfs directory [ 103.386019][ T8473] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 103.394547][ T8473] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 103.402797][ T8473] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 103.411209][ T8473] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 103.424765][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.431921][ T8473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.439253][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.446321][ T8473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.469267][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.480324][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.488444][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.499544][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.509590][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.516620][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.526324][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.533489][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.585922][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.671531][ T8473] veth0_vlan: entered promiscuous mode [ 103.678850][ T8473] veth1_vlan: entered promiscuous mode [ 103.692911][ T8473] veth0_macvtap: entered promiscuous mode [ 103.700254][ T8473] veth1_macvtap: entered promiscuous mode [ 103.711908][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.721487][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.731419][ T4065] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.747826][ T4065] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.764636][ T4065] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.775913][ T4065] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.856121][ T8511] lo speed is unknown, defaulting to 1000 [ 103.897805][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 103.927086][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.934218][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.941611][ T8511] bridge_slave_0: entered allmulticast mode [ 103.948312][ T8511] bridge_slave_0: entered promiscuous mode [ 103.954944][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.962079][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.969324][ T8511] bridge_slave_1: entered allmulticast mode [ 103.975988][ T8511] bridge_slave_1: entered promiscuous mode [ 103.992272][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.002441][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.021798][ T8511] team0: Port device team_slave_0 added [ 104.029640][ T8511] team0: Port device team_slave_1 added [ 104.043630][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.050572][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.076608][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.088164][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.095120][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.121142][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.145236][ T8511] hsr_slave_0: entered promiscuous mode [ 104.151381][ T8511] hsr_slave_1: entered promiscuous mode [ 104.157281][ T8511] debugfs: 'hsr0' already exists in 'hsr' [ 104.162993][ T8511] Cannot create hsr debugfs directory [ 104.216292][ T8511] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 104.225340][ T8511] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 104.234049][ T8511] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 104.242886][ T8511] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 104.275606][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.287496][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.298019][ T4113] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.305219][ T4113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.316432][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.323557][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.378831][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.465578][ T8511] veth0_vlan: entered promiscuous mode [ 104.473485][ T8511] veth1_vlan: entered promiscuous mode [ 104.487900][ T8511] veth0_macvtap: entered promiscuous mode [ 104.495244][ T8511] veth1_macvtap: entered promiscuous mode [ 104.506083][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.517135][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.527974][ T4126] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.539538][ T4126] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.549521][ T4126] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.559821][ T4126] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.882390][ T8556] IPVS: Error joining to the multicast group [ 104.966950][ T8568] netlink: 'syz.8.2010': attribute type 3 has an invalid length. [ 104.974754][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2010'. [ 105.094580][ T4126] bond0: left allmulticast mode [ 105.099538][ T4126] bond_slave_0: left allmulticast mode [ 105.105063][ T4126] bond_slave_1: left allmulticast mode [ 105.110814][ T4126] bond0: left promiscuous mode [ 105.115586][ T4126] bond_slave_0: left promiscuous mode [ 105.121747][ T4126] bond_slave_1: left promiscuous mode [ 105.127372][ T4126] bridge0: port 1(bond0) entered disabled state [ 105.187146][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 105.187164][ T29] audit: type=1326 audit(875.436:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.9.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9dd6eba9 code=0x7ffc0000 [ 105.216310][ T29] audit: type=1326 audit(875.436:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.9.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9dd6eba9 code=0x7ffc0000 [ 105.292809][ T29] audit: type=1400 audit(875.541:3689): avc: denied { write } for pid=8599 comm="syz.6.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.324653][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.336348][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.349583][ T4126] bond0 (unregistering): Released all slaves [ 105.442125][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2023'. [ 105.451521][ T8614] netem: change failed [ 105.455792][ T8562] lo speed is unknown, defaulting to 1000 [ 105.522510][ T4126] hsr_slave_0: left promiscuous mode [ 105.539239][ T4126] hsr_slave_1: left promiscuous mode [ 105.545725][ T4126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.556906][ T4126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.595690][ T4126] team0 (unregistering): Port device team_slave_1 removed [ 105.605827][ T4126] team0 (unregistering): Port device team_slave_0 removed [ 105.634158][ T8570] lo speed is unknown, defaulting to 1000 [ 105.637830][ T8622] sch_fq: defrate 4294967295 ignored. [ 105.640306][ T4113] smc: removing ib device syz0 [ 105.681013][ T29] audit: type=1400 audit(875.951:3690): avc: denied { create } for pid=8623 comm="syz.6.2028" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.714499][ T29] audit: type=1400 audit(875.982:3691): avc: denied { unlink } for pid=4992 comm="syz-executor" name="file0" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.782973][ T8562] chnl_net:caif_netlink_parms(): no params data found [ 105.888370][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.895621][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.906134][ T8562] bridge_slave_0: entered allmulticast mode [ 105.912547][ T8562] bridge_slave_0: entered promiscuous mode [ 105.920003][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.927079][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.934637][ T8562] bridge_slave_1: entered allmulticast mode [ 105.942022][ T8562] bridge_slave_1: entered promiscuous mode [ 106.010989][ T8570] chnl_net:caif_netlink_parms(): no params data found [ 106.035459][ T8562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.046222][ T8562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.090867][ T8562] team0: Port device team_slave_0 added [ 106.122396][ T8562] team0: Port device team_slave_1 added [ 106.136723][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2035'. [ 106.162561][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.169819][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.187767][ T8570] bridge_slave_0: entered allmulticast mode [ 106.203255][ T8570] bridge_slave_0: entered promiscuous mode [ 106.220071][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.227406][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.235013][ T8570] bridge_slave_1: entered allmulticast mode [ 106.241865][ T8570] bridge_slave_1: entered promiscuous mode [ 106.255374][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.262439][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.288380][ T8562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.309384][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.316480][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.342536][ T8562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.344494][ T29] audit: type=1326 audit(876.654:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 106.376525][ T29] audit: type=1326 audit(876.654:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 106.401321][ T29] audit: type=1326 audit(876.696:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 106.424393][ T29] audit: type=1326 audit(876.696:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 106.447626][ T29] audit: type=1326 audit(876.696:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 106.473873][ T8570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.494607][ T8570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.511501][ T8562] hsr_slave_0: entered promiscuous mode [ 106.517522][ T8562] hsr_slave_1: entered promiscuous mode [ 106.523522][ T8562] debugfs: 'hsr0' already exists in 'hsr' [ 106.529306][ T8562] Cannot create hsr debugfs directory [ 106.585638][ T8570] team0: Port device team_slave_0 added [ 106.601386][ T8570] team0: Port device team_slave_1 added [ 106.690583][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.697670][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.723751][ T8570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.752325][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.759623][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.785630][ T8570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.897191][ T8570] hsr_slave_0: entered promiscuous mode [ 106.922331][ T8570] hsr_slave_1: entered promiscuous mode [ 106.944385][ T8684] loop8: detected capacity change from 0 to 512 [ 106.961003][ T8570] debugfs: 'hsr0' already exists in 'hsr' [ 106.966813][ T8570] Cannot create hsr debugfs directory [ 106.980450][ T8684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.033085][ T8562] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.049589][ T8684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.079816][ T8562] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.091438][ T8562] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 107.135471][ T8562] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 107.145641][ T8684] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.2050: corrupted xattr block 19: overlapping e_value [ 107.174377][ T8684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 107.195770][ T8684] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.2050: corrupted xattr block 19: overlapping e_value [ 107.210092][ T8697] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.2050: corrupted xattr block 19: overlapping e_value [ 107.255195][ T8697] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 107.267755][ T8684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 107.289608][ T8684] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.2050: corrupted xattr block 19: overlapping e_value [ 107.306462][ T8697] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.2050: corrupted xattr block 19: overlapping e_value [ 107.352357][ T8697] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 107.379196][ T8684] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.2050: corrupted xattr block 19: overlapping e_value [ 107.396385][ T8562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.409176][ T8684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 107.422022][ T8562] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.432974][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.440093][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.466031][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.473300][ T4104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.497169][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.544432][ T8562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.555190][ T8562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.651744][ T8570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.697488][ T8570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.727411][ T8562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.747464][ T8570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.750179][ T8717] loop8: detected capacity change from 0 to 128 [ 107.765104][ T8570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.796968][ T8717] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 107.804939][ T8717] FAT-fs (loop8): Filesystem has been set read-only [ 107.828046][ T8717] syz.8.2064: attempt to access beyond end of device [ 107.828046][ T8717] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 107.862467][ T8717] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 107.870524][ T8717] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 107.907571][ T8717] syz.8.2064: attempt to access beyond end of device [ 107.907571][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 107.943182][ T8717] syz.8.2064: attempt to access beyond end of device [ 107.943182][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 107.944069][ T8570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.972080][ T8734] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 107.979222][ T8717] syz.8.2064: attempt to access beyond end of device [ 107.979222][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 107.998337][ T8717] syz.8.2064: attempt to access beyond end of device [ 107.998337][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.005948][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2060'. [ 108.014152][ T8734] team0 (unregistering): Port device team_slave_0 removed [ 108.028253][ T8717] syz.8.2064: attempt to access beyond end of device [ 108.028253][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.042472][ T8717] syz.8.2064: attempt to access beyond end of device [ 108.042472][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.057441][ T8734] team0 (unregistering): Port device team_slave_1 removed [ 108.064831][ T8717] syz.8.2064: attempt to access beyond end of device [ 108.064831][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.078383][ T8717] syz.8.2064: attempt to access beyond end of device [ 108.078383][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.093236][ T8717] syz.8.2064: attempt to access beyond end of device [ 108.093236][ T8717] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.107876][ T8743] sch_tbf: burst 511 is lower than device veth9 mtu (1514) ! [ 108.119735][ T8570] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.148862][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.155948][ T4050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.178883][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.186014][ T4050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.273977][ T8562] veth0_vlan: entered promiscuous mode [ 108.290235][ T8562] veth1_vlan: entered promiscuous mode [ 108.323123][ T8562] veth0_macvtap: entered promiscuous mode [ 108.360997][ T8562] veth1_macvtap: entered promiscuous mode [ 108.378825][ T8570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.390621][ T8767] serio: Serial port ptm0 [ 108.401081][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.439829][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.464149][ T4094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.514155][ T4094] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.524291][ T4094] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.566101][ T4094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.638714][ T8570] veth0_vlan: entered promiscuous mode [ 108.668482][ T8570] veth1_vlan: entered promiscuous mode [ 108.687092][ T8793] netlink: 'syz.9.2075': attribute type 30 has an invalid length. [ 108.716444][ T8570] veth0_macvtap: entered promiscuous mode [ 108.726521][ T8570] veth1_macvtap: entered promiscuous mode [ 108.756775][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.781315][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.796954][ T2535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.822449][ T4094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.842527][ T4094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.853801][ T4094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.005651][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2096'. [ 109.029474][ T8840] loop8: detected capacity change from 0 to 512 [ 109.042182][ T8838] sch_tbf: burst 511 is lower than device veth1_macvtap mtu (1514) ! [ 109.097071][ T8840] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.115654][ T8840] EXT4-fs (loop8): mount failed [ 109.135023][ T8862] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.196608][ T8874] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 109.211793][ T8862] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.260335][ T8884] netlink: 'syz.3.2116': attribute type 3 has an invalid length. [ 109.272804][ T8862] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.332846][ T8862] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.392811][ T4138] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.459267][ T4138] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.497589][ T4138] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.525099][ T4138] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.693435][ T8916] loop9: detected capacity change from 0 to 128 [ 109.733452][ T8916] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 109.741644][ T8916] FAT-fs (loop9): Filesystem has been set read-only [ 109.780479][ T8916] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 109.788437][ T8916] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 109.855893][ T8919] loop8: detected capacity change from 0 to 512 [ 109.894620][ T8919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.927106][ T8919] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2132: bg 0: block 328: padding at end of block bitmap is not set [ 110.010513][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.045817][ T3412] hid_parser_main: 28 callbacks suppressed [ 110.045838][ T3412] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.089688][ T3412] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.176647][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 110.176663][ T29] audit: type=1326 audit(880.675:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.259176][ T29] audit: type=1326 audit(880.707:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.282218][ T29] audit: type=1326 audit(880.707:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.305188][ T29] audit: type=1326 audit(880.707:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.328495][ T29] audit: type=1326 audit(880.707:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.351536][ T29] audit: type=1326 audit(880.707:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.374781][ T29] audit: type=1326 audit(880.717:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.397652][ T29] audit: type=1326 audit(880.717:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.420646][ T29] audit: type=1326 audit(880.717:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.7.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 110.474300][ T8953] loop8: detected capacity change from 0 to 512 [ 110.560218][ T8953] EXT4-fs (loop8): 1 orphan inode deleted [ 110.586228][ T4138] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.596072][ T4138] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:67: Failed to release dquot type 1 [ 110.615501][ T8953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.005149][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 111.042554][ T8970] ip6gre1: entered allmulticast mode [ 111.207044][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.258352][ T8988] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.292056][ T8991] netlink: 'syz.3.2161': attribute type 4 has an invalid length. [ 111.321484][ T8988] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.331699][ T8991] netlink: 'syz.3.2161': attribute type 4 has an invalid length. [ 111.393241][ T8381] kernel write not supported for file bpf-prog (pid: 8381 comm: kworker/0:7) [ 111.412442][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.419724][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.485627][ T9011] loop7: detected capacity change from 0 to 128 [ 111.496142][ T9011] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 111.504070][ T9011] FAT-fs (loop7): Filesystem has been set read-only [ 111.511240][ T9011] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 111.517208][ T8991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.519197][ T9011] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 111.539996][ T8991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.603187][ T8988] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.643088][ T4094] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.665946][ T4094] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.677420][ T8988] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.704171][ T4094] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.741399][ T4094] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.760617][ T4094] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.762579][ T9016] netlink: 'syz.3.2170': attribute type 10 has an invalid length. [ 111.775437][ T4094] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.793040][ T4138] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.811274][ T4138] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.817297][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 111.832469][ T9016] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.842897][ T9018] bridge_slave_1: left allmulticast mode [ 111.848605][ T9018] bridge_slave_1: left promiscuous mode [ 111.854599][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.869250][ T9018] bridge_slave_0: left allmulticast mode [ 111.875036][ T9018] bridge_slave_0: left promiscuous mode [ 111.880709][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.915722][ T9018] bond0: (slave bridge0): Releasing backup interface [ 112.371542][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2178'. [ 112.380728][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2178'. [ 112.389743][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2178'. [ 112.399324][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2178'. [ 112.408530][ T9035] netlink: 'syz.6.2178': attribute type 6 has an invalid length. [ 112.583816][ T9054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9054 comm=syz.6.2187 [ 112.634946][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2188'. [ 112.655559][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2188'. [ 112.711620][ T9062] pimreg: entered allmulticast mode [ 112.723168][ T9062] pimreg: left allmulticast mode [ 113.091774][ T9117] atomic_op ffff88810ee44528 conn xmit_atomic 0000000000000000 [ 113.185556][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2218'. [ 113.212952][ T9137] netlink: 'syz.7.2218': attribute type 2 has an invalid length. [ 113.310079][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2223'. [ 113.769567][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.778730][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.835695][ T9221] team0 (unregistering): Port device team_slave_0 removed [ 113.843915][ T9221] team0 (unregistering): Port device team_slave_1 removed [ 114.223383][ T9244] batman_adv: batadv0: Adding interface: dummy0 [ 114.229727][ T9244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.257367][ T9244] batman_adv: batadv0: Interface activated: dummy0 [ 114.267822][ T9244] batadv0: mtu less than device minimum [ 114.274180][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.285057][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.295931][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.306781][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.317556][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.328494][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.339326][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.350258][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.360997][ T9244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.404964][ T9253] atomic_op ffff88813b3c2128 conn xmit_atomic 0000000000000000 [ 114.512433][ T9260] netlink: 'syz.8.2271': attribute type 10 has an invalid length. [ 114.520690][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.527966][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.562633][ T9260] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.569772][ T9260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.577118][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.584314][ T9260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.599974][ T9260] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.618613][ T9261] bridge_slave_1: left allmulticast mode [ 114.624584][ T9261] bridge_slave_1: left promiscuous mode [ 114.630233][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.702146][ T9261] bridge_slave_0: left allmulticast mode [ 114.707941][ T9261] bridge_slave_0: left promiscuous mode [ 114.713743][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.775028][ T9261] bond0: (slave bridge0): Releasing backup interface [ 114.879160][ T9277] loop9: detected capacity change from 0 to 512 [ 114.912468][ T9277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.983097][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 114.983113][ T29] audit: type=1400 audit(885.715:3966): avc: denied { append } for pid=9276 comm="syz.9.2279" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.041581][ T8511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.053799][ T9289] loop8: detected capacity change from 0 to 1764 [ 115.074201][ T29] audit: type=1400 audit(885.809:3967): avc: denied { mounton } for pid=9288 comm="syz.8.2283" path="/45/file0/file0" dev="loop8" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 115.149107][ T29] audit: type=1326 audit(885.893:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9300 comm="syz.9.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9dd6eba9 code=0x7ffc0000 [ 115.172703][ T29] audit: type=1326 audit(885.893:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9300 comm="syz.9.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fea9dd6eba9 code=0x7ffc0000 [ 115.195710][ T29] audit: type=1326 audit(885.893:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9300 comm="syz.9.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9dd6eba9 code=0x7ffc0000 [ 115.286085][ T29] audit: type=1326 audit(886.030:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 115.309071][ T29] audit: type=1326 audit(886.030:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 115.332040][ T29] audit: type=1326 audit(886.030:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 115.354900][ T29] audit: type=1326 audit(886.030:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 115.378392][ T29] audit: type=1326 audit(886.030:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a4deba9 code=0x7ffc0000 [ 115.604374][ T8388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8388 comm=kworker/1:13 [ 115.931954][ T9357] __nla_validate_parse: 7 callbacks suppressed [ 115.931971][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2312'. [ 115.969393][ T9357] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 116.428815][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2325'. [ 116.525504][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2329'. [ 116.534552][ T9401] IPVS: Unknown mcast interface: vcan0 [ 116.597938][ T9413] netlink: 'syz.3.2334': attribute type 10 has an invalid length. [ 116.625896][ T9415] netlink: 'syz.7.2335': attribute type 21 has an invalid length. [ 116.633894][ T9415] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2335'. [ 116.655215][ T9415] netlink: 'syz.7.2335': attribute type 6 has an invalid length. [ 116.663089][ T9415] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2335'. [ 117.260992][ T9445] loop8: detected capacity change from 0 to 2048 [ 117.276299][ T9449] loop9: detected capacity change from 0 to 512 [ 117.285638][ T9449] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2349: casefold flag without casefold feature [ 117.300212][ T9449] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2349: couldn't read orphan inode 15 (err -117) [ 117.314248][ T9445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.317163][ T9449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.356574][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.374980][ T8511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.409105][ T9457] loop9: detected capacity change from 0 to 512 [ 117.430127][ T9455] loop8: detected capacity change from 0 to 512 [ 117.438176][ T9457] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2351: casefold flag without casefold feature [ 117.451770][ T9455] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 117.465891][ T9457] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2351: couldn't read orphan inode 15 (err -117) [ 117.479055][ T9457] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.482359][ T9455] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2350: bg 0: block 4: invalid block bitmap [ 117.482515][ T9455] EXT4-fs (loop8): Remounting filesystem read-only [ 117.482575][ T9455] EXT4-fs (loop8): 1 truncate cleaned up [ 117.483221][ T9455] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.487472][ T9457] EXT4-fs (loop9): shut down requested (1) [ 117.549147][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.587660][ T8511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.674982][ T9479] loop9: detected capacity change from 0 to 512 [ 117.706372][ T9479] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.744321][ T9479] EXT4-fs error (device loop9): ext4_quota_enable:7124: comm syz.9.2359: Bad quota inum: 31, type: 1 [ 117.756821][ T9479] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=31). Please run e2fsck to fix. [ 117.772269][ T9479] EXT4-fs (loop9): mount failed [ 118.229090][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2372'. [ 118.532233][ T4138] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.582082][ T4138] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.654772][ T4138] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.740232][ T4138] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.867802][ T4138] bridge_slave_1: left allmulticast mode [ 118.873770][ T4138] bridge_slave_1: left promiscuous mode [ 118.879702][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.889914][ T4138] bridge_slave_0: left allmulticast mode [ 118.895741][ T4138] bridge_slave_0: left promiscuous mode [ 118.901592][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.910938][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2393'. [ 118.965797][ T9567] serio: Serial port ptm0 [ 119.027728][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.045061][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.055546][ T4138] bond0 (unregistering): Released all slaves [ 119.072379][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2396'. [ 119.081841][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2393'. [ 119.095937][ T9575] netlink: 'syz.3.2397': attribute type 13 has an invalid length. [ 119.119190][ T4138] hsr_slave_0: left promiscuous mode [ 119.134932][ T4138] hsr_slave_1: left promiscuous mode [ 119.141143][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.148777][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.158143][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.165641][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.182951][ T4138] veth1_macvtap: left promiscuous mode [ 119.192894][ T4138] veth0_macvtap: left promiscuous mode [ 119.207509][ T4138] veth1_vlan: left promiscuous mode [ 119.210644][ T9592] netlink: 'syz.7.2405': attribute type 3 has an invalid length. [ 119.221752][ T4138] veth0_vlan: left promiscuous mode [ 119.381072][ T9575] gretap0: refused to change device tx_queue_len [ 119.402837][ T9575] net_ratelimit: 12 callbacks suppressed [ 119.402856][ T9575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.486307][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 119.584026][ T9625] serio: Serial port ptm0 [ 119.592079][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2418'. [ 119.619995][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.627117][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.634794][ T9541] bridge_slave_0: entered allmulticast mode [ 119.641409][ T9541] bridge_slave_0: entered promiscuous mode [ 119.652673][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.658248][ T9633] atomic_op ffff888118a53528 conn xmit_atomic 0000000000000000 [ 119.660086][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.675088][ T9541] bridge_slave_1: entered allmulticast mode [ 119.681828][ T9541] bridge_slave_1: entered promiscuous mode [ 119.703777][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.714726][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.764391][ T9541] team0: Port device team_slave_0 added [ 119.778693][ T9541] team0: Port device team_slave_1 added [ 119.807133][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.814117][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.840139][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.853685][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.860670][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.886733][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.943712][ T9541] hsr_slave_0: entered promiscuous mode [ 119.952496][ T9541] hsr_slave_1: entered promiscuous mode [ 119.961368][ T9541] debugfs: 'hsr0' already exists in 'hsr' [ 119.967246][ T9541] Cannot create hsr debugfs directory [ 120.193188][ T9682] loop7: detected capacity change from 0 to 512 [ 120.202739][ T9682] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2450: bg 0: block 16: invalid block bitmap [ 120.218260][ T9682] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 120.227243][ T9682] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2450: attempt to clear invalid blocks 1669132790 len 1 [ 120.241297][ T9682] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2450: invalid indirect mapped block 4294967295 (level 1) [ 120.255538][ T9682] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2450: invalid indirect mapped block 4294967295 (level 2) [ 120.270089][ T9682] EXT4-fs (loop7): 1 truncate cleaned up [ 120.276223][ T9682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.298898][ T8562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.341962][ T9541] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 120.350910][ T9541] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 120.360206][ T9541] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 120.377957][ T9541] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 120.440472][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.455679][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.483805][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.491042][ T4096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.506654][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.513791][ T4096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.530679][ T9706] vlan0: entered allmulticast mode [ 120.535993][ T9706] dummy0: entered allmulticast mode [ 120.641929][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.969774][ T9541] veth0_vlan: entered promiscuous mode [ 120.998294][ T9541] veth1_vlan: entered promiscuous mode [ 121.023404][ T9541] veth0_macvtap: entered promiscuous mode [ 121.038206][ T9541] veth1_macvtap: entered promiscuous mode [ 121.077829][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.097822][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.123469][ T4138] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.154963][ T4094] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.188980][ T2535] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.212015][ T2535] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.258494][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 121.258513][ T29] audit: type=1326 audit(892.308:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.317515][ T29] audit: type=1326 audit(892.308:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.340589][ T29] audit: type=1326 audit(892.308:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.364246][ T29] audit: type=1326 audit(892.308:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.387515][ T29] audit: type=1326 audit(892.319:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.410435][ T29] audit: type=1326 audit(892.319:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.433326][ T29] audit: type=1326 audit(892.319:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.456294][ T29] audit: type=1326 audit(892.319:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.479350][ T29] audit: type=1326 audit(892.319:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.502237][ T29] audit: type=1326 audit(892.319:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.9.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a36deba9 code=0x7ffc0000 [ 121.608594][ T9776] loop8: detected capacity change from 0 to 512 [ 121.615262][ T9776] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.834818][ T9786] serio: Serial port ptm0 [ 121.867551][ T9789] loop8: detected capacity change from 0 to 1024 [ 121.884076][ T9789] EXT4-fs: Ignoring removed oldalloc option [ 121.890191][ T9789] EXT4-fs: Ignoring removed bh option [ 121.932043][ T9789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.967546][ T9789] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2474: Allocating blocks 497-513 which overlap fs metadata [ 122.026984][ T9789] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2474: Allocating blocks 497-513 which overlap fs metadata [ 122.084755][ T9803] __nla_validate_parse: 3 callbacks suppressed [ 122.084775][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2478'. [ 122.101785][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.157653][ T9807] syzkaller1: entered promiscuous mode [ 122.163537][ T9807] syzkaller1: entered allmulticast mode [ 122.471351][ T9823] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.716723][ T9841] loop7: detected capacity change from 0 to 164 [ 122.722395][ T9839] loop8: detected capacity change from 0 to 4096 [ 122.740475][ T9839] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.830374][ T9848] loop7: detected capacity change from 0 to 512 [ 122.850053][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.871603][ T9848] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 122.881816][ T9848] FAT-fs (loop7): Filesystem has been set read-only [ 122.903965][ T9848] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 122.915986][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2497'. [ 122.935442][ T9854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.750759][ T9869] netlink: 'syz.7.2505': attribute type 10 has an invalid length. [ 123.763063][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.770299][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.778097][ T9875] loop8: detected capacity change from 0 to 256 [ 123.782766][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.785055][ T9875] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.791480][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.791569][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.816004][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2505'. [ 123.817798][ T9869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.836703][ T9875] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.848779][ T9869] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 123.867700][ T9877] bridge_slave_1: left allmulticast mode [ 123.873659][ T9877] bridge_slave_1: left promiscuous mode [ 123.879431][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.913706][ T9877] bridge_slave_0: left allmulticast mode [ 123.919391][ T9877] bridge_slave_0: left promiscuous mode [ 123.925218][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.954365][ T9877] bond0: (slave bridge0): Releasing backup interface [ 124.144160][ T9823] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.599248][ T9823] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.666850][ T9823] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.747276][ T2535] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.760898][ T2535] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.789542][ T2535] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.799402][ T2535] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.799590][ T9904] netlink: 456 bytes leftover after parsing attributes in process `syz.6.2519'. [ 124.838416][ T9906] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2520'. [ 124.863195][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2519'. [ 124.867918][ T9906] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2520'. [ 125.059802][ T9923] batman_adv: batadv0: Interface deactivated: dummy0 [ 125.105756][ T9923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.119521][ T9923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.142245][ T9931] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2531'. [ 125.181585][ T2535] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.212312][ T2535] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.229281][ T9882] syz.3.2509 (9882) used greatest stack depth: 7528 bytes left [ 125.244769][ T2535] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.265662][ T2535] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.404760][ T9951] loop9: detected capacity change from 0 to 164 [ 125.546908][ T9960] pim6reg1: entered promiscuous mode [ 125.552523][ T9960] pim6reg1: entered allmulticast mode [ 125.915955][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2554'. [ 125.994277][ T9994] loop7: detected capacity change from 0 to 512 [ 126.023781][ T9994] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.039931][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 126.039965][ T29] audit: type=1326 audit(897.327:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5261cfada9 code=0x7ffc0000 [ 126.069178][ T29] audit: type=1326 audit(897.327:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 126.092214][ T29] audit: type=1326 audit(897.327:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 126.100449][T10001] loop9: detected capacity change from 0 to 2048 [ 126.133058][ T29] audit: type=1326 audit(897.421:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 126.156196][ T29] audit: type=1326 audit(897.421:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5261d55b67 code=0x7ffc0000 [ 126.179485][ T29] audit: type=1326 audit(897.421:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5261cfada9 code=0x7ffc0000 [ 126.202302][ T29] audit: type=1326 audit(897.421:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5261d55b67 code=0x7ffc0000 [ 126.225080][ T29] audit: type=1326 audit(897.421:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5261cfada9 code=0x7ffc0000 [ 126.247974][ T29] audit: type=1326 audit(897.421:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 126.271098][ T29] audit: type=1326 audit(897.421:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.6.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 126.309527][ T9994] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.315920][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2562'. [ 126.334798][T10001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.348833][T10011] netem: change failed [ 126.359509][ T8562] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 126.405943][T10018] tipc: Failed to remove unknown binding: 66,1,1/0:1120820292/1120820294 [ 126.423749][T10018] tipc: Failed to remove unknown binding: 66,1,1/0:1120820292/1120820294 [ 126.433249][ T9541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.605132][T10046] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 126.647287][T10055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10055 comm=syz.7.2581 [ 126.702279][T10061] loop8: detected capacity change from 0 to 164 [ 126.866101][T10079] loop7: detected capacity change from 0 to 2048 [ 126.897215][T10079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 126.967641][ T8562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 127.333818][T10126] __nla_validate_parse: 2 callbacks suppressed [ 127.333851][T10126] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2610'. [ 128.059792][T10174] loop8: detected capacity change from 0 to 2048 [ 128.126685][T10174] loop8: p1 < > p4 [ 128.135740][T10174] loop8: p4 size 8388608 extends beyond EOD, truncated [ 128.145116][T10183] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 128.174261][T10183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.192158][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 128.228812][T10183] bond1 (unregistering): Released all slaves [ 128.238289][T10191] loop8: detected capacity change from 0 to 256 [ 128.403699][T10204] ref_ctr_offset mismatch. inode: 0x2ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 129.066417][T10234] loop7: detected capacity change from 0 to 512 [ 129.094704][T10234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.145276][ T8562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.289704][T10255] netem: incorrect gi model size [ 129.294791][T10255] netem: change failed [ 129.361071][T10258] syz_tun: entered allmulticast mode [ 129.401997][T10256] syz_tun: left allmulticast mode [ 129.520798][T10267] loop7: detected capacity change from 0 to 1024 [ 129.591805][T10267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.883506][ T8562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.002670][T10277] loop7: detected capacity change from 0 to 1024 [ 130.039261][T10277] EXT4-fs: Ignoring removed orlov option [ 130.075643][T10277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.147117][ T8562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.896109][T10306] loop8: detected capacity change from 0 to 512 [ 130.905439][T10306] EXT4-fs (loop8): orphan cleanup on readonly fs [ 130.912418][T10306] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.2685: bad orphan inode 13 [ 130.922731][T10306] ext4_test_bit(bit=12, block=18) = 1 [ 130.928219][T10306] is_bad_inode(inode)=0 [ 130.932464][T10306] NEXT_ORPHAN(inode)=2130706432 [ 130.937404][T10306] max_ino=32 [ 130.940650][T10306] i_nlink=1 [ 130.944591][T10306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.962135][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 130.962154][ T29] audit: type=1400 audit(902.493:4373): avc: denied { execute } for pid=10305 comm="syz.8.2685" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.997100][T10306] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 131.026841][T10306] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2685: bg 0: block 248: padding at end of block bitmap is not set [ 131.054380][T10306] Quota error (device loop8): write_blk: dquota write failed [ 131.061926][T10306] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 131.072097][T10306] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2685: Failed to acquire dquot type 1 [ 131.087606][T10306] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.117205][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.292786][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.371359][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.447471][ T29] audit: type=1326 audit(902.996:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.447704][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.470657][ T29] audit: type=1326 audit(902.996:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.504186][ T29] audit: type=1326 audit(902.996:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.527311][ T29] audit: type=1326 audit(902.996:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.554264][T10329] loop8: detected capacity change from 0 to 1024 [ 131.561474][T10329] EXT4-fs: Ignoring removed bh option [ 131.567413][T10329] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 131.584385][ T29] audit: type=1326 audit(903.143:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.607674][ T29] audit: type=1326 audit(903.143:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.658466][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.675265][ T29] audit: type=1326 audit(903.196:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f59af0aeba9 code=0x7ffc0000 [ 131.701395][T10329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.754527][T10345] 0ªX¹¦D: left allmulticast mode [ 131.810402][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.837886][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.851086][T10345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.879734][T10349] tipc: Started in network mode [ 131.884734][T10349] tipc: Node identity ac141413, cluster identity 4711 [ 131.893148][T10349] tipc: New replicast peer: 10.1.1.2 [ 131.898921][T10349] tipc: Enabled bearer , priority 10 [ 132.029863][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.051483][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.071613][ T31] bond0 (unregistering): Released all slaves [ 132.080801][T10358] netlink: 340 bytes leftover after parsing attributes in process `syz.6.2706'. [ 132.095926][ T31] bond1 (unregistering): Released all slaves [ 132.157779][ T31] hsr_slave_0: left promiscuous mode [ 132.165270][ T31] hsr_slave_1: left promiscuous mode [ 132.186383][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.193974][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.214317][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.221788][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.273478][ T31] veth1_macvtap: left promiscuous mode [ 132.289014][ T31] veth0_macvtap: left promiscuous mode [ 132.308819][ T31] veth1_vlan: left promiscuous mode [ 132.318589][ T31] veth0_vlan: left promiscuous mode [ 132.360424][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.464352][ T31] team0 (unregistering): Port device team_slave_1 removed [ 132.492320][ T31] team0 (unregistering): Port device team_slave_0 removed [ 132.677223][T10324] chnl_net:caif_netlink_parms(): no params data found [ 132.743008][T10381] syzkaller0: entered promiscuous mode [ 132.748651][T10381] syzkaller0: entered allmulticast mode [ 132.755276][T10324] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.762421][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.771830][T10324] bridge_slave_0: entered allmulticast mode [ 132.778357][T10324] bridge_slave_0: entered promiscuous mode [ 132.789545][T10324] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.796626][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.805326][T10324] bridge_slave_1: entered allmulticast mode [ 132.811963][T10324] bridge_slave_1: entered promiscuous mode [ 132.832473][T10324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.843503][T10324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.867215][T10324] team0: Port device team_slave_0 added [ 132.874248][T10324] team0: Port device team_slave_1 added [ 132.903079][T10324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.910072][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.936396][T10324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.949369][T10324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.956405][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.958652][ T8389] tipc: Node number set to 2886997011 [ 132.983192][T10324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.080112][T10324] hsr_slave_0: entered promiscuous mode [ 133.095438][T10324] hsr_slave_1: entered promiscuous mode [ 133.111950][T10324] debugfs: 'hsr0' already exists in 'hsr' [ 133.117745][T10324] Cannot create hsr debugfs directory [ 133.481425][T10324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.517468][T10324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.546126][T10324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.579219][T10324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.708601][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.754777][T10324] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.786397][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.793542][ T4085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.819535][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.826914][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.954726][T10324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.195802][T10324] veth0_vlan: entered promiscuous mode [ 134.213588][T10324] veth1_vlan: entered promiscuous mode [ 134.245102][T10324] veth0_macvtap: entered promiscuous mode [ 134.271740][T10324] veth1_macvtap: entered promiscuous mode [ 134.297972][T10324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.318920][T10324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.339137][ T4114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.358514][ T4114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.385597][ T4114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.404521][ T4114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.754315][T10563] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.2729'. [ 135.032815][T10583] ref_ctr increment failed for inode: 0x327 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888109c3b980 [ 135.072746][T10585] loop8: detected capacity change from 0 to 512 [ 135.073545][T10583] ref_ctr increment failed for inode: 0x327 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888109c3b980 [ 135.090809][T10585] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 135.118185][T10582] uprobe: syz.3.2732:10582 failed to unregister, leaking uprobe [ 135.138626][T10585] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2733: invalid indirect mapped block 4294967295 (level 0) [ 135.160038][T10585] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2733: invalid indirect mapped block 4294967295 (level 1) [ 135.189377][T10585] EXT4-fs (loop8): 1 orphan inode deleted [ 135.195238][T10585] EXT4-fs (loop8): 1 truncate cleaned up [ 135.216537][T10585] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.254577][T10582] uprobe: syz.3.2732:10582 failed to unregister, leaking uprobe [ 135.529339][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.573451][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2736'. [ 135.827475][T10611] netlink: 'syz.4.2742': attribute type 10 has an invalid length. [ 135.856215][T10611] team0: Port device dummy0 added [ 135.881836][T10612] netlink: 'syz.4.2742': attribute type 10 has an invalid length. [ 135.904350][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 135.904374][ T29] audit: type=1400 audit(907.679:4456): avc: denied { getopt } for pid=10613 comm="syz.8.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.910958][T10612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 135.958144][ T29] audit: type=1326 audit(907.732:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 135.981571][ T29] audit: type=1326 audit(907.732:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.004769][ T29] audit: type=1326 audit(907.732:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.027608][ T29] audit: type=1326 audit(907.732:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.050764][ T29] audit: type=1326 audit(907.732:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.073669][ T29] audit: type=1326 audit(907.732:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.096765][ T29] audit: type=1326 audit(907.732:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.120138][ T29] audit: type=1326 audit(907.732:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9ef369eba9 code=0x7ffc0000 [ 136.143307][ T29] audit: type=1326 audit(907.732:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.8.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 136.167113][T10612] team0: Failed to send options change via netlink (err -105) [ 136.175014][T10612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.205232][T10612] team0: Port device dummy0 removed [ 136.247562][T10612] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.443347][ T31] bridge_slave_1: left allmulticast mode [ 136.449113][ T31] bridge_slave_1: left promiscuous mode [ 136.454849][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.476716][ T31] bridge_slave_0: left promiscuous mode [ 136.482529][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.610068][ T31] team0: Port device geneve1 removed [ 136.810391][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.828202][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.847357][ T31] bond0 (unregistering): Released all slaves [ 136.884835][ T31] bond1 (unregistering): (slave veth5): Releasing active interface [ 136.911711][ T31] dummy0: entered promiscuous mode [ 136.923215][ T31] bond1 (unregistering): (slave dummy0): Releasing active interface [ 136.961450][ T31] bond1 (unregistering): Released all slaves [ 136.971114][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 137.030596][T10663] loop4: detected capacity change from 0 to 256 [ 137.041056][ T31] tipc: Disabling bearer [ 137.045606][T10663] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.046239][ T31] tipc: Left network mode [ 137.078409][T10663] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.092332][ T31] hsr_slave_0: left promiscuous mode [ 137.105579][ T31] hsr_slave_1: left promiscuous mode [ 137.208596][T10669] serio: Serial port ttyS3 [ 137.229095][ T31] team0 (unregistering): Port device team_slave_1 removed [ 137.250026][ T31] team0 (unregistering): Port device team_slave_0 removed [ 137.514569][ T31] IPVS: stop unused estimator thread 0... [ 137.617558][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2767'. [ 137.638068][T10674] x_tables: ip_tables: udp match: only valid for protocol 17 [ 137.991615][T10692] wireguard0: entered promiscuous mode [ 137.997409][T10692] wireguard0: entered allmulticast mode [ 138.428328][T10732] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2781'. [ 139.024466][T10798] loop8: detected capacity change from 0 to 512 [ 139.041550][T10798] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.055164][T10798] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 139.083778][T10798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 139.102264][T10798] System zones: 1-12 [ 139.113566][T10798] EXT4-fs (loop8): 1 truncate cleaned up [ 139.119562][T10798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.097457][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.258154][T10879] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.2793'. [ 140.554045][T10919] loop8: detected capacity change from 0 to 1024 [ 140.595987][T10919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.658983][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.693987][T10929] batman_adv: batadv0: Removing interface: dummy0 [ 140.709888][T10929] bond0: (slave bond_slave_0): Releasing backup interface [ 140.719174][T10929] bond0: (slave bond_slave_1): Releasing backup interface [ 140.742539][T10932] netlink: 'syz.8.2809': attribute type 10 has an invalid length. [ 140.750470][T10932] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2809'. [ 140.760923][T10929] team0: Port device team_slave_0 removed [ 140.767737][T10929] team0: Port device team_slave_1 removed [ 140.773987][T10929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.781922][T10929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.790151][T10932] veth1_vlan: left promiscuous mode [ 140.798395][T10934] loop4: detected capacity change from 0 to 2048 [ 140.807871][T10932] batman_adv: batadv0: Adding interface: veth1_vlan [ 140.814584][T10932] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.876193][T10932] batman_adv: batadv0: Interface activated: veth1_vlan [ 141.008640][T10943] loop4: detected capacity change from 0 to 2048 [ 141.026243][T10943] EXT4-fs: Ignoring removed i_version option [ 141.047660][T10943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.149799][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 141.149820][ T29] audit: type=1400 audit(913.181:4623): avc: denied { read } for pid=10942 comm="syz.4.2815" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 141.316555][T10324] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 141.343344][T10324] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 141.519950][ T29] audit: type=1326 audit(913.569:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.543125][ T29] audit: type=1326 audit(913.569:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.566317][ T29] audit: type=1326 audit(913.569:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.589823][ T29] audit: type=1326 audit(913.569:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.613152][ T29] audit: type=1326 audit(913.569:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.636222][ T29] audit: type=1326 audit(913.569:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.659288][ T29] audit: type=1326 audit(913.569:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.682862][ T29] audit: type=1326 audit(913.569:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.705890][ T29] audit: type=1326 audit(913.569:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.6.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 141.754332][T10970] loop8: detected capacity change from 0 to 512 [ 141.769434][T10970] EXT4-fs: Ignoring removed orlov option [ 141.780482][T10324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.793535][ T4095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.806587][T10970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.826502][T10970] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2822: bg 0: block 328: padding at end of block bitmap is not set [ 141.843252][ T4095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.868441][ T8473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.872704][T10954] chnl_net:caif_netlink_parms(): no params data found [ 141.911564][ T4095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.962921][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.970174][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.980361][T10954] bridge_slave_0: entered allmulticast mode [ 141.987186][T10954] bridge_slave_0: entered promiscuous mode [ 141.997481][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.004669][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.012596][T10954] bridge_slave_1: entered allmulticast mode [ 142.019563][T10954] bridge_slave_1: entered promiscuous mode [ 142.028412][ T4095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.040057][T10987] syzkaller1: entered promiscuous mode [ 142.045641][T10987] syzkaller1: entered allmulticast mode [ 142.075482][T10954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.086133][T10954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.106361][T10954] team0: Port device team_slave_0 added [ 142.113152][T10954] team0: Port device team_slave_1 added [ 142.137353][T10954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.144339][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.170602][T10954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.184604][T10954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.191678][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.217798][T10954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.247249][ T4095] bridge_slave_1: left allmulticast mode [ 142.252967][ T4095] bridge_slave_1: left promiscuous mode [ 142.258860][ T4095] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.267369][ T4095] bridge_slave_0: left allmulticast mode [ 142.273153][ T4095] bridge_slave_0: left promiscuous mode [ 142.278928][ T4095] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.437774][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2833'. [ 142.455424][ T4095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.482291][ T4095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.509043][ T4095] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 142.518522][ T4095] bond0 (unregistering): Released all slaves [ 142.605295][ T4095] hsr_slave_0: left promiscuous mode [ 142.621148][ T4095] hsr_slave_1: left promiscuous mode [ 142.633882][ T4095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.641470][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.649843][ T4095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.657458][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.698707][ T4095] veth1_macvtap: left promiscuous mode [ 142.711570][ T4095] veth0_macvtap: left promiscuous mode [ 142.722385][ T4095] veth1_vlan: left promiscuous mode [ 142.732699][ T4095] veth0_vlan: left promiscuous mode [ 142.791949][ T4095] team0 (unregistering): Port device team_slave_1 removed [ 142.815412][ T4095] team0 (unregistering): Port device team_slave_0 removed [ 142.862564][T10954] hsr_slave_0: entered promiscuous mode [ 142.870635][T10954] hsr_slave_1: entered promiscuous mode [ 142.911455][T10983] chnl_net:caif_netlink_parms(): no params data found [ 143.001513][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.008924][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.016197][T10983] bridge_slave_0: entered allmulticast mode [ 143.022644][T10983] bridge_slave_0: entered promiscuous mode [ 143.029776][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.037120][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.044517][T10983] bridge_slave_1: entered allmulticast mode [ 143.051575][T10983] bridge_slave_1: entered promiscuous mode [ 143.075116][T11042] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2853'. [ 143.086309][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.100833][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.137048][T10983] team0: Port device team_slave_0 added [ 143.144719][T10983] team0: Port device team_slave_1 added [ 143.186666][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.193697][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.220911][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.243748][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.250907][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.277121][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.322768][T10983] hsr_slave_0: entered promiscuous mode [ 143.330259][T10983] hsr_slave_1: entered promiscuous mode [ 143.337680][T10983] debugfs: 'hsr0' already exists in 'hsr' [ 143.343584][T10983] Cannot create hsr debugfs directory [ 143.352164][ T31] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.397309][T10954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.411762][T10954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.428199][ T31] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.456772][T10954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.489457][T10954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.508351][ T31] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.553088][ T31] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.666684][T10954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.678576][T10954] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.704693][ T31] bridge_slave_1: left allmulticast mode [ 143.710376][ T31] bridge_slave_1: left promiscuous mode [ 143.716350][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.743260][ T31] bridge_slave_0: left allmulticast mode [ 143.748943][ T31] bridge_slave_0: left promiscuous mode [ 143.754719][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.880805][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.891132][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.902765][ T31] bond0 (unregistering): Released all slaves [ 143.931905][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.939050][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.020244][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.027327][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.037566][ T31] hsr_slave_0: left promiscuous mode [ 144.043410][ T31] hsr_slave_1: left promiscuous mode [ 144.049348][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.056933][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.064488][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.072021][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.083547][ T31] veth1_macvtap: left promiscuous mode [ 144.089431][ T31] veth0_macvtap: left promiscuous mode [ 144.096500][ T31] veth1_vlan: left promiscuous mode [ 144.103408][ T31] veth0_vlan: left promiscuous mode [ 144.196835][ T31] team0 (unregistering): Port device team_slave_1 removed [ 144.211821][ T31] team0 (unregistering): Port device team_slave_0 removed [ 144.280234][T10954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.290766][T10954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.374853][T10983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.398180][T10983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.417047][T10983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.438079][T10954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.449505][T10983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.542673][T10983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.579757][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.600259][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.607386][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.620979][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.628327][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.667992][T10983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.696040][T10954] veth0_vlan: entered promiscuous mode [ 144.711952][T10954] veth1_vlan: entered promiscuous mode [ 144.733458][T10954] veth0_macvtap: entered promiscuous mode [ 144.753124][T10954] veth1_macvtap: entered promiscuous mode [ 144.775331][T10954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.794614][T10954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.819359][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.847644][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.882727][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.902645][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.925253][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.962736][T11140] pim6reg1: entered promiscuous mode [ 144.968169][T11140] pim6reg1: entered allmulticast mode [ 145.023111][T10983] veth0_vlan: entered promiscuous mode [ 145.050162][T10983] veth1_vlan: entered promiscuous mode [ 145.074039][T10983] veth0_macvtap: entered promiscuous mode [ 145.114209][T10983] veth1_macvtap: entered promiscuous mode [ 145.162037][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.174703][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.202862][T11158] loop8: detected capacity change from 0 to 8192 [ 145.216965][ T4095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.229604][ T4095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.251437][ T4095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.261789][T11158] loop8: p1 p2 < > p3 p4 < p5 > [ 145.267110][T11158] loop8: partition table partially beyond EOD, truncated [ 145.281047][ T4095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.288047][T11158] loop8: p1 size 100663296 extends beyond EOD, truncated [ 145.325979][T11165] netlink: 264 bytes leftover after parsing attributes in process `syz.6.2879'. [ 145.327781][T11158] loop8: p2 start 591104 is beyond EOD, truncated [ 145.342671][T11158] loop8: p3 start 33572980 is beyond EOD, truncated [ 145.389538][T11158] loop8: p5 size 100663296 extends beyond EOD, truncated [ 145.563253][T11180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2885'. [ 145.667243][T11187] bond0: (slave bond_slave_0): Releasing backup interface [ 145.688329][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 145.702859][T11187] bond0: (slave bond_slave_1): Releasing backup interface [ 145.712699][T11187] team0: Port device team_slave_0 removed [ 145.720057][T11187] team0: Port device team_slave_1 removed [ 145.727582][T11187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.735455][T11187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.852138][T11194] netlink: 'syz.6.2891': attribute type 10 has an invalid length. [ 145.862709][T11194] team0: Port device dummy0 added [ 145.875242][T11194] netlink: 'syz.6.2891': attribute type 10 has an invalid length. [ 145.891622][T11194] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.913754][T11194] team0: Failed to send options change via netlink (err -105) [ 145.923515][T11194] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.934265][T11194] team0: Port device dummy0 removed [ 146.196104][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 146.196122][ T29] audit: type=1326 audit(918.483:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.225458][ T29] audit: type=1326 audit(918.483:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.295883][T11210] loop0: detected capacity change from 0 to 1024 [ 146.303494][ T29] audit: type=1326 audit(918.483:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.326904][ T29] audit: type=1326 audit(918.483:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.349958][ T29] audit: type=1326 audit(918.483:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.373347][ T29] audit: type=1326 audit(918.546:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.396611][ T29] audit: type=1326 audit(918.546:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.420054][ T29] audit: type=1326 audit(918.546:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.443043][ T29] audit: type=1326 audit(918.556:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.466109][ T29] audit: type=1326 audit(918.556:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261d5eba9 code=0x7ffc0000 [ 146.495996][T11210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.563240][T11210] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2897: Allocating blocks 449-513 which overlap fs metadata [ 146.635267][T11209] EXT4-fs (loop0): pa ffff88810698b620: logic 48, phys. 177, len 21 [ 146.643439][T11209] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 146.695498][T10983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.830796][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 146.973525][T11253] loop8: detected capacity change from 0 to 128 [ 146.983623][T11253] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 146.991668][T11253] FAT-fs (loop8): Filesystem has been set read-only [ 146.998909][T11253] bio_check_eod: 53419 callbacks suppressed [ 146.998965][T11253] syz.8.2913: attempt to access beyond end of device [ 146.998965][T11253] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 147.019097][T11253] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 147.027167][T11253] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 147.038318][T11254] syz.8.2913: attempt to access beyond end of device [ 147.038318][T11254] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 147.051611][T11254] buffer_io_error: 14 callbacks suppressed [ 147.051627][T11254] Buffer I/O error on dev loop8, logical block 2065, async page read [ 147.067548][T11254] syz.8.2913: attempt to access beyond end of device [ 147.067548][T11254] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 147.081002][T11254] Buffer I/O error on dev loop8, logical block 2066, async page read [ 147.091059][T11254] syz.8.2913: attempt to access beyond end of device [ 147.091059][T11254] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 147.104854][T11254] Buffer I/O error on dev loop8, logical block 2067, async page read [ 147.115259][T11254] syz.8.2913: attempt to access beyond end of device [ 147.115259][T11254] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 147.128768][T11254] Buffer I/O error on dev loop8, logical block 2068, async page read [ 147.139024][T11254] syz.8.2913: attempt to access beyond end of device [ 147.139024][T11254] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 147.152394][T11254] Buffer I/O error on dev loop8, logical block 2069, async page read [ 147.160841][T11254] syz.8.2913: attempt to access beyond end of device [ 147.160841][T11254] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 147.174181][T11254] Buffer I/O error on dev loop8, logical block 2070, async page read [ 147.182714][T11254] syz.8.2913: attempt to access beyond end of device [ 147.182714][T11254] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 147.196230][T11254] Buffer I/O error on dev loop8, logical block 2071, async page read [ 147.204566][T11254] syz.8.2913: attempt to access beyond end of device [ 147.204566][T11254] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 147.218455][T11254] Buffer I/O error on dev loop8, logical block 2072, async page read [ 147.226929][T11253] syz.8.2913: attempt to access beyond end of device [ 147.226929][T11253] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 147.240437][T11253] Buffer I/O error on dev loop8, logical block 2065, async page read [ 147.248814][T11253] Buffer I/O error on dev loop8, logical block 2066, async page read [ 147.718843][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2932'. [ 147.792698][T11300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11300 comm=syz.6.2934 [ 147.858270][T11302] netlink: zone id is out of range [ 147.863438][T11302] netlink: zone id is out of range [ 147.877213][T11308] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.910476][T11302] netlink: zone id is out of range [ 147.915694][T11302] netlink: zone id is out of range [ 147.926611][T11302] netlink: zone id is out of range [ 147.953777][T11302] netlink: zone id is out of range [ 147.968736][T11302] netlink: zone id is out of range [ 147.976861][T11302] netlink: zone id is out of range [ 147.983564][T11302] netlink: zone id is out of range [ 147.990020][T11302] netlink: zone id is out of range [ 148.063954][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 148.072962][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2951'. [ 148.087559][ T4095] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.096462][ T4095] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.108314][ T4095] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.117258][ T4095] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.266835][T11354] IPv6: Can't replace route, no match found [ 148.309297][T11362] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.387006][T11374] netlink: 'syz.3.2970': attribute type 21 has an invalid length. [ 148.395269][T11374] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2970'. [ 148.404662][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 148.993485][T11435] netlink: 'syz.0.2999': attribute type 10 has an invalid length. [ 149.004253][T11435] team0: Port device dummy0 added [ 149.013669][T11435] netlink: 'syz.0.2999': attribute type 10 has an invalid length. [ 149.024127][T11435] team0: Port device dummy0 removed [ 149.031562][T11435] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.592521][T11503] netlink: 'syz.3.3033': attribute type 4 has an invalid length. [ 149.604318][T11503] netlink: 'syz.3.3033': attribute type 4 has an invalid length. [ 149.851540][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3045'. [ 150.130102][T11558] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3057'. [ 150.224221][T11564] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 150.232118][T11564] netlink: 'syz.0.3061': attribute type 4 has an invalid length. [ 150.239910][T11564] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3061'. [ 150.256105][T11564] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 150.263947][T11564] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3061'. [ 150.446920][T11581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11581 comm=syz.8.3068 [ 150.819133][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 150.842549][T11636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.861535][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3095'. [ 150.877452][T11636] bond1 (unregistering): Released all slaves [ 150.966224][ T29] kauditd_printk_skb: 1171 callbacks suppressed [ 150.966242][ T29] audit: type=1400 audit(923.491:6170): avc: denied { read write } for pid=8473 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.021616][ T29] audit: type=1326 audit(923.491:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ffdd35b67 code=0x7ffc0000 [ 151.044754][ T29] audit: type=1326 audit(923.491:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ffdcdada9 code=0x7ffc0000 [ 151.068301][ T29] audit: type=1326 audit(923.491:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6ffdd3eba9 code=0x7ffc0000 [ 151.081769][T11659] veth1_macvtap: left promiscuous mode [ 151.091573][ T29] audit: type=1400 audit(923.512:6174): avc: denied { map_create } for pid=11647 comm="syz.8.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.116086][ T29] audit: type=1400 audit(923.512:6175): avc: denied { prog_load } for pid=11647 comm="syz.8.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.116300][T11659] macsec0: entered promiscuous mode [ 151.134825][ T29] audit: type=1400 audit(923.512:6176): avc: denied { prog_load } for pid=11647 comm="syz.8.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.134863][ T29] audit: type=1400 audit(923.512:6177): avc: denied { prog_load } for pid=11647 comm="syz.8.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.177625][ T29] audit: type=1400 audit(923.512:6178): avc: denied { mounton } for pid=11647 comm="syz.8.3101" path="/233/file0" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 151.200098][ T29] audit: type=1326 audit(923.512:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ffdd35b67 code=0x7ffc0000 [ 151.284081][T11672] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.295194][T11672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.302421][T11672] IPv6: NLM_F_CREATE should be set when creating new route [ 151.346182][T11679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11679 comm=syz.3.3113 [ 151.367465][T11682] macvlan1: entered promiscuous mode [ 151.375973][T11682] ipvlan0: entered promiscuous mode [ 151.382461][T11682] ipvlan0: left promiscuous mode [ 151.388133][T11682] macvlan1: left promiscuous mode [ 151.523487][T11687] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.3118'. [ 151.532796][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'. [ 151.872837][T11714] ip6gre1: entered allmulticast mode [ 152.080368][T11730] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.3138'. [ 152.126764][T11740] validate_nla: 1 callbacks suppressed [ 152.126780][T11740] netlink: 'syz.8.3143': attribute type 2 has an invalid length. [ 152.373696][T11790] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3163'. [ 152.472742][T11796] ================================================================== [ 152.480883][T11796] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 152.488025][T11796] [ 152.490372][T11796] read-write to 0xffff88810de3b96c of 4 bytes by task 11789 on cpu 0: [ 152.498674][T11796] fifo_open+0x86/0x5d0 [ 152.502880][T11796] do_dentry_open+0x646/0xa20 [ 152.507686][T11796] vfs_open+0x37/0x1e0 [ 152.511792][T11796] path_openat+0x1c5e/0x2170 [ 152.516415][T11796] do_filp_open+0x109/0x230 [ 152.520939][T11796] do_sys_openat2+0xa6/0x110 [ 152.525569][T11796] __x64_sys_openat+0xf2/0x120 [ 152.530369][T11796] x64_sys_call+0x2e9c/0x2ff0 [ 152.535075][T11796] do_syscall_64+0xd2/0x200 [ 152.539656][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.545577][T11796] [ 152.547900][T11796] read to 0xffff88810de3b96c of 4 bytes by task 11796 on cpu 1: [ 152.555619][T11796] wait_for_partner+0xb5/0x1c0 [ 152.560386][T11796] fifo_open+0x462/0x5d0 [ 152.564666][T11796] do_dentry_open+0x646/0xa20 [ 152.569416][T11796] vfs_open+0x37/0x1e0 [ 152.573469][T11796] path_openat+0x1c5e/0x2170 [ 152.578224][T11796] do_filp_open+0x109/0x230 [ 152.582792][T11796] do_sys_openat2+0xa6/0x110 [ 152.587363][T11796] __x64_sys_open+0xe6/0x110 [ 152.591945][T11796] x64_sys_call+0x1457/0x2ff0 [ 152.596620][T11796] do_syscall_64+0xd2/0x200 [ 152.601112][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.606983][T11796] [ 152.609286][T11796] value changed: 0x00000001 -> 0x00000002 [ 152.614992][T11796] [ 152.617299][T11796] Reported by Kernel Concurrency Sanitizer on: [ 152.623427][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.8.3167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.633204][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.643240][T11796] ================================================================== [ 152.905320][ T57] bond0 (unregistering): Released all slaves [ 152.965008][ T57] hsr_slave_0: left promiscuous mode [ 152.970896][ T57] hsr_slave_1: left promiscuous mode