last executing test programs: 1m38.857993519s ago: executing program 32 (id=842): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 1m37.82350492s ago: executing program 33 (id=881): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000030000000100000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1m37.753080615s ago: executing program 1 (id=885): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1m37.713917728s ago: executing program 1 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m37.629076885s ago: executing program 1 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace(0x4206, 0x0) ptrace(0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) 1m37.590728918s ago: executing program 1 (id=889): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x7, 0x4eb, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m37.390839793s ago: executing program 1 (id=894): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r0, &(0x7f0000000680)=""/238, 0xee, 0x2, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) 1m36.92176137s ago: executing program 1 (id=906): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 1m36.899283851s ago: executing program 34 (id=906): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 1m13.290078673s ago: executing program 5 (id=1832): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m12.454709599s ago: executing program 5 (id=1858): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) unshare(0x22020600) unshare(0x22020600) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 1m12.441549229s ago: executing program 5 (id=1859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800710, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nouid32}, {@user_xattr}, {@errors_remount}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x3, 0x462, &(0x7f0000000d80)="$eJzs3M9vFFUcAPDvTFtQfrUi/gBRq8TY+KOlBZWDF40mHjCa6AH1VNtCCAs1tCZCiFRj8GJiSPSsHk38C7x5MerJxKveDQlRLqCnmpmdgd1lt93SpVu7n08y8N6+t/ve2zdv5s28nQbQs4azf5KIbRHxe0QMVqP1GYar/127cm7qnyvnppJYXHzjryTPd/XKuakya/m+rUVkJI1IP0mKQurNnTl7YrJSmTldxMfmT743Nnfm7NPHT04emzk2c2ri0KGDB8afe3bimY60M2vX1T0fzu7d/cpbF1+dOnLx3Z+/y+q7rUivbcct2XTzS8NZw/9ezDWmPbaqwtaf7TXhpL+LFWFF+iIi666BfPwPRl/c6LzBePnjrlYOuK2yc9Pm1skLi8AGlkS3awB0R3miz65/y22Nph7rwuUXqhdAWbuvFVs1pT/SIs9Aw/VtJw1HxJGFf7/KtujEfQgAgGV8NvXl4Xiq2fwvjXtr8u0o1lCGIuKuiNgZEXdHxK6IuCciz3tfRNy/wvIbl4Zunv+kl26pYW3K5n/PF2tb9fO/cvYXQ31FbHve/oHk6PHKzP7iOxmJgc1ZfHyJMn546bfPW6XVzv+yLSu/nAsW9bjU33CDbnpyfjKflHbA5Y8i9vQ3a39yfSUgiYjdEbFnZR+9owwcf+Lbva0yLd/+JXRgnWnxm4jHq/2/EA3tLyVLr0+O3RGVmf1j5V5xs19+vfB6q/JX1f4OyPp/S/3+X6R8faYIDL1Tu147t/IyLvzxactrmlvd/zclb+bHo3LZ9YPJ+fnT4xGbksN5vO71iRvvLeNl/qz9I/uaj/+dxXuy/n8gIrKd+MGIeCgiHi7q/khEPBoR+5Zo/08vtk5bD/0/3fT4d33/H0rq+n/lgb4TP37fqvz2+v9gHhopXsmPf8tot4Kr+e4AAADg/yLNfwOfpKPXw2k6Olr9Df+u2JJWZufmnzw6+/6p6epv5YdiIC3vdA3W3A8dTxaKT6zGJ4p7xWX6geK+8Rd9d+bx0anZynSX2w69bmuL8Z/5s6/btQNuu2braBNNHmgDNp7G8Z/WR8+/tpaVAdaU57Whdy0z/tO1qgew9pz/oXc1G//nG+LWAmBjcv6H3mX8Q+8y/qF3NYx/l/rQG1bzXL9ALwciXRfVaCvQ/t+DuN2Bt9dHNdoIdPvIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA//8cWu+A") chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m12.348821386s ago: executing program 5 (id=1860): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1m12.348604886s ago: executing program 5 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 1m12.099674926s ago: executing program 5 (id=1864): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m12.099585816s ago: executing program 35 (id=1864): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m10.721632574s ago: executing program 0 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1m10.530120798s ago: executing program 0 (id=1930): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) 1m10.496903911s ago: executing program 0 (id=1925): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) close(0x3) 1m10.192185364s ago: executing program 0 (id=1927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1m10.156114658s ago: executing program 0 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 1m9.823094073s ago: executing program 0 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 1m9.822952693s ago: executing program 36 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 50.955564025s ago: executing program 8 (id=2766): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xffffffffffff0001}, 0x0, 0xc8, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0xb6, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x40000000}, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f3c00db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa0afbc9"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 50.955413275s ago: executing program 8 (id=2767): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 50.948231886s ago: executing program 8 (id=2769): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f00000003c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 50.855355283s ago: executing program 8 (id=2772): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 50.798249448s ago: executing program 8 (id=2774): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 50.628472051s ago: executing program 8 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000580)}, 0x20) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 50.609507222s ago: executing program 37 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000580)}, 0x20) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 36.858964774s ago: executing program 7 (id=3470): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 36.761269482s ago: executing program 7 (id=3475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r4], 0x48}}, 0x0) 36.537581979s ago: executing program 7 (id=3487): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 36.490536333s ago: executing program 7 (id=3490): getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 36.446448827s ago: executing program 7 (id=3495): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x20, 0x2, 0x0, 0x6, 0x40, 0x0, 0x8}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 36.163675139s ago: executing program 7 (id=3506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc9ffb}]}) setpriority(0x0, 0x0, 0x1) 36.139430201s ago: executing program 38 (id=3506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc9ffb}]}) setpriority(0x0, 0x0, 0x1) 2.834636409s ago: executing program 2 (id=4685): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 2.036698291s ago: executing program 3 (id=4704): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(0x3) 1.961523887s ago: executing program 2 (id=4706): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x40ffffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.913833351s ago: executing program 3 (id=4708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x2b42, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x0, 0x34f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r1, 0x47bc, 0x39, 0x0, 0x0, 0x0) 1.861290715s ago: executing program 2 (id=4710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) r3 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1.860852775s ago: executing program 2 (id=4711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1.755827953s ago: executing program 2 (id=4715): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)="6a7441fc49fe2c", 0x0, 0x8}, 0x38) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.648680021s ago: executing program 9 (id=4717): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f00000000c0)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 1.511603372s ago: executing program 2 (id=4720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.502390883s ago: executing program 39 (id=4720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.354548384s ago: executing program 3 (id=4723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000780)="d4", 0x1}], 0x1) 1.267422851s ago: executing program 3 (id=4725): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000bf000000020000000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 1.245384282s ago: executing program 3 (id=4726): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 778.405329ms ago: executing program 3 (id=4729): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) sendmmsg$unix(r1, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x20}}], 0x1, 0x0) setuid(r2) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r2, &(0x7f0000000080)) 519.918489ms ago: executing program 9 (id=4731): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129142, 0x1fa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x10012, r1, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000001440), 0x0, 0x0) 456.243914ms ago: executing program 9 (id=4733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 455.765544ms ago: executing program 9 (id=4734): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000800)={[{@mb_optimize_scan}, {@errors_continue}, {@inlinecrypt}, {@jqfmt_vfsv1}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r2, 0x8, 0x0, 0x8000) 281.634358ms ago: executing program 6 (id=4736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 267.527169ms ago: executing program 9 (id=4737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7400100006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 207.618794ms ago: executing program 4 (id=4738): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x8000}, 0x18) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) 179.971675ms ago: executing program 9 (id=4739): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 152.342548ms ago: executing program 4 (id=4740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000040), &(0x7f0000000540)}, 0x20) 104.990621ms ago: executing program 6 (id=4741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="02150a02070000002dbd7000ffdbdf25050007"], 0x38}}, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) 104.611081ms ago: executing program 6 (id=4742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x7c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x0, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0xff, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 102.429552ms ago: executing program 4 (id=4743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 47.869916ms ago: executing program 4 (id=4744): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada0500000000000000e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) dup(r1) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f00000003c0)) signalfd4(r2, &(0x7f0000000000)={[0x8]}, 0x8, 0x800) 47.590276ms ago: executing program 6 (id=4745): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df8726343276cf23eef0845cd00fd72ed6a08652151c4e7a2bff588c4168c6f1aeb437a524873ec066482aee0a434c6ee053cebc5768783ab7a8c0e0652f14edf0de118edc4e46d53783ad0f25a5e704f4cbee714e21ac6ec6e5a4348cb8452fd16a2788426dc103620bcb1843bb81c695fa9895cee03760a6af66c64c855b3de7034daccfbf6c13ec133da0dfb4c4b278d19719a0f5f805add789b2e0ef37274f430f9b2bd6ea84b1baf3", 0xcc}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087cbb35a059c1a42d0fe6403cfd16ebf990d6e3a16", 0x88}, {&(0x7f0000000400)="6b9f1130f0cbb39924b1f13fc3fabb9638c881bde4aeaf376c85d8ac0000000009fcb3b8983252f3fcf75a03cea94e446f125ffd6247b229cf0188d60a36d29763c33efb7d48cc7a040000000000", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b17829b214c485207fd742a68be74946b4cd6ca000", 0xda}, {&(0x7f0000001b00)="69c4d1bb956f9cac315109a3b52ca9ed4731ecb9a8d1c3f75e9a771c634713ffed270d66c0e0dcd622f8d6435ac9fd4da108e9318d8fa68316a2380018db97190f4ad623cc88f3f91a98559de6f656e831fd21fbeb19b356af14f9598362d6401adf6f6f9ed9d00c07ce8a3603e767e9033e3264c30db9261038521c0430bbf43222094718b957eb44cb921404ca31befc2e3ce494a41767b9ea1fec0ebfe55aee7ce1", 0xa3}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f63b760930cb931ced15105e9b3ad0bcb78014d854612", 0x39}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x4, 0x2, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)="858ff66e23e104c944af9afec75d3a67cbe40be16a71bdc6551d77d53ebd9b761edb96b864db8db0d2bb7575a1e1f28ac698d4c61ea61d6951c4358cb06d28a643087dfe7e57ecceb84ce084889685b2ab5a185fd8053779fa536f10d2394c8e2a8f5ea0f4938b498b8809278afccac2f0ee3dc11a827b7b8f4451aaff3be888b48de349c38c7603", 0x88}, {&(0x7f0000000740)="a1238db589356feea1520ba324d36496c21f2a36683a27af7cfc663c7bca73e5b44b22ce6db178790388a74f3534c60d9b89b2f7e91180f095e6e6f5482bb9f460666a19c13eb70b59dbbdaa1e2737e6b4555f7e859f5e3b9de52e47f6b7f2e82636b7dcb35891c9092c3a6648660bd035d5030854b14f00aedaa5f3f39e8fc5efc194a11a82fb41084e0702e5b79b161a722649a27e933fda65c33ac133bb7bb16b1ddd818fde971b1da9cc3ce92a258339d5b0ed01eccab251848ffea6afb9ea26fa093a0e2a96837381c981baf92d27534e407a3d9754024fb1278683e4e64f10f761fd087384d22eaf1fcaba5561d92e", 0xf2}, {&(0x7f0000000840)="2efb26d8c320c54d872cbd6db112937b7894c1039375e61a94204939dd177d", 0x1f}], 0x3, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x3c8}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="63577578a5df3301b84522153a72b5be24a80acb4879f32eb1fd91c3b74b199e51d7d65449a18dbc5fcc08082f410430aca1680e8222777dd2cb4ccaf579159aa5", 0x41}], 0x1, &(0x7f00000028c0)=[{0x108, 0x10c, 0x4, "ec386ea486d45363b7713a39f28bed80dfe8aa95e677084968aef092d12e1ff05124829eb588c0f854b0943ffafd373e98cf7276651360f1ffead9829446dd0fdc7bc2fca4efb40abcdb72182f7b119d89d57e079441b0ed705d7b3c89bb67b5565c05f3408365b3f5ae28c8f1e2670fc57bfc1f10148c896256509fb9378a1f127e71e22189fad9e661c5a9bce58412b2487118e4f70c38eec7fb8e65967f1258f6194ad3876bf36e6f417c7c599ea2f65cee5e6613bb49bfba9f7e31225a3c2d39ea1e607250bb69ac669e2b6cea66ef8cf109a6defdf0cff056a386f354ed578e64f11d5928bc90800f0fc71aaedf166ac373a0"}, {0x100, 0x109, 0x6, "c6007c8f867172489dee9134cb856ab20dfd1f9800a98c33eef849e5e737148a8cbced43f7a8bd2c0fcfcd708ca77ec37829d6ffe9c002bb4a4bd54c07e0287ad0e5be52805ff5e54b92cef0192bdb5535ed5932a59914836773360ca583d5c8f835d4fda1442e21395fd3e1bdcc171b8d80498a1e2bd0ba4535a0998874266f5be9044a09b1fd896a55fc2a2f1ec66abd72a3089267f8a537291f0e92edaf363be5939ac99bd509f8f8e1bd3cfdd1cf3064485e31a2688b9866239614045b574ff637041ed52874f72058b1b207539b4411183a633b3299c327dcef781066f8058d31ef5602bd05b857aa4aa6f777"}, {0xc0, 0xff, 0xffffffff, "63a8820fd288d078d7c64c77076d209c9ab41f1ab9f5f90863d404ff16527b9fa7d757e1bfdd68cc22c8a2ccf206271da94676abef5fa32a0dc51a4bf15fbacc2f997995d6bfc8a9d67868f8432432c71da098d2d5a28f6b8b62e71fbabc3b5f2ab9ae35b5d1426d5bfeb87aed783ad9ae6fff307156a7e1e06ae3194d7889e85065b3eceb076db203e740a7ecc80ff5c9df9386ac64082a5b7aaf1c12ee89542f7ebe76fcd6473935a0"}, {0x60, 0x0, 0x288d, "bf11639a2e0a4bc37a56741e47f76486268c693c9eb4081b81478eec87f76c6b1ccaf356153362b1d64e71f76bea9272adc382fb5cec360c7f25ed85ab5e9578ab4dff4ad34e0ef6f480"}], 0x328}}, {{&(0x7f0000000980)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001bc0)="e025dcae747e2d67352c6032502ddb3b19e54275f52232f282347750d1bb28054602c4cb26ccf4bd2b6f81cae2d518744ccd6a00dcb6328fffe37473adf03adb3e609443b6d5326c4a181b15f849949d607da6c19ca20cfa12d35a6758aacc93f53f19e7c2ce62055ca745addb7084be95a713bafd129525d812a1465c485758dd0d31b0643144b2eda742623614e442d1c0bc007d4ac67ddcdaa4025d81574548aa9acc31c3a06bda3ac2058476991e41ba13d5f782940e05df5d2b85224d3832eb5e13f2076f1788686e6f4d5021e01761ad66c8542015fc0813bdcd06d278a11631554fe551cc156354", 0xeb}], 0x1}}], 0x3, 0x8806) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 47.318466ms ago: executing program 4 (id=4746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 37.805617ms ago: executing program 6 (id=4747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) 15.399239ms ago: executing program 4 (id=4748): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 6 (id=4749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 00-000000000000. [ 88.099989][ T50] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.112206][ T50] EXT4-fs (loop9): This should not happen!! Data will be lost [ 88.112206][ T50] [ 88.121969][ T50] EXT4-fs (loop9): Total free blocks count 0 [ 88.128034][ T50] EXT4-fs (loop9): Free/Dirty block details [ 88.133984][ T50] EXT4-fs (loop9): free_blocks=2415919104 [ 88.137639][ T9877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.139749][ T50] EXT4-fs (loop9): dirty_blocks=8224 [ 88.157468][ T50] EXT4-fs (loop9): Block reservation details [ 88.163444][ T50] EXT4-fs (loop9): i_reserved_data_blocks=514 [ 88.164705][ T29] audit: type=1400 audit(88.152:2832): avc: denied { execute_no_trans } for pid=9880 comm="syz.3.2541" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.174596][ T50] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 88.378822][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.431668][ T9903] bridge0: entered promiscuous mode [ 88.453032][ T9903] bridge0: port 3(macsec1) entered blocking state [ 88.459694][ T9903] bridge0: port 3(macsec1) entered disabled state [ 88.473607][ T29] audit: type=1400 audit(88.512:2833): avc: denied { connect } for pid=9906 comm="syz.6.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.495334][ T9903] macsec1: entered allmulticast mode [ 88.500827][ T9903] bridge0: entered allmulticast mode [ 88.528268][ T9903] macsec1: left allmulticast mode [ 88.533335][ T9903] bridge0: left allmulticast mode [ 88.543309][ T29] audit: type=1400 audit(88.582:2834): avc: denied { override_creds } for pid=9914 comm="syz.6.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.571072][ T9903] bridge0: left promiscuous mode [ 88.601082][ T29] audit: type=1400 audit(88.642:2835): avc: denied { name_connect } for pid=9919 comm="syz.6.2557" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 88.646399][ T9928] TCP: out of memory -- consider tuning tcp_mem [ 88.658049][ T9926] SELinux: syz.6.2559 (9926) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 88.676241][ T9932] xt_hashlimit: max too large, truncated to 1048576 [ 88.717972][ T29] audit: type=1326 audit(88.762:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.7.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d709cde9 code=0x7ffc0000 [ 88.720969][ T9935] sctp: [Deprecated]: syz.8.2564 (pid 9935) Use of int in max_burst socket option. [ 88.720969][ T9935] Use struct sctp_assoc_value instead [ 88.741406][ T29] audit: type=1326 audit(88.762:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.7.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d709cde9 code=0x7ffc0000 [ 88.778215][ T29] audit: type=1326 audit(88.762:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.7.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f53d709cde9 code=0x7ffc0000 [ 88.913336][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2571'. [ 89.051953][ T9980] sctp: [Deprecated]: syz.6.2581 (pid 9980) Use of int in max_burst socket option. [ 89.051953][ T9980] Use struct sctp_assoc_value instead [ 89.097256][ T9988] netlink: 'syz.3.2585': attribute type 3 has an invalid length. [ 89.213824][T10008] loop6: detected capacity change from 0 to 512 [ 89.220339][T10008] EXT4-fs: inline encryption not supported [ 89.248284][T10008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.294976][T10008] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2595: corrupted inode contents [ 89.324576][T10008] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2595: mark_inode_dirty error [ 89.348813][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2607'. [ 89.359137][T10008] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2595: corrupted inode contents [ 89.375926][T10040] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2595: corrupted inode contents [ 89.387958][T10040] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2595: mark_inode_dirty error [ 89.402423][T10040] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2595: corrupted inode contents [ 89.416532][T10040] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2595: mark_inode_dirty error [ 89.429608][T10040] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2595: corrupted inode contents [ 89.446622][T10040] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2595: mark_inode_dirty error [ 89.475947][T10048] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2612'. [ 89.501505][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.608822][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2623'. [ 89.638200][T10077] bridge0: entered promiscuous mode [ 89.646452][T10077] bridge0: port 3(macsec1) entered blocking state [ 89.646683][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2636'. [ 89.652885][T10077] bridge0: port 3(macsec1) entered disabled state [ 89.669353][T10077] macsec1: entered allmulticast mode [ 89.674684][T10077] bridge0: entered allmulticast mode [ 89.684741][T10077] macsec1: left allmulticast mode [ 89.689790][T10077] bridge0: left allmulticast mode [ 89.696498][T10077] bridge0: left promiscuous mode [ 89.788617][T10086] loop9: detected capacity change from 0 to 512 [ 89.789673][T10084] loop7: detected capacity change from 0 to 512 [ 89.795199][T10086] EXT4-fs: inline encryption not supported [ 89.807665][T10084] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.822631][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2639'. [ 89.823185][T10084] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2628: corrupted in-inode xattr: invalid ea_ino [ 89.846887][T10084] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2628: couldn't read orphan inode 15 (err -117) [ 89.871303][T10086] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.884248][T10084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.963778][T10086] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.2627: corrupted inode contents [ 89.968618][ T5550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.005006][T10108] ip_vti0: entered promiscuous mode [ 90.010334][T10108] vlan0: entered promiscuous mode [ 90.017358][T10086] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.2627: mark_inode_dirty error [ 90.045465][T10086] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.2627: corrupted inode contents [ 90.058015][T10108] ip_vti0: left promiscuous mode [ 90.071100][T10109] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.2627: corrupted inode contents [ 90.096124][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2637'. [ 90.108814][T10113] bridge0: entered promiscuous mode [ 90.117134][T10113] bridge0: port 4(macsec1) entered blocking state [ 90.123741][T10113] bridge0: port 4(macsec1) entered disabled state [ 90.130436][T10113] macsec1: entered allmulticast mode [ 90.135861][T10113] bridge0: entered allmulticast mode [ 90.143435][T10109] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.2627: mark_inode_dirty error [ 90.157563][T10113] macsec1: left allmulticast mode [ 90.157659][T10109] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.2627: corrupted inode contents [ 90.162593][T10113] bridge0: left allmulticast mode [ 90.185274][T10109] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.2627: mark_inode_dirty error [ 90.185477][T10113] bridge0: left promiscuous mode [ 90.196905][T10109] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.2627: corrupted inode contents [ 90.218744][T10109] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.2627: mark_inode_dirty error [ 90.276754][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.404353][T10138] 9pnet_fd: Insufficient options for proto=fd [ 90.600667][T10152] loop6: detected capacity change from 0 to 8192 [ 90.608704][T10152] vfat: Unknown parameter '18446744073709551615' [ 90.663673][T10160] netlink: 'syz.9.2664': attribute type 4 has an invalid length. [ 90.684398][T10160] netlink: 'syz.9.2664': attribute type 4 has an invalid length. [ 90.722122][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2667'. [ 90.750665][T10170] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2669'. [ 90.819303][T10176] loop6: detected capacity change from 0 to 128 [ 90.896809][T10183] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.997610][T10176] syz.6.2672: attempt to access beyond end of device [ 90.997610][T10176] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 91.011134][T10176] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 91.039588][T10193] netlink: 'syz.7.2681': attribute type 21 has an invalid length. [ 91.055518][T10193] netlink: 'syz.7.2681': attribute type 1 has an invalid length. [ 91.113914][T10201] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 91.122114][T10201] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 91.403804][T10244] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.466341][T10249] loop8: detected capacity change from 0 to 512 [ 91.514133][T10249] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.537315][T10249] EXT4-fs (loop8): mount failed [ 91.555829][T10263] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 91.564112][T10263] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 91.666101][T10276] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.705765][T10278] netlink: 'syz.8.2719': attribute type 1 has an invalid length. [ 91.785704][T10294] netlink: 'syz.6.2727': attribute type 280 has an invalid length. [ 92.002767][T10302] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 92.025036][T10302] SELinux: failed to load policy [ 92.089215][T10309] ip_vti0: entered promiscuous mode [ 92.123863][T10309] vlan2: entered promiscuous mode [ 92.132161][T10309] ip_vti0: left promiscuous mode [ 92.337941][T10320] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 92.346191][T10320] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 92.432146][T10214] syz.9.2689 (10214) used greatest stack depth: 7616 bytes left [ 92.536591][T10326] __nla_validate_parse: 7 callbacks suppressed [ 92.536604][T10326] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2742'. [ 92.740659][T10343] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2749'. [ 92.758549][T10343] 0ªX¹¦À: renamed from caif0 [ 92.766091][T10343] 0ªX¹¦À: entered allmulticast mode [ 92.771394][T10343] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 92.814138][T10288] syz.9.2724 (10288) used greatest stack depth: 6080 bytes left [ 92.815917][T10351] ip_vti0: entered promiscuous mode [ 92.827339][T10351] vlan0: entered promiscuous mode [ 92.833789][T10351] ip_vti0: left promiscuous mode [ 92.846052][T10347] netlink: 'syz.3.2751': attribute type 3 has an invalid length. [ 92.876028][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2754'. [ 92.917198][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 92.917243][ T29] audit: type=1326 audit(92.962:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 92.947752][ T29] audit: type=1326 audit(92.992:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 92.970573][ T29] audit: type=1326 audit(92.992:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 92.993929][ T29] audit: type=1326 audit(92.992:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.016888][ T29] audit: type=1326 audit(92.992:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.039734][ T29] audit: type=1326 audit(92.992:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.062793][ T29] audit: type=1326 audit(92.992:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.085561][ T29] audit: type=1326 audit(92.992:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.110341][ T29] audit: type=1326 audit(92.992:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.133137][ T29] audit: type=1326 audit(92.992:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 93.198976][T10367] loop6: detected capacity change from 0 to 128 [ 93.210877][T10367] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.263282][ T5485] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.375334][T10386] syz.6.2768: attempt to access beyond end of device [ 93.375334][T10386] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.400282][T10388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10388 comm=syz.8.2769 [ 93.412947][T10388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10388 comm=syz.8.2769 [ 93.599690][T10412] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2782'. [ 93.641646][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2784'. [ 93.665681][ T53] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.721901][T10428] ipvlan2: entered promiscuous mode [ 93.729888][T10428] bridge0: port 4(ipvlan2) entered blocking state [ 93.736435][T10428] bridge0: port 4(ipvlan2) entered disabled state [ 93.743268][T10428] ipvlan2: entered allmulticast mode [ 93.748719][T10428] bridge0: entered allmulticast mode [ 93.756057][T10428] ipvlan2: left allmulticast mode [ 93.761273][T10428] bridge0: left allmulticast mode [ 93.769420][T10433] loop9: detected capacity change from 0 to 4096 [ 93.784530][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 93.805712][T10433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.821297][ T53] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.916160][ T53] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.997955][ T53] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.057374][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.126477][T10434] chnl_net:caif_netlink_parms(): no params data found [ 94.179387][T10478] loop7: detected capacity change from 0 to 512 [ 94.209511][ T53] bridge_slave_1: left allmulticast mode [ 94.215168][T10467] netlink: 576 bytes leftover after parsing attributes in process `syz.6.2804'. [ 94.224339][ T53] bridge_slave_1: left promiscuous mode [ 94.230033][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.237695][ T53] bridge_slave_0: left allmulticast mode [ 94.243405][ T53] bridge_slave_0: left promiscuous mode [ 94.249122][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.257479][T10478] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.275564][T10478] EXT4-fs (loop7): mount failed [ 94.365602][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.375621][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.385078][ T53] bond0 (unregistering): Released all slaves [ 94.422158][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.429316][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.438036][T10434] bridge_slave_0: entered allmulticast mode [ 94.446015][T10434] bridge_slave_0: entered promiscuous mode [ 94.457947][ T53] hsr_slave_0: left promiscuous mode [ 94.465435][ T53] hsr_slave_1: left promiscuous mode [ 94.481322][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.488790][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.499781][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.507541][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.521951][ T53] veth0_macvtap: left promiscuous mode [ 94.533724][ T53] veth1_vlan: left promiscuous mode [ 94.539165][ T53] veth0_vlan: left promiscuous mode [ 94.639170][ T53] team0 (unregistering): Port device team_slave_1 removed [ 94.652286][ T53] team0 (unregistering): Port device team_slave_0 removed [ 94.695736][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.702810][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.711903][T10434] bridge_slave_1: entered allmulticast mode [ 94.718656][T10434] bridge_slave_1: entered promiscuous mode [ 94.770443][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.791288][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.822826][T10434] team0: Port device team_slave_0 added [ 94.831783][T10434] team0: Port device team_slave_1 added [ 94.850048][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2832'. [ 94.860659][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.867734][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.893745][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.905049][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.912009][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.937944][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.953435][T10543] loop7: detected capacity change from 0 to 16384 [ 94.967964][T10434] hsr_slave_0: entered promiscuous mode [ 94.975741][T10434] hsr_slave_1: entered promiscuous mode [ 94.981823][T10434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.989835][T10434] Cannot create hsr debugfs directory [ 95.011986][T10545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10545 comm=syz.7.2837 [ 95.024646][T10545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10545 comm=syz.7.2837 [ 95.032801][T10550] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2839'. [ 95.046744][ T25] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 95.155329][T10434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.169338][T10562] loop6: detected capacity change from 0 to 512 [ 95.188468][T10562] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.203387][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2846'. [ 95.218943][T10434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.233485][T10562] EXT4-fs (loop6): mount failed [ 95.307490][T10434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.341934][T10587] loop6: detected capacity change from 0 to 512 [ 95.366506][T10434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.375748][T10587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.412360][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.440742][T10599] loop7: detected capacity change from 0 to 4096 [ 95.451366][T10599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.496216][T10434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.517487][T10434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.527701][T10434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.536650][T10434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.578058][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.600487][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.610816][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.617889][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.648200][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.654274][ T5550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.655274][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.671572][T10615] loop9: detected capacity change from 0 to 1024 [ 95.700566][T10434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.710959][T10434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.730422][T10615] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 95.740311][T10615] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 95.750259][T10615] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.769837][T10615] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #5: comm syz.9.2867: casefold flag without casefold feature [ 95.785897][T10615] EXT4-fs (loop9): no journal found [ 95.829237][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.937296][T10644] loop6: detected capacity change from 0 to 128 [ 95.938195][T10434] veth0_vlan: entered promiscuous mode [ 95.961021][T10650] ipvlan2: entered promiscuous mode [ 95.969447][T10650] bridge0: port 4(ipvlan2) entered blocking state [ 95.976061][T10650] bridge0: port 4(ipvlan2) entered disabled state [ 95.983486][T10650] ipvlan2: entered allmulticast mode [ 95.988906][T10650] bridge0: entered allmulticast mode [ 96.004097][T10650] ipvlan2: left allmulticast mode [ 96.009161][T10650] bridge0: left allmulticast mode [ 96.037588][T10656] loop6: detected capacity change from 0 to 4096 [ 96.048799][T10656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.066298][T10434] veth1_vlan: entered promiscuous mode [ 96.082763][T10434] veth0_macvtap: entered promiscuous mode [ 96.090047][T10434] veth1_macvtap: entered promiscuous mode [ 96.091093][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.101591][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.115241][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.125126][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.135566][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.145375][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.155828][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.165652][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.176374][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.186476][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.196974][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.206849][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.217292][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.228816][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.236955][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.247456][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.257303][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.267783][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.277718][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.288404][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.298321][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.308847][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.318676][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.329112][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.338956][T10434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.349408][T10434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.360309][T10665] loop6: detected capacity change from 0 to 128 [ 96.361899][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.378020][T10434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.386812][T10434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.395595][T10434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.404339][T10434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.430480][T10665] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.470595][ T5485] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.492463][T10675] loop2: detected capacity change from 0 to 164 [ 96.531147][T10675] syz.2.2789: attempt to access beyond end of device [ 96.531147][T10675] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 96.551140][T10675] syz.2.2789: attempt to access beyond end of device [ 96.551140][T10675] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.689825][T10702] x_tables: unsorted underflow at hook 1 [ 96.866858][T10719] loop9: detected capacity change from 0 to 512 [ 96.882063][T10719] EXT4-fs: Ignoring removed oldalloc option [ 96.922101][T10719] EXT4-fs (loop9): 1 truncate cleaned up [ 96.948637][T10719] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.996868][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.111474][T10761] IPv6: Can't replace route, no match found [ 97.119826][T10765] netlink: 'syz.9.2929': attribute type 1 has an invalid length. [ 97.127645][T10765] netlink: 'syz.9.2929': attribute type 4 has an invalid length. [ 97.148702][ T3375] kernel write not supported for file /vcsa1 (pid: 3375 comm: kworker/1:4) [ 97.212218][T10784] loop6: detected capacity change from 0 to 512 [ 97.219109][T10784] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 97.242962][T10784] EXT4-fs: error: could not find journal device path [ 97.335540][T10803] loop2: detected capacity change from 0 to 512 [ 97.354387][T10803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.432840][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.536747][T10840] x_tables: duplicate underflow at hook 1 [ 97.553001][T10843] loop9: detected capacity change from 0 to 512 [ 97.568321][T10843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.614614][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.673678][T10867] netlink: 'syz.3.2973': attribute type 39 has an invalid length. [ 97.819267][T10894] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.831149][T10894] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 98.037825][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 98.037838][ T29] audit: type=1326 audit(98.082:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.126911][ T29] audit: type=1107 audit(98.172:3216): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 98.307294][ T29] audit: type=1326 audit(98.352:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.331135][ T29] audit: type=1326 audit(98.352:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.354106][ T29] audit: type=1326 audit(98.352:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.376987][ T29] audit: type=1326 audit(98.352:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.399933][ T29] audit: type=1326 audit(98.352:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.441762][ T29] audit: type=1326 audit(98.482:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.464658][ T29] audit: type=1326 audit(98.482:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.487630][ T29] audit: type=1326 audit(98.482:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 98.597902][T10957] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 98.612963][T10957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.630686][T10957] bond2: (slave gretap1): making interface the new active one [ 98.639015][T10957] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 98.808170][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.816781][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.987961][T11036] netlink: 'syz.9.3054': attribute type 39 has an invalid length. [ 99.014591][T11034] loop2: detected capacity change from 0 to 4096 [ 99.024897][T11034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.057521][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.172099][T11065] netlink: 'syz.2.3066': attribute type 1 has an invalid length. [ 99.195102][T11068] netlink: 'syz.9.3067': attribute type 4 has an invalid length. [ 99.323802][T11092] netlink: 'syz.6.3076': attribute type 39 has an invalid length. [ 99.332588][T11093] loop9: detected capacity change from 0 to 128 [ 99.352410][T11093] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.392959][T11093] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.447860][ T8499] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.570271][T11141] loop2: detected capacity change from 0 to 128 [ 99.579801][T11141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.608816][T11141] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.652226][T11153] SELinux: policydb version 65535 does not match my version range 15-34 [ 99.660860][T11153] SELinux: failed to load policy [ 99.705616][T10434] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.014559][T11202] __nla_validate_parse: 7 callbacks suppressed [ 100.014587][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3129'. [ 100.033222][T11204] netlink: 'syz.9.3128': attribute type 1 has an invalid length. [ 100.193795][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3143'. [ 100.250717][T11242] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 100.258690][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3147'. [ 100.334123][T11250] loop9: detected capacity change from 0 to 512 [ 100.355328][T11250] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3151: Failed to acquire dquot type 1 [ 100.367136][T11250] EXT4-fs (loop9): 1 truncate cleaned up [ 100.373414][T11250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.386180][T11250] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.405868][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.547848][T11268] loop2: detected capacity change from 0 to 512 [ 100.570253][T11268] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.593347][T11268] EXT4-fs (loop2): mount failed [ 100.660988][T11274] loop6: detected capacity change from 0 to 8192 [ 100.925455][T11313] SELinux: policydb version 256 does not match my version range 15-34 [ 100.934126][T11313] SELinux: failed to load policy [ 100.973991][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3178'. [ 101.610075][T11406] loop2: detected capacity change from 0 to 4096 [ 101.636280][T11406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.673961][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.022899][T11498] loop6: detected capacity change from 0 to 512 [ 102.045781][T11498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.057885][T11502] syzkaller0: entered promiscuous mode [ 102.058787][T11498] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.063837][T11502] syzkaller0: entered allmulticast mode [ 102.094552][T11498] Process accounting resumed [ 102.109703][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.306442][T11530] loop9: detected capacity change from 0 to 512 [ 102.317880][T11530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.331066][T11530] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.377024][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.472184][T11552] loop7: detected capacity change from 0 to 4096 [ 102.484285][T11552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.502733][T11552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.539308][T11565] loop7: detected capacity change from 0 to 512 [ 102.555299][T11565] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.570463][T11565] EXT4-fs (loop7): mount failed [ 103.367694][T11627] loop6: detected capacity change from 0 to 512 [ 103.392553][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 103.392568][ T29] audit: type=1326 audit(2000000260.841:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.453650][ T29] audit: type=1326 audit(2000000260.881:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.477177][ T29] audit: type=1326 audit(2000000260.881:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.500692][ T29] audit: type=1326 audit(2000000260.881:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.524219][ T29] audit: type=1326 audit(2000000260.901:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.547640][ T29] audit: type=1326 audit(2000000260.901:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.571125][ T29] audit: type=1326 audit(2000000260.901:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.578528][T11627] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3314: bg 0: block 35: padding at end of block bitmap is not set [ 103.641302][T11639] loop2: detected capacity change from 0 to 2048 [ 103.648152][ T29] audit: type=1326 audit(2000000261.051:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.650280][T11627] EXT4-fs (loop6): Remounting filesystem read-only [ 103.671644][ T29] audit: type=1326 audit(2000000261.051:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.681800][T11627] EXT4-fs (loop6): 1 truncate cleaned up [ 103.701702][ T29] audit: type=1326 audit(2000000261.051:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca4298cde9 code=0x7ffc0000 [ 103.708909][T11627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.747449][T11627] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 103.765467][T11639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.770334][T11627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.844313][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.892088][T11655] Process accounting resumed [ 103.920422][T11660] hsr_slave_0: left promiscuous mode [ 103.927390][T11660] hsr_slave_1: left promiscuous mode [ 104.116409][T11687] validate_nla: 1 callbacks suppressed [ 104.116472][T11687] netlink: 'syz.2.3340': attribute type 3 has an invalid length. [ 104.165610][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3344'. [ 104.229502][T11706] vlan0: entered allmulticast mode [ 104.242976][T11706] bond0: entered allmulticast mode [ 104.248169][T11706] bond_slave_0: entered allmulticast mode [ 104.254035][T11706] bond_slave_1: entered allmulticast mode [ 104.271211][T11706] bond0: left allmulticast mode [ 104.276275][T11706] bond_slave_0: left allmulticast mode [ 104.281880][T11706] bond_slave_1: left allmulticast mode [ 104.588933][T11765] loop2: detected capacity change from 0 to 4096 [ 104.597601][T11765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.618936][T11765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.358162][T11802] loop7: detected capacity change from 0 to 8192 [ 105.670869][T11842] syzkaller0: entered promiscuous mode [ 105.676492][T11842] syzkaller0: entered allmulticast mode [ 106.390449][T11863] netlink: 'syz.9.3415': attribute type 1 has an invalid length. [ 106.398254][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3415'. [ 106.523976][T11905] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.578049][T11911] IPVS: stopping master sync thread 11913 ... [ 106.584739][T11913] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 106.697416][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3442'. [ 106.731300][T11942] loop6: detected capacity change from 0 to 512 [ 106.746334][T11942] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3450: bg 0: block 248: padding at end of block bitmap is not set [ 106.761460][T11942] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.3450: Failed to acquire dquot type 1 [ 106.776722][T11942] EXT4-fs (loop6): 1 truncate cleaned up [ 106.782711][T11942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.795546][T11942] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.820977][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.547796][T12000] Y­4`Ò˜: renamed from lo (while UP) [ 107.562981][T12003] loop7: detected capacity change from 0 to 512 [ 107.564444][T12001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.585741][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'. [ 107.605784][T12003] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3475: bg 0: block 35: padding at end of block bitmap is not set [ 107.623946][T12003] EXT4-fs (loop7): Remounting filesystem read-only [ 107.635774][T12003] EXT4-fs (loop7): 1 truncate cleaned up [ 107.641685][T12003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.654069][T12003] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 107.661243][T12003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.663273][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3478'. [ 107.785446][T12022] loop2: detected capacity change from 0 to 736 [ 107.926650][ T7300] bridge0: port 3(syz_tun) entered disabled state [ 107.949150][ T7300] syz_tun (unregistering): left allmulticast mode [ 107.955929][ T7300] syz_tun (unregistering): left promiscuous mode [ 107.962366][ T7300] bridge0: port 3(syz_tun) entered disabled state [ 108.091147][T12062] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 108.108675][T12060] loop6: detected capacity change from 0 to 736 [ 108.188699][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3509'. [ 108.365718][T12073] chnl_net:caif_netlink_parms(): no params data found [ 108.402371][T12073] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.409566][T12073] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.416794][T12073] bridge_slave_0: entered allmulticast mode [ 108.423382][T12073] bridge_slave_0: entered promiscuous mode [ 108.430390][T12073] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.437701][T12073] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.445356][T12073] bridge_slave_1: entered allmulticast mode [ 108.453403][T12073] bridge_slave_1: entered promiscuous mode [ 108.482636][T12073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.494735][T12073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.513174][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 108.513186][ T29] audit: type=1326 audit(2000000265.961:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.550766][T12073] team0: Port device team_slave_0 added [ 108.564893][T12073] team0: Port device team_slave_1 added [ 108.593613][ T29] audit: type=1326 audit(2000000266.001:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.617195][ T29] audit: type=1326 audit(2000000266.001:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.640908][ T29] audit: type=1326 audit(2000000266.001:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.664544][ T29] audit: type=1326 audit(2000000266.001:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.688292][ T29] audit: type=1326 audit(2000000266.001:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.711809][ T29] audit: type=1326 audit(2000000266.001:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.735384][ T29] audit: type=1326 audit(2000000266.001:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.758911][ T29] audit: type=1326 audit(2000000266.001:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.782461][ T29] audit: type=1326 audit(2000000266.001:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.9.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 108.808300][T12073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.815288][T12073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.841370][T12073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.853599][T12073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.860608][T12073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.886675][T12073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.935056][T12073] hsr_slave_0: entered promiscuous mode [ 108.941198][T12073] hsr_slave_1: entered promiscuous mode [ 108.953848][T12073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.961418][T12073] Cannot create hsr debugfs directory [ 109.008864][T12122] loop2: detected capacity change from 0 to 512 [ 109.037373][T12122] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3527: bg 0: block 248: padding at end of block bitmap is not set [ 109.059667][T12122] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3527: Failed to acquire dquot type 1 [ 109.072524][T12122] EXT4-fs (loop2): 1 truncate cleaned up [ 109.108857][T12122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.164852][T12122] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.203335][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.303371][T12073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.336896][T12073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.353334][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.366401][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.378224][T12073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.378666][T12165] SELinux: ebitmap start bit (2495) is not a multiple of the map unit size (64) [ 109.403788][T12073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.429506][T12165] SELinux: failed to load policy [ 109.505276][T12073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.531292][T12073] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.551036][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.558202][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.582670][T12073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.593077][T12073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.610807][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.617903][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.687281][T12073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.699172][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 109.777332][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 109.939400][T12073] veth0_vlan: entered promiscuous mode [ 109.952124][T12262] loop9: detected capacity change from 0 to 512 [ 109.966657][T12073] veth1_vlan: entered promiscuous mode [ 109.990655][T12262] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3553: bg 0: block 248: padding at end of block bitmap is not set [ 110.010032][T12274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3556'. [ 110.023266][T12073] veth0_macvtap: entered promiscuous mode [ 110.027351][T12262] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3553: Failed to acquire dquot type 1 [ 110.041350][T12262] EXT4-fs (loop9): 1 truncate cleaned up [ 110.047701][T12262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.050703][T12274] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.060349][T12262] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.079768][T12274] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.088593][T12274] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.097491][T12274] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.112838][T12274] geneve2: entered promiscuous mode [ 110.118129][T12274] geneve2: entered allmulticast mode [ 110.135797][T12073] veth1_macvtap: entered promiscuous mode [ 110.152934][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.163598][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.173448][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.183938][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.193921][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.204408][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.214271][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.224763][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.234586][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.245024][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.254839][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.265268][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.275091][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.285590][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.298807][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.308708][T12073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.316879][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.327399][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.337262][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.347697][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.358122][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.368840][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.378652][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.389064][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.398952][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.409367][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.419251][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.429709][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.439528][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.449958][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.460708][T12073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.474618][T12073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.483402][T12073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.492268][T12073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.501037][T12073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.742527][T12353] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 110.754625][T12353] veth1_macvtap: left promiscuous mode [ 111.827295][T12541] loop6: detected capacity change from 0 to 512 [ 111.854291][T12541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.873090][T12541] EXT4-fs (loop6): orphan cleanup on readonly fs [ 111.885140][T12541] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.3606: Failed to acquire dquot type 1 [ 111.897670][T12541] EXT4-fs (loop6): 1 truncate cleaned up [ 111.917578][T12541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.990001][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.059254][T12553] infiniband syz!: set active [ 112.064053][T12553] infiniband syz!: added team_slave_0 [ 112.159135][T12580] macvlan0: entered promiscuous mode [ 112.165621][T12553] RDS/IB: syz!: added [ 112.187485][T12553] smc: adding ib device syz! with port count 1 [ 112.205570][T12580] ipvlan0: entered promiscuous mode [ 112.217449][T12553] smc: ib device syz! port 1 has pnetid [ 112.235493][T12580] ipvlan0: left promiscuous mode [ 112.243688][T12580] macvlan0: left promiscuous mode [ 112.783970][T12647] bridge: RTM_NEWNEIGH with invalid ether address [ 113.322636][T12707] loop6: detected capacity change from 0 to 128 [ 113.343218][T12707] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.372934][T12707] ext4 filesystem being mounted at /501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.455538][ T5485] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.472871][T12719] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 113.546358][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 113.546421][ T29] audit: type=1326 audit(2000000271.001:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.6.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 113.634966][T12732] netlink: 'syz.3.3652': attribute type 1 has an invalid length. [ 113.663070][ T29] audit: type=1326 audit(2000000271.031:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.6.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 113.686681][ T29] audit: type=1326 audit(2000000271.031:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.6.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 113.937483][T12752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12752 comm=syz.3.3657 [ 113.950129][T12752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12752 comm=syz.3.3657 [ 114.023326][T12756] IPv4: Oversized IP packet from 127.202.26.0 [ 114.079870][T12750] bond1: entered promiscuous mode [ 114.085115][T12750] bond1: entered allmulticast mode [ 114.100143][T12750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.176995][T12750] bond1 (unregistering): Released all slaves [ 114.262655][ T29] audit: type=1400 audit(2000000271.681:3739): avc: denied { relabelto } for pid=12760 comm="syz.3.3663" name="rdma.current" dev="tmpfs" ino=4334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 114.287362][ T29] audit: type=1400 audit(2000000271.681:3740): avc: denied { associate } for pid=12760 comm="syz.3.3663" name="rdma.current" dev="tmpfs" ino=4334 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 114.419727][ T29] audit: type=1326 audit(2000000271.871:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7d70cde9 code=0x7ffc0000 [ 114.443351][ T29] audit: type=1326 audit(2000000271.871:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7d70cde9 code=0x7ffc0000 [ 114.467069][ T29] audit: type=1326 audit(2000000271.871:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7d70cde9 code=0x7ffc0000 [ 114.490598][ T29] audit: type=1326 audit(2000000271.871:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7d70cde9 code=0x7ffc0000 [ 114.514264][ T29] audit: type=1326 audit(2000000271.871:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7d70cde9 code=0x7ffc0000 [ 114.564583][T12779] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3671'. [ 114.631994][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3677'. [ 114.769279][T12817] netlink: 332 bytes leftover after parsing attributes in process `syz.9.3687'. [ 114.819211][T12823] netlink: 'syz.9.3689': attribute type 4 has an invalid length. [ 114.884104][T12830] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 114.893880][T12829] IPVS: stopping master sync thread 12830 ... [ 115.092412][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3702'. [ 115.177826][T12857] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 115.441929][T12871] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.3710'. [ 115.669596][T12903] ip6tnl1: entered promiscuous mode [ 115.674999][T12903] ip6tnl1: entered allmulticast mode [ 115.747217][T12911] team0: Port device team_slave_1 removed [ 116.294518][T12975] batadv_slave_1: entered allmulticast mode [ 116.307389][T12975] batadv_slave_1: left allmulticast mode [ 116.501634][T12988] usb usb1: usbfs: process 12988 (syz.9.3763) did not claim interface 0 before use [ 116.511910][T12988] vhci_hcd: default hub control req: a100 v0001 i0000 l0 [ 116.572695][T12956] Set syz1 is full, maxelem 65536 reached [ 116.674844][T12999] loop9: detected capacity change from 0 to 2048 [ 116.735728][T12999] Alternate GPT is invalid, using primary GPT. [ 116.742027][T12999] loop9: p1 p2 p3 [ 116.894389][T13030] netem: change failed [ 116.992403][T13032] loop4: detected capacity change from 0 to 4096 [ 117.021131][T13032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.248365][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.306580][T13066] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 117.312567][T13067] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.3794'. [ 117.321825][T13067] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3794'. [ 117.403140][T13071] loop9: detected capacity change from 0 to 8192 [ 117.631388][T13077] syz_tun: left allmulticast mode [ 117.636585][T13077] syz_tun: left promiscuous mode [ 117.641659][T13077] bridge0: port 3(syz_tun) entered disabled state [ 117.659307][T13077] bridge_slave_0: left allmulticast mode [ 117.665111][T13077] bridge_slave_0: left promiscuous mode [ 117.670733][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.717205][T13077] bridge_slave_1: left allmulticast mode [ 117.722891][T13077] bridge_slave_1: left promiscuous mode [ 117.728713][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.739140][T13077] bond0: (slave bond_slave_0): Releasing backup interface [ 117.753160][T13077] bond0: (slave bond_slave_1): Releasing backup interface [ 117.782720][T13077] team0: Port device team_slave_0 removed [ 117.790845][T13077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.798333][T13077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.807564][T13077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.815050][T13077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.838673][T13077] bond1: (slave geneve2): Releasing backup interface [ 117.846434][T13077] geneve2: left promiscuous mode [ 117.851459][T13077] geneve2: left allmulticast mode [ 117.865899][T13077] bond2: (slave gretap1): Releasing active interface [ 118.127575][T13100] netlink: 'syz.3.3811': attribute type 21 has an invalid length. [ 118.136011][T13100] netlink: 'syz.3.3811': attribute type 1 has an invalid length. [ 118.143782][T13100] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3811'. [ 118.265169][T13113] syz_tun: left allmulticast mode [ 118.270245][T13113] syz_tun: left promiscuous mode [ 118.275390][T13113] bridge0: port 3(syz_tun) entered disabled state [ 118.293510][T13113] bridge_slave_0: left allmulticast mode [ 118.299418][T13113] bridge_slave_0: left promiscuous mode [ 118.305118][T13113] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.314443][T13113] bridge_slave_1: left allmulticast mode [ 118.320102][T13113] bridge_slave_1: left promiscuous mode [ 118.325918][T13113] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.356674][T13113] bond0: (slave bond_slave_0): Releasing backup interface [ 118.371412][T13113] bond0: (slave bond_slave_1): Releasing backup interface [ 118.396603][T13113] team0: Port device team_slave_0 removed [ 118.416521][T13113] team0: Port device team_slave_1 removed [ 118.432640][T13113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.440316][T13113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.453100][T13113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.460578][T13113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.569150][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 118.579319][T13134] loop9: detected capacity change from 0 to 128 [ 118.948744][T13168] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.3839'. [ 119.097209][T13180] loop2: detected capacity change from 0 to 1024 [ 119.103932][T13180] EXT4-fs: Ignoring removed orlov option [ 119.111562][T13180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.136711][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.165165][T13185] IPv6: Can't replace route, no match found [ 119.256896][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 119.256910][ T29] audit: type=1400 audit(2000262676.705:3832): avc: denied { create } for pid=13196 comm="syz.3.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 119.284269][ T29] audit: type=1400 audit(2000262676.735:3833): avc: denied { bind } for pid=13196 comm="syz.3.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 119.383278][T13203] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 119.424043][ T29] audit: type=1326 audit(2000262676.875:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.447691][ T29] audit: type=1326 audit(2000262676.875:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.471394][ T29] audit: type=1326 audit(2000262676.875:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.494944][ T29] audit: type=1326 audit(2000262676.875:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.518485][ T29] audit: type=1326 audit(2000262676.875:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.542019][ T29] audit: type=1326 audit(2000262676.875:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.565559][ T29] audit: type=1326 audit(2000262676.875:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.589079][ T29] audit: type=1326 audit(2000262676.875:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.9.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 119.888929][T13248] syz.9.3876 (13248): /proc/13247/oom_adj is deprecated, please use /proc/13247/oom_score_adj instead. [ 119.970047][T13258] loop9: detected capacity change from 0 to 512 [ 119.999673][T13258] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.3880: bad orphan inode 15 [ 120.017992][T13264] __nla_validate_parse: 2 callbacks suppressed [ 120.018004][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3883'. [ 120.033184][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3883'. [ 120.042468][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3883'. [ 120.053352][T13258] ext4_test_bit(bit=14, block=18) = 1 [ 120.058871][T13258] is_bad_inode(inode)=0 [ 120.063134][T13258] NEXT_ORPHAN(inode)=1023 [ 120.067498][T13258] max_ino=32 [ 120.070784][T13258] i_nlink=0 [ 120.083993][T13258] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2977: inode #15: comm syz.9.3880: corrupted xattr block 19: bad e_name length [ 120.148632][T13258] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117) [ 120.172879][T13273] loop6: detected capacity change from 0 to 1024 [ 120.182163][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 120.184078][T13258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 120.206324][T13273] EXT4-fs: Ignoring removed oldalloc option [ 120.212353][T13258] ext4 filesystem being mounted at /397/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 120.246753][T13273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.260876][T13258] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 120.260876][T13258] program syz.9.3880 not setting count and/or reply_len properly [ 120.322884][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.363215][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 120.429426][T13292] loop2: detected capacity change from 0 to 8192 [ 120.573039][T13310] xt_hashlimit: max too large, truncated to 1048576 [ 120.678395][T13320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.685783][T13320] IPv6: NLM_F_CREATE should be set when creating new route [ 120.693002][T13320] IPv6: NLM_F_CREATE should be set when creating new route [ 121.012927][T13352] loop4: detected capacity change from 0 to 8192 [ 121.040046][T13352] syz.4.3921: attempt to access beyond end of device [ 121.040046][T13352] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 121.057415][T13352] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 121.065308][T13352] FAT-fs (loop4): Filesystem has been set read-only [ 121.082344][T13352] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 121.103252][T13352] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 121.486553][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3931'. [ 121.543639][T13384] xt_hashlimit: max too large, truncated to 1048576 [ 121.574127][T13386] bond_slave_1: mtu less than device minimum [ 121.615968][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3938'. [ 121.785507][T13420] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 121.858464][T13428] 9pnet_fd: Insufficient options for proto=fd [ 121.859888][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3954'. [ 121.917566][T13434] team0: Port device team_slave_1 removed [ 121.935016][T13433] bond4: entered promiscuous mode [ 121.940090][T13433] bond4: entered allmulticast mode [ 121.955872][T13433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.971882][T13433] bond4 (unregistering): Released all slaves [ 122.095071][T13461] IPv4: Oversized IP packet from 127.202.26.0 [ 122.142577][T13473] netlink: 'syz.9.3968': attribute type 13 has an invalid length. [ 122.250628][T13473] gretap0: refused to change device tx_queue_len [ 122.267878][T13473] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.356361][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3972'. [ 122.472424][T13489] loop9: detected capacity change from 0 to 512 [ 122.495295][T13489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.512817][T13494] netlink: 'syz.6.3978': attribute type 10 has an invalid length. [ 122.522774][T13489] EXT4-fs (loop9): orphan cleanup on readonly fs [ 122.552910][T13489] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3976: bg 0: block 248: padding at end of block bitmap is not set [ 122.569092][T13489] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3976: Failed to acquire dquot type 1 [ 122.586967][T13489] EXT4-fs (loop9): 1 truncate cleaned up [ 122.607450][T13489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.745343][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.792562][T13505] bridge_slave_0: left allmulticast mode [ 122.798372][T13505] bridge_slave_0: left promiscuous mode [ 122.804044][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.813371][T13505] bridge_slave_1: left allmulticast mode [ 122.819127][T13505] bridge_slave_1: left promiscuous mode [ 122.824761][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.835031][T13505] bond0: (slave bond_slave_0): Releasing backup interface [ 122.846062][T13505] bond0: (slave bond_slave_1): Releasing backup interface [ 122.857195][T13508] loop6: detected capacity change from 0 to 764 [ 122.886391][T13505] team0: Port device team_slave_0 removed [ 122.895480][T13505] team0: Port device team_slave_1 removed [ 122.902241][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.909927][T13505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.919086][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.926538][T13505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.097459][T13528] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 123.210247][T13553] netlink: 'syz.9.4004': attribute type 3 has an invalid length. [ 123.340800][ T80] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 123.386535][T13574] netlink: 'syz.4.4013': attribute type 13 has an invalid length. [ 123.423453][T13574] gretap0: refused to change device tx_queue_len [ 123.441089][T13574] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.546982][T13591] loop4: detected capacity change from 0 to 512 [ 123.558979][T13594] rdma_op ffff8881173a5980 conn xmit_rdma 0000000000000000 [ 123.575442][T13591] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.4021: corrupted xattr block 95: invalid header [ 123.590556][T13591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4021: bg 0: block 7: invalid block bitmap [ 123.603751][T13591] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 123.658403][T13591] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.4021: corrupted xattr block 95: invalid header [ 123.712134][T13607] loop2: detected capacity change from 0 to 512 [ 123.729413][T13607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4028: bg 0: block 35: padding at end of block bitmap is not set [ 123.744118][T13591] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 123.762859][T13607] EXT4-fs (loop2): Remounting filesystem read-only [ 123.771292][T13591] EXT4-fs (loop4): 1 orphan inode deleted [ 123.777598][T13591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.794418][T13607] EXT4-fs (loop2): 1 truncate cleaned up [ 123.800775][T13607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.813465][T13607] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 123.822221][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.852599][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.908086][T13615] netlink: 'syz.3.4032': attribute type 13 has an invalid length. [ 123.920754][T13615] gretap0: refused to change device tx_queue_len [ 123.927981][T13615] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.988224][T13623] bridge_slave_0: left allmulticast mode [ 123.994037][T13623] bridge_slave_0: left promiscuous mode [ 123.999703][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.010188][T13623] bridge_slave_1: left allmulticast mode [ 124.016140][T13623] bridge_slave_1: left promiscuous mode [ 124.021794][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.038715][T13623] bond0: (slave bond_slave_0): Releasing backup interface [ 124.052502][T13623] bond0: (slave bond_slave_1): Releasing backup interface [ 124.070379][T13623] team0: Port device team_slave_0 removed [ 124.085247][T13623] team0: Port device team_slave_1 removed [ 124.092677][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.100149][T13623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.124729][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.132177][T13623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.152715][T13630] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 124.262952][T13646] gretap0: entered promiscuous mode [ 124.278310][T13646] gretap0: left promiscuous mode [ 124.368690][T13666] loop9: detected capacity change from 0 to 1024 [ 124.408411][T13666] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.421919][T13678] loop6: detected capacity change from 0 to 512 [ 124.445849][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.475908][T13678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.509967][T13678] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.530361][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 124.530372][ T29] audit: type=1326 audit(2000262681.975:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.588062][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.611207][ T29] audit: type=1326 audit(2000262682.015:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.634817][ T29] audit: type=1326 audit(2000262682.015:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.658420][ T29] audit: type=1326 audit(2000262682.015:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.682035][ T29] audit: type=1326 audit(2000262682.015:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.705595][ T29] audit: type=1326 audit(2000262682.015:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.729065][ T29] audit: type=1326 audit(2000262682.015:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.752624][ T29] audit: type=1326 audit(2000262682.015:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.776485][ T29] audit: type=1326 audit(2000262682.025:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.799977][ T29] audit: type=1326 audit(2000262682.025:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.9.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39750fcde9 code=0x7ffc0000 [ 124.871605][T13699] loop9: detected capacity change from 0 to 512 [ 124.880028][T13699] EXT4-fs: Ignoring removed orlov option [ 124.886159][T13699] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 124.934589][T13699] EXT4-fs (loop9): 1 truncate cleaned up [ 124.940986][T13699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.145359][T13720] syzkaller1: entered promiscuous mode [ 125.150884][T13720] syzkaller1: entered allmulticast mode [ 125.298461][T13729] loop4: detected capacity change from 0 to 512 [ 125.316107][T13729] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.368934][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.377509][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.453337][T13746] loop4: detected capacity change from 0 to 512 [ 125.469064][T13746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.537038][T13746] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.553406][T13746] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4086: bg 0: block 248: padding at end of block bitmap is not set [ 125.601419][T13746] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4086: Failed to acquire dquot type 1 [ 125.636860][T13746] EXT4-fs (loop4): 1 truncate cleaned up [ 125.720192][T13768] infiniband syz2: set down [ 125.724762][T13768] infiniband syz2: added veth0_to_bond [ 125.733321][T12073] EXT4-fs unmount: 4 callbacks suppressed [ 125.733333][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.736891][T13768] RDS/IB: syz2: added [ 125.753272][T13768] smc: adding ib device syz2 with port count 1 [ 125.759555][T13768] smc: ib device syz2 port 1 has pnetid [ 126.177802][T13799] loop9: detected capacity change from 0 to 128 [ 126.521396][T13840] pim6reg1: entered promiscuous mode [ 126.526825][T13840] pim6reg1: entered allmulticast mode [ 126.535328][T13842] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4130'. [ 126.604693][T13849] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 126.660577][T13860] geneve0: entered allmulticast mode [ 126.685874][T13864] loop9: detected capacity change from 0 to 128 [ 126.718166][T13864] syz.9.4141: attempt to access beyond end of device [ 126.718166][T13864] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 126.733465][T13866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13866 comm=syz.4.4142 [ 126.746043][T13866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13866 comm=syz.4.4142 [ 126.776767][T13864] syz.9.4141: attempt to access beyond end of device [ 126.776767][T13864] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 126.853789][T13864] syz.9.4141: attempt to access beyond end of device [ 126.853789][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 126.892581][T13864] syz.9.4141: attempt to access beyond end of device [ 126.892581][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.000529][T13864] syz.9.4141: attempt to access beyond end of device [ 127.000529][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.048676][T13864] syz.9.4141: attempt to access beyond end of device [ 127.048676][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.083685][T13864] syz.9.4141: attempt to access beyond end of device [ 127.083685][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.096955][T13864] syz.9.4141: attempt to access beyond end of device [ 127.096955][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.105341][T13884] serio: Serial port ptm0 [ 127.110118][T13864] syz.9.4141: attempt to access beyond end of device [ 127.110118][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.127708][T13864] syz.9.4141: attempt to access beyond end of device [ 127.127708][T13864] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.295630][T13892] vlan0: entered allmulticast mode [ 127.300781][T13892] bridge_slave_0: entered allmulticast mode [ 127.325156][T13892] bridge_slave_0: left allmulticast mode [ 127.380659][T13900] loop4: detected capacity change from 0 to 256 [ 127.413694][T13900] FAT-fs (loop4): Directory bread(block 64) failed [ 127.421596][T13900] FAT-fs (loop4): Directory bread(block 65) failed [ 127.429283][T13900] FAT-fs (loop4): Directory bread(block 66) failed [ 127.429426][T13900] FAT-fs (loop4): Directory bread(block 67) failed [ 127.429476][T13900] FAT-fs (loop4): Directory bread(block 68) failed [ 127.429650][T13900] FAT-fs (loop4): Directory bread(block 69) failed [ 127.429686][T13900] FAT-fs (loop4): Directory bread(block 70) failed [ 127.436431][T13900] FAT-fs (loop4): Directory bread(block 71) failed [ 127.436462][T13900] FAT-fs (loop4): Directory bread(block 72) failed [ 127.436478][T13900] FAT-fs (loop4): Directory bread(block 73) failed [ 127.463951][T13907] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.4159'. [ 127.463968][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 127.613743][T13915] loop9: detected capacity change from 0 to 2048 [ 127.637796][T13915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.656078][T13921] pim6reg1: entered promiscuous mode [ 127.661499][T13921] pim6reg1: entered allmulticast mode [ 127.695864][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.790045][T13930] rdma_op ffff888125c4f980 conn xmit_rdma 0000000000000000 [ 127.987035][T13957] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4181'. [ 128.033192][T13961] loop2: detected capacity change from 0 to 256 [ 128.047088][T13961] FAT-fs (loop2): Directory bread(block 64) failed [ 128.057939][T13961] FAT-fs (loop2): Directory bread(block 65) failed [ 128.068292][T13961] FAT-fs (loop2): Directory bread(block 66) failed [ 128.076202][T13961] FAT-fs (loop2): Directory bread(block 67) failed [ 128.082916][T13961] FAT-fs (loop2): Directory bread(block 68) failed [ 128.090331][T13961] FAT-fs (loop2): Directory bread(block 69) failed [ 128.102741][T13961] FAT-fs (loop2): Directory bread(block 70) failed [ 128.109489][T13961] FAT-fs (loop2): Directory bread(block 71) failed [ 128.118469][T13961] FAT-fs (loop2): Directory bread(block 72) failed [ 128.129186][T13961] FAT-fs (loop2): Directory bread(block 73) failed [ 128.300136][T13976] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 128.415515][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4198'. [ 128.428163][T13992] netlink: 'syz.3.4199': attribute type 6 has an invalid length. [ 128.461261][T13996] geneve0: left allmulticast mode [ 128.512061][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4202'. [ 128.569270][T14008] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 128.840679][T14029] loop4: detected capacity change from 0 to 512 [ 128.887159][T14029] EXT4-fs (loop4): 1 orphan inode deleted [ 128.900489][T14029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.913374][ T3394] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 128.929565][T14029] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.979913][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.117136][T14075] loop2: detected capacity change from 0 to 512 [ 129.130150][T14075] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.137885][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4238'. [ 129.141065][T14075] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 129.164343][T14075] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 129.171415][T14075] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.4236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 129.190191][T14086] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4239'. [ 129.213257][T14075] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4236: couldn't read orphan inode 13 (err -117) [ 129.234152][T14075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.262176][T14075] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 129.273367][T14075] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 129.294971][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.352096][T14107] syzkaller0: entered promiscuous mode [ 129.357625][T14107] syzkaller0: entered allmulticast mode [ 129.611261][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4254'. [ 130.071824][T14174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14174 comm=syz.9.4273 [ 130.084941][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4273'. [ 130.093965][T14174] netlink: 'syz.9.4273': attribute type 30 has an invalid length. [ 130.270111][T14182] ipvlan2: entered promiscuous mode [ 130.296170][T14182] bridge0: port 1(ipvlan2) entered blocking state [ 130.302733][T14182] bridge0: port 1(ipvlan2) entered disabled state [ 130.311435][T14182] ipvlan2: entered allmulticast mode [ 130.316759][T14182] bridge0: entered allmulticast mode [ 130.324290][T14182] ipvlan2: left allmulticast mode [ 130.329402][T14182] bridge0: left allmulticast mode [ 130.351442][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 130.351454][ T29] audit: type=1326 audit(2000262687.795:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.385475][ T29] audit: type=1326 audit(2000262687.805:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.409482][ T29] audit: type=1326 audit(2000262687.835:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.433241][ T29] audit: type=1326 audit(2000262687.835:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.456745][ T29] audit: type=1326 audit(2000262687.835:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.480302][ T29] audit: type=1326 audit(2000262687.855:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.515621][T14190] IPv4: Oversized IP packet from 127.202.26.0 [ 130.541283][ T29] audit: type=1326 audit(2000262687.855:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.564848][ T29] audit: type=1326 audit(2000262687.855:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.588389][ T29] audit: type=1326 audit(2000262687.955:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.611939][ T29] audit: type=1326 audit(2000262687.955:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.6.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdbc8cde9 code=0x7ffc0000 [ 130.671396][T14195] batadv1: entered promiscuous mode [ 130.676699][T14195] batadv1: entered allmulticast mode [ 130.727937][T14198] batadv1: entered promiscuous mode [ 130.733296][T14198] batadv1: entered allmulticast mode [ 130.785753][T14200] loop6: detected capacity change from 0 to 2048 [ 130.819983][T14200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.858541][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.922801][T14214] loop2: detected capacity change from 0 to 1024 [ 130.929690][T14214] EXT4-fs: Ignoring removed oldalloc option [ 130.936607][T14214] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.967817][T14214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.002157][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.100286][T14242] rdma_op ffff88811b1e6580 conn xmit_rdma 0000000000000000 [ 131.236596][T14263] loop2: detected capacity change from 0 to 2048 [ 131.274147][T14263] loop2: p3 p4 < > [ 131.754474][T14292] Set syz1 is full, maxelem 65536 reached [ 131.841825][T14317] loop9: detected capacity change from 0 to 2048 [ 131.899787][T14317] loop9: p3 p4 < > [ 131.941855][T14328] loop6: detected capacity change from 0 to 128 [ 131.971999][T14328] bio_check_eod: 6610 callbacks suppressed [ 131.972016][T14328] syz.6.4342: attempt to access beyond end of device [ 131.972016][T14328] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 132.004791][T14328] syz.6.4342: attempt to access beyond end of device [ 132.004791][T14328] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 132.018854][T14328] syz.6.4342: attempt to access beyond end of device [ 132.018854][T14328] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.032300][T14328] syz.6.4342: attempt to access beyond end of device [ 132.032300][T14328] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.045969][T14328] syz.6.4342: attempt to access beyond end of device [ 132.045969][T14328] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.059615][T14328] syz.6.4342: attempt to access beyond end of device [ 132.059615][T14328] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.073164][T14333] syz.6.4342: attempt to access beyond end of device [ 132.073164][T14333] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.102941][T14328] syz.6.4342: attempt to access beyond end of device [ 132.102941][T14328] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.117744][T14333] syz.6.4342: attempt to access beyond end of device [ 132.117744][T14333] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.131725][T14328] syz.6.4342: attempt to access beyond end of device [ 132.131725][T14328] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.251945][T14348] __nla_validate_parse: 2 callbacks suppressed [ 132.251961][T14348] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4351'. [ 132.282081][T14348] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4351'. [ 132.292779][T14348] 0ªX¹¦D: renamed from gretap0 [ 132.299715][T14348] 0ªX¹¦D: left promiscuous mode [ 132.304638][T14348] 0ªX¹¦D: entered allmulticast mode [ 132.311822][T14348] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 132.495224][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 132.540751][T14377] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4364'. [ 132.565595][T14377] gretap0: entered promiscuous mode [ 132.591771][T14377] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4364'. [ 132.602395][T14377] 0ªX¹¦D: renamed from gretap0 [ 132.614938][T14377] 0ªX¹¦D: left promiscuous mode [ 132.619828][T14377] 0ªX¹¦D: entered allmulticast mode [ 132.626451][T14377] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 132.716254][T14383] loop2: detected capacity change from 0 to 4096 [ 132.736646][T14383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.797884][T10434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.961173][T14404] hub 2-0:1.0: USB hub found [ 132.972443][T14404] hub 2-0:1.0: 8 ports detected [ 133.074149][T14411] loop2: detected capacity change from 0 to 512 [ 133.101910][T14411] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4379: Failed to acquire dquot type 1 [ 133.116927][T14419] SELinux: ebitmap start bit (2495) is not a multiple of the map unit size (64) [ 133.126434][T14419] SELinux: failed to load policy [ 133.151300][T14420] loop9: detected capacity change from 0 to 512 [ 133.159165][T14411] EXT4-fs (loop2): 1 truncate cleaned up [ 133.175165][T14422] ref_ctr_offset mismatch. inode: 0xc2e offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 133.194753][T14411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.209227][T14420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.222251][T14411] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.223673][T14420] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.235415][T14411] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.307037][T14431] netlink: 'syz.4.4386': attribute type 39 has an invalid length. [ 133.319493][T14432] bond_slave_1: entered promiscuous mode [ 133.327462][T14430] bond_slave_1: left promiscuous mode [ 133.367721][T14440] can0: slcan on ttyS3. [ 133.375505][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.432947][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4395'. [ 133.445611][T14440] can0 (unregistered): slcan off ttyS3. [ 133.455298][T14440] Falling back ldisc for ttyS3. [ 133.461255][T14449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.753552][T14485] netlink: 'syz.4.4404': attribute type 4 has an invalid length. [ 133.761469][T14485] netlink: 1772 bytes leftover after parsing attributes in process `syz.4.4404'. [ 133.770618][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4404'. [ 133.852935][T14502] ipip0: entered promiscuous mode [ 133.861848][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4415'. [ 133.870910][T14504] netlink: 'syz.3.4415': attribute type 18 has an invalid length. [ 134.040687][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4426'. [ 134.072776][T14525] loop9: detected capacity change from 0 to 128 [ 134.132111][T14533] loop9: detected capacity change from 0 to 1024 [ 134.141722][T14533] EXT4-fs: Ignoring removed oldalloc option [ 134.148049][T14533] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 134.165566][T14533] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.207638][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.349993][T14550] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 134.506448][T14580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.588900][T14592] loop6: detected capacity change from 0 to 512 [ 134.607424][T14592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.623681][T14592] ext4 filesystem being mounted at /623/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.670614][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.810826][T14584] Set syz1 is full, maxelem 65536 reached [ 134.862802][T14624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.864790][T14622] loop6: detected capacity change from 0 to 1024 [ 134.871538][T14624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.879525][T14622] EXT4-fs: Ignoring removed oldalloc option [ 134.902927][T14622] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 134.956229][T14622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.046909][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.200601][T14647] loop9: detected capacity change from 0 to 8192 [ 135.345469][T14666] loop2: detected capacity change from 0 to 128 [ 135.424050][T14674] can0: slcan on ttyS3. [ 135.483738][T14674] can0 (unregistered): slcan off ttyS3. [ 135.489685][T14674] Falling back ldisc for ttyS3. [ 135.521333][T14679] vlan0: entered allmulticast mode [ 135.526576][T14679] bridge_slave_0: entered allmulticast mode [ 135.535717][T14679] bridge_slave_0: left allmulticast mode [ 135.691027][T14694] netlink: 'syz.9.4499': attribute type 39 has an invalid length. [ 135.747181][T14699] loop6: detected capacity change from 0 to 128 [ 135.836957][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 135.836971][ T29] audit: type=1326 audit(2000262693.285:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 135.900785][ T29] audit: type=1326 audit(2000262693.285:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 135.924418][ T29] audit: type=1326 audit(2000262693.285:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 135.948007][ T29] audit: type=1326 audit(2000262693.285:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 135.971751][ T29] audit: type=1326 audit(2000262693.285:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 135.995391][ T29] audit: type=1326 audit(2000262693.285:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 136.018970][ T29] audit: type=1326 audit(2000262693.285:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 136.042529][ T29] audit: type=1326 audit(2000262693.285:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 136.066019][ T29] audit: type=1326 audit(2000262693.285:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 136.089470][ T29] audit: type=1326 audit(2000262693.285:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 136.123969][T14704] loop6: detected capacity change from 0 to 512 [ 136.175444][T14704] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 136.200290][T14704] EXT4-fs (loop6): mount failed [ 136.358861][T14731] can0: slcan on ttyS3. [ 136.483733][T14731] can0 (unregistered): slcan off ttyS3. [ 136.489512][T14731] Falling back ldisc for ttyS3. [ 137.327169][T14792] loop6: detected capacity change from 0 to 512 [ 137.333892][T14792] EXT4-fs: Ignoring removed i_version option [ 137.339937][T14792] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.346983][T14792] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.358447][T14792] EXT4-fs (loop6): 1 truncate cleaned up [ 137.364787][T14792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.387390][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.860017][T14878] __nla_validate_parse: 13 callbacks suppressed [ 137.860035][T14878] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4556'. [ 137.897092][T14887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4557'. [ 137.975664][T14907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.000381][T14907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.217229][T14907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.226209][T14907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.271756][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4574'. [ 138.324143][T14990] pim6reg1: entered promiscuous mode [ 138.329560][T14990] pim6reg1: entered allmulticast mode [ 138.462168][T15003] 9pnet_fd: p9_fd_create_tcp (15003): problem connecting socket to 127.0.0.1 [ 138.522838][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4589'. [ 138.597588][T15022] loop9: detected capacity change from 0 to 128 [ 138.931907][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4602'. [ 139.091975][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 139.167837][T15053] loop9: detected capacity change from 0 to 1024 [ 139.176936][T15053] EXT4-fs: Ignoring removed oldalloc option [ 139.288360][T15053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.513553][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.523853][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.850923][T15127] loop6: detected capacity change from 0 to 512 [ 139.881237][T15127] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 35: padding at end of block bitmap is not set [ 139.912083][T15127] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 139.935431][T15127] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 4294967295 (level 1) [ 139.956948][T15127] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 4294967295 (level 2) [ 140.154779][T15127] EXT4-fs (loop6): 1 truncate cleaned up [ 140.162741][T15127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.251713][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.320393][ T5485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.489429][T15141] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 140.497286][T15141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4639'. [ 140.920607][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4659'. [ 141.042297][T15206] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.4668'. [ 141.061592][T15212] loop9: detected capacity change from 0 to 512 [ 141.077661][T15214] loop6: detected capacity change from 0 to 512 [ 141.093303][T15214] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.105853][T15212] EXT4-fs: inline encryption not supported [ 141.118848][T15217] loop4: detected capacity change from 0 to 512 [ 141.127118][T15217] EXT4-fs: Ignoring removed oldalloc option [ 141.142342][T15217] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4673: Parent and EA inode have the same ino 15 [ 141.157756][T15214] __quota_error: 75 callbacks suppressed [ 141.157770][T15214] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 141.173753][T15214] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.185164][T15212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.201096][T15217] EXT4-fs (loop4): Remounting filesystem read-only [ 141.207711][T15217] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 141.219685][T15212] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.248194][T15217] EXT4-fs (loop4): 1 orphan inode deleted [ 141.254867][T15217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.268642][T15217] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 141.275524][T15217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.284886][ T5485] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 141.297831][T15212] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.4671: corrupted inode contents [ 141.311081][T15212] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.4671: mark_inode_dirty error [ 141.330890][T15232] loop4: detected capacity change from 0 to 164 [ 141.349047][T15212] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.4671: corrupted inode contents [ 141.386138][T15232] Unable to read rock-ridge attributes [ 141.411318][T15232] Unable to read rock-ridge attributes [ 141.421703][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.576719][T15257] loop4: detected capacity change from 0 to 8192 [ 141.835394][ T29] audit: type=1400 audit(2000262699.285:4463): avc: denied { append } for pid=15261 comm="syz.4.4691" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.835515][T15262] program syz.4.4691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.042203][T15275] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 142.059229][T15277] loop4: detected capacity change from 0 to 128 [ 142.088728][T15277] bio_check_eod: 54555 callbacks suppressed [ 142.088739][T15277] syz.4.4698: attempt to access beyond end of device [ 142.088739][T15277] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 142.120496][T15277] syz.4.4698: attempt to access beyond end of device [ 142.120496][T15277] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 142.136077][T15277] syz.4.4698: attempt to access beyond end of device [ 142.136077][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.149451][T15277] syz.4.4698: attempt to access beyond end of device [ 142.149451][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.162962][T15277] syz.4.4698: attempt to access beyond end of device [ 142.162962][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.176847][T15277] syz.4.4698: attempt to access beyond end of device [ 142.176847][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.190230][T15277] syz.4.4698: attempt to access beyond end of device [ 142.190230][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.204800][T15277] syz.4.4698: attempt to access beyond end of device [ 142.204800][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.223657][T15282] syz.4.4698: attempt to access beyond end of device [ 142.223657][T15282] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.237069][T15277] syz.4.4698: attempt to access beyond end of device [ 142.237069][T15277] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 142.278506][T15292] tipc: Failed to remove unknown binding: 66,1,1/0:1636408357/1636408359 [ 142.311809][T15292] tipc: Failed to remove unknown binding: 66,1,1/0:1636408357/1636408359 [ 142.320412][T15292] tipc: Failed to remove unknown binding: 66,1,1/0:1636408357/1636408359 [ 142.373831][T15296] 9pnet_fd: p9_fd_create_tcp (15296): problem connecting socket to 127.0.0.1 [ 142.461490][ T29] audit: type=1400 audit(2000262699.905:4464): avc: denied { mount } for pid=15306 comm="syz.2.4711" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.496011][ T29] audit: type=1400 audit(2000262699.935:4465): avc: denied { mounton } for pid=15306 comm="syz.2.4711" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 142.549947][ T29] audit: type=1400 audit(2000262699.995:4466): avc: denied { unmount } for pid=10434 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.615842][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4716'. [ 142.625939][ T29] audit: type=1400 audit(2000262700.065:4467): avc: denied { nlmsg_read } for pid=15314 comm="syz.9.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.665378][T15313] loop6: detected capacity change from 0 to 8192 [ 142.866053][T15326] batadv1: entered promiscuous mode [ 142.871310][T15326] batadv1: entered allmulticast mode [ 143.009858][T15340] __nla_validate_parse: 1 callbacks suppressed [ 143.009874][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 143.180354][T15328] chnl_net:caif_netlink_parms(): no params data found [ 143.573675][T15328] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.580760][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.600511][T15360] loop4: detected capacity change from 0 to 512 [ 143.661257][T15360] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.673869][T15328] bridge_slave_0: entered allmulticast mode [ 143.680404][T15328] bridge_slave_0: entered promiscuous mode [ 143.687377][T15328] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.694532][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.729002][T15328] bridge_slave_1: entered allmulticast mode [ 143.735681][T15328] bridge_slave_1: entered promiscuous mode [ 143.757718][T15360] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 143.768134][T15360] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.790384][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.807783][T12073] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 143.809035][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.831811][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4733'. [ 143.842160][T15328] team0: Port device team_slave_0 added [ 143.850558][T15328] team0: Port device team_slave_1 added [ 143.870152][T15368] loop9: detected capacity change from 0 to 2048 [ 143.873677][ T29] audit: type=1400 audit(2000262701.315:4468): avc: denied { relabelto } for pid=15369 comm="syz.4.4732" name="NETLINK" dev="sockfs" ino=40701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 143.877670][T15368] EXT4-fs: inline encryption not supported [ 143.914477][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.921468][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.927950][T15368] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.947437][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.980237][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.987279][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.013318][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.039355][ T8499] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.066930][T15328] hsr_slave_0: entered promiscuous mode [ 144.078287][ T29] audit: type=1326 audit(2000262701.525:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.4.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 144.101933][ T29] audit: type=1326 audit(2000262701.525:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.4.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638d4cde9 code=0x7ffc0000 [ 144.104570][T15328] hsr_slave_1: entered promiscuous mode [ 144.133478][T15328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.141277][T15328] Cannot create hsr debugfs directory [ 144.156505][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4739'. [ 144.165490][T15387] netlink: 'syz.9.4739': attribute type 12 has an invalid length. [ 144.220246][T15394] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.326705][ C0] ================================================================== [ 144.334824][ C0] BUG: KCSAN: data-race in can_send / can_send [ 144.341001][ C0] [ 144.343318][ C0] read-write to 0xffff8881289f0610 of 8 bytes by interrupt on cpu 1: [ 144.351378][ C0] can_send+0x5a2/0x6d0 [ 144.355541][ C0] bcm_can_tx+0x314/0x420 [ 144.359867][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 144.365154][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 144.370792][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 144.375835][ C0] handle_softirqs+0xbf/0x280 [ 144.380516][ C0] run_ksoftirqd+0x1c/0x30 [ 144.384939][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 144.389883][ C0] kthread+0x4ae/0x520 [ 144.393964][ C0] ret_from_fork+0x4b/0x60 [ 144.398385][ C0] ret_from_fork_asm+0x1a/0x30 [ 144.403155][ C0] [ 144.405471][ C0] read-write to 0xffff8881289f0610 of 8 bytes by interrupt on cpu 0: [ 144.413528][ C0] can_send+0x5a2/0x6d0 [ 144.417688][ C0] bcm_can_tx+0x314/0x420 [ 144.422015][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 144.427299][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 144.432496][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 144.437518][ C0] handle_softirqs+0xbf/0x280 [ 144.442195][ C0] __irq_exit_rcu+0x3a/0xc0 [ 144.446700][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 144.452346][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.458332][ C0] __sanitizer_cov_trace_const_cmp1+0x81/0x90 [ 144.464416][ C0] bpf_link_prime+0xa0/0x1e0 [ 144.469010][ C0] bpf_raw_tp_link_attach+0x2dc/0x3e0 [ 144.474397][ C0] bpf_raw_tracepoint_open+0x135/0x2c0 [ 144.479871][ C0] __sys_bpf+0x32b/0x7a0 [ 144.484130][ C0] __x64_sys_bpf+0x43/0x50 [ 144.488544][ C0] x64_sys_call+0x2914/0x2dc0 [ 144.493228][ C0] do_syscall_64+0xc9/0x1c0 [ 144.497738][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.503640][ C0] [ 144.505954][ C0] value changed: 0x00000000000002d4 -> 0x00000000000002d5 [ 144.513057][ C0] [ 144.515373][ C0] Reported by Kernel Concurrency Sanitizer on: [ 144.521514][ C0] CPU: 0 UID: 0 PID: 15417 Comm: syz.6.4749 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 144.532273][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.542340][ C0] ================================================================== [ 144.690597][T15328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.700930][T15328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.710106][T15328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.718908][T15328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.757697][T15328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.771187][T15328] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.787193][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.794339][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.818870][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.826096][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.879456][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.957557][T15328] veth0_vlan: entered promiscuous mode [ 144.965386][T15328] veth1_vlan: entered promiscuous mode [ 144.981225][T15328] veth0_macvtap: entered promiscuous mode [ 144.988783][T15328] veth1_macvtap: entered promiscuous mode [ 145.000653][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.011298][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.021172][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.031748][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.041626][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.052063][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.061950][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.072516][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.083138][T15328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.091356][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.101838][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.111713][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.122159][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.132003][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.142469][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.152298][T15328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.162805][T15328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.173370][T15328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.185872][T15328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.194656][T15328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.203432][T15328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.212178][T15328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0