last executing test programs: 1m19.640511109s ago: executing program 32 (id=2607): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) 59.132366014s ago: executing program 33 (id=3307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) fallocate(r0, 0x1, 0x400002000000000, 0xffff) 57.414889417s ago: executing program 34 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530"], 0xe8}}, 0x1000) 29.823334014s ago: executing program 35 (id=4439): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) recvmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) 29.754475004s ago: executing program 5 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4000000) 29.679455005s ago: executing program 5 (id=4446): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 29.510886118s ago: executing program 5 (id=4457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 29.492257298s ago: executing program 5 (id=4449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 29.467672458s ago: executing program 5 (id=4450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 29.387074179s ago: executing program 5 (id=4451): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 29.376138359s ago: executing program 36 (id=4451): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 27.273994147s ago: executing program 0 (id=4511): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) flock(r2, 0x1) 26.422300148s ago: executing program 0 (id=4557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) 26.328883369s ago: executing program 0 (id=4559): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x200000000200}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0xfcffffff, 0xe33, 0x4000000, 0x1, 0x0, 0x0, 0x3}) 26.311118989s ago: executing program 0 (id=4560): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 26.295046269s ago: executing program 0 (id=4561): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) sendmsg$inet(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)="fb", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}, 0x8080) 26.23486201s ago: executing program 0 (id=4563): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket(0x15, 0x5, 0x0) 26.23468631s ago: executing program 37 (id=4563): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket(0x15, 0x5, 0x0) 26.007036503s ago: executing program 6 (id=4575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 26.006584203s ago: executing program 6 (id=4577): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) open_tree(0xffffffffffffff9c, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 26.006344363s ago: executing program 6 (id=4584): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 25.897338505s ago: executing program 6 (id=4580): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 25.861026345s ago: executing program 6 (id=4581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25.651086608s ago: executing program 6 (id=4585): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 25.650918638s ago: executing program 38 (id=4585): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 18.812031606s ago: executing program 3 (id=4911): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000011c0)) 18.792838737s ago: executing program 3 (id=4913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='sched_switch\x00', r0}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = io_uring_setup(0x4d1c, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 0x400000, 0x137}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) close_range(r1, 0xffffffffffffffff, 0x0) 18.674776578s ago: executing program 3 (id=4916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x1e, 0x20704513) socket$nl_generic(0x10, 0x3, 0x10) 18.662841008s ago: executing program 3 (id=4917): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85b63583d9d432ff2d70a8ea6b95965a084c8d9ee47d61244ed498769deef6ce4adfa3ffad724030133fd28811f8308b3ad04f4cacf28506d0a7977af17513c7200a8e1da6d9d5dad4600b614448b176b30b808fc8049c9d5d35cfc60ee47a39", 0x60) 18.52308305s ago: executing program 3 (id=4918): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000080)='./file1\x00') 18.321587943s ago: executing program 3 (id=4929): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 18.306988723s ago: executing program 39 (id=4929): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 16.436313757s ago: executing program 8 (id=4985): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 16.367884518s ago: executing program 8 (id=4988): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000600)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.831046805s ago: executing program 8 (id=4998): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x18d}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 15.707758276s ago: executing program 8 (id=5002): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 15.619432828s ago: executing program 8 (id=5005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xd, 0x8, 0x9, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 15.255367862s ago: executing program 8 (id=5015): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x3, 0xc94}, 0x1a, 0x1, 0x800, 0x4, 0x8, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) setregid(0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) 15.255209262s ago: executing program 40 (id=5015): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x3, 0xc94}, 0x1a, 0x1, 0x800, 0x4, 0x8, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) setregid(0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) 2.511815567s ago: executing program 1 (id=5464): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 2.031024383s ago: executing program 1 (id=5478): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.875172175s ago: executing program 1 (id=5487): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.732497458s ago: executing program 1 (id=5495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.038125516s ago: executing program 2 (id=5518): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.037800856s ago: executing program 9 (id=5519): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x6, 0x32e, 0x38, 0x0, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6312, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x200000000200}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 959.071757ms ago: executing program 9 (id=5520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x9, 0xa, 0x0, 0x1f}, 0x7, 0x1, 0x11, 0x0, 0x0, 0xc, 0xc, 0x16, 0x7, 0x5ac, {0x8, 0x9, 0x0, 0x3, 0xfffffffd, 0x3}}}}]}, 0x78}}, 0x0) 898.792778ms ago: executing program 9 (id=5521): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000040), 0x0}, 0x20) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000010280)=ANY=[], 0x1, 0x370, &(0x7f0000000680)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ38aDZL093vB9o8yfs+M++bXzxvIG+O3vvq42bdM+tWR7KGSkZE5IFIWbKSyEQXeUlxIC9f+PP+81ev33i7Uq1e2lG9XLn2yraqrm/88MlnxbjbvYIclj84EuO3w6cPnz3679pHDU8bnrbaHbX0ZvvXjnXTsXW34TVN1SuObXm2Nlqe7Ubt7ai97rT39npqtXYvru25tuep1epp0+5pp60dt6fWh1ajpaZp6sW1tOE+xow5cmq3d3asypwnvDVnHhbtH9/3JzS7bsVaETGLJ1pqtx/puAAAwFIaqf+/SWqEsmT7BWUmXgvkw3h4GRDU/0kc1v/BYuG4/r/zwk+dC+/eXY/r/3v5tPr/1V+i/KH6Pzj7wuv/70aun6yIzr3903R+qPofy2Fj+BX5+/GKPRbU/8Grob+i/+L9O5thQP0PAAAAAAAAAAAAAAAAAAAAAMB58MD3S77vl5LL5O/4KwTx9eTapC8a49wZ9/gX4h0F+s8HPJauXr8hRvjFvdy6iPNlt9atRZdxe9JxU0ryb/h8iEUbThyEjRooy4/Ofre2GieshP8rIiqO2LIlJSkP5Yfx5beql7Y0EuWH59/v1jK5tSC/Lo0wf1tK8lR6/nZqfl5eenEg35SS/HxL2uLIbvw+luR/vqX65jvVkfxi2C/N64/2IQEAAAAAYOFMVSNePpeH17/R+t00VdPag7W8DK7PT34+0F9fb6auz3Ol53JnO3cAAAAAAJ4UXv7TpuU4tuv1xgZFmdanEB9tpCknU44cBLkZ+gwF98NgdVKflYEZznrkfPwLGrMOw/V6hZnHnAR/FST1zky2cB1qMtLv1RmDZP4zdDZO+xC4XlZOPXfb9TaC8ehc0xkIko+NxvWRK/MeeVyQ7Jw7rfMzX3/793ynyMS79g42vXbXmDLTMMiM3HIw+Vzyh+9PHc9q+rvF9/P8yAwAAACAJZEU/UUvueWNsx0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPoIVukzYmOOs5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMvi/wAAAP//1Av1tw==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={0x0}) 893.503778ms ago: executing program 2 (id=5522): socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000a00)='sys_enter\x00', r1, 0x0, 0x20400000000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") utime(&(0x7f0000000080)='./file0\x00', 0x0) 875.343919ms ago: executing program 1 (id=5523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 844.973779ms ago: executing program 9 (id=5524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 844.358489ms ago: executing program 1 (id=5525): syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) wait4(r2, 0x0, 0x40000000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 820.553709ms ago: executing program 2 (id=5526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0xa, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 577.543562ms ago: executing program 2 (id=5532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 548.329452ms ago: executing program 2 (id=5543): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 530.145493ms ago: executing program 2 (id=5534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 246.622067ms ago: executing program 7 (id=5538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r3, r2, 0x0) 229.102097ms ago: executing program 7 (id=5539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 149.159458ms ago: executing program 4 (id=5542): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) 148.862158ms ago: executing program 4 (id=5544): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 148.490588ms ago: executing program 7 (id=5545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000040), &(0x7f0000000300)='%ps \x00'}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 148.201408ms ago: executing program 7 (id=5546): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 96.565699ms ago: executing program 4 (id=5547): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 85.071189ms ago: executing program 4 (id=5550): timer_delete(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000280), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 74.480219ms ago: executing program 7 (id=5551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000180001002bbd7000000000000a000000000000060000000008000600ff03000008000400", @ANYRES32=r3], 0x34}}, 0x0) 26.88049ms ago: executing program 4 (id=5552): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 26.57803ms ago: executing program 7 (id=5553): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 23.36702ms ago: executing program 4 (id=5554): epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) 13.33617ms ago: executing program 9 (id=5555): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) creat(0x0, 0x198) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 0s ago: executing program 9 (id=5556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0xf7, 0xf, 0xc, 0x7, 0x0, 0x8, 0xe040, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x6, 0x46}, 0x0, 0x104, 0x9, 0x7, 0x1e4f, 0x1, 0xa5, 0x0, 0x140000, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xf) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 0s ago: executing program 9 (id=5557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x34000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) kernel console output (not intermixed with test programs): usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 139.021824][T12863] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 139.029103][T12863] Memory cgroup stats for /syz7: [ 139.029743][T12863] cache 0 [ 139.037782][T12863] rss 4096 [ 139.040824][T12863] shmem 0 [ 139.043843][T12863] mapped_file 0 [ 139.047300][T12863] dirty 0 [ 139.050302][T12863] writeback 4096 [ 139.053838][T12863] workingset_refault_anon 5 [ 139.058472][T12863] workingset_refault_file 0 [ 139.063237][T12863] swap 167936 [ 139.066682][T12863] swapcached 24576 [ 139.070628][T12863] pgpgin 8257 [ 139.073933][T12863] pgpgout 8251 [ 139.077288][T12863] pgfault 12953 [ 139.080782][T12863] pgmajfault 0 [ 139.084141][T12863] inactive_anon 4096 [ 139.088065][T12863] active_anon 20480 [ 139.091864][T12863] inactive_file 0 [ 139.095470][T12863] active_file 0 [ 139.098998][T12863] unevictable 0 [ 139.102494][T12863] hierarchical_memory_limit 314572800 [ 139.107909][T12863] hierarchical_memsw_limit 9223372036854771712 [ 139.114097][T12863] total_cache 0 [ 139.117531][T12863] total_rss 4096 [ 139.121165][T12863] total_shmem 0 [ 139.124601][T12863] total_mapped_file 0 [ 139.128585][T12863] total_dirty 0 [ 139.132019][T12863] total_writeback 4096 [ 139.136060][T12863] total_workingset_refault_anon 5 [ 139.141087][T12863] total_workingset_refault_file 0 [ 139.146092][T12863] total_swap 167936 [ 139.149898][T12863] total_swapcached 24576 [ 139.154306][T12863] total_pgpgin 8257 [ 139.158150][T12863] total_pgpgout 8251 [ 139.162032][T12863] total_pgfault 12953 [ 139.166003][T12863] total_pgmajfault 0 [ 139.169892][T12863] total_inactive_anon 4096 [ 139.174284][T12863] total_active_anon 20480 [ 139.178606][T12863] total_inactive_file 0 [ 139.182743][T12863] total_active_file 0 [ 139.186790][T12863] total_unevictable 0 [ 139.190784][T12863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3915,pid=12863,uid=0 [ 139.205454][T12863] Memory cgroup out of memory: Killed process 12863 (syz.7.3915) total-vm:95664kB, anon-rss:1064kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 139.359677][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 139.359689][ T29] audit: type=1326 audit(1745479099.545:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9069e969 code=0x7ffc0000 [ 139.405698][ T29] audit: type=1326 audit(1745479099.575:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fec9069e969 code=0x7ffc0000 [ 139.429506][ T29] audit: type=1326 audit(1745479099.575:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9069e969 code=0x7ffc0000 [ 139.453049][ T29] audit: type=1326 audit(1745479099.575:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fec9069e969 code=0x7ffc0000 [ 139.476507][ T29] audit: type=1326 audit(1745479099.575:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9069e969 code=0x7ffc0000 [ 139.500216][ T29] audit: type=1326 audit(1745479099.575:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9069e969 code=0x7ffc0000 [ 139.541420][T12949] atomic_op ffff888117b16528 conn xmit_atomic 0000000000000000 [ 139.564340][T12945] netlink: 'syz.1.3952': attribute type 7 has an invalid length. [ 139.590998][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 139.667856][T12960] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.705504][T12966] blktrace: Concurrent blktraces are not allowed on sg0 [ 139.758808][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3966'. [ 139.804112][ T29] audit: type=1326 audit(1745479099.985:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b351e969 code=0x7ffc0000 [ 139.827808][ T29] audit: type=1326 audit(1745479099.985:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b351e969 code=0x7ffc0000 [ 139.851408][ T29] audit: type=1326 audit(1745479100.015:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b351e969 code=0x7ffc0000 [ 139.875181][ T29] audit: type=1326 audit(1745479100.015:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b351e969 code=0x7ffc0000 [ 139.941616][T12984] netlink: 'syz.7.3971': attribute type 3 has an invalid length. [ 140.003659][T12999] syzkaller0: entered allmulticast mode [ 140.053324][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3984'. [ 140.174797][T13031] loop7: detected capacity change from 0 to 164 [ 140.182499][T13031] Unable to read rock-ridge attributes [ 140.191849][T13031] Unable to read rock-ridge attributes [ 140.213936][T13034] netlink: 'syz.5.3994': attribute type 13 has an invalid length. [ 140.257999][T13042] atomic_op ffff888117b16528 conn xmit_atomic 0000000000000000 [ 140.271591][T13034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.291348][T13034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.306888][T13040] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3997'. [ 140.497902][T13082] binfmt_misc: register: failed to install interpreter file ./file2 [ 140.509550][T13086] netlink: 'syz.0.4015': attribute type 13 has an invalid length. [ 140.599751][T13086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.618174][T13092] 0X: renamed from caif0 [ 140.624544][T13092] 0X: entered allmulticast mode [ 140.629815][T13092] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 140.891868][T13133] rdma_op ffff8881185e0d80 conn xmit_rdma 0000000000000000 [ 140.922221][T13135] hub 2-0:1.0: USB hub found [ 140.928702][T13135] hub 2-0:1.0: 8 ports detected [ 140.971086][T13149] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.019022][T13155] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 141.064200][T13165] loop7: detected capacity change from 0 to 1024 [ 141.166663][T13165] EXT4-fs: Ignoring removed oldalloc option [ 141.173179][T13165] EXT4-fs: Ignoring removed orlov option [ 141.199285][T13165] EXT4-fs (loop7): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 141.225287][T13173] xt_hashlimit: max too large, truncated to 1048576 [ 141.235352][T13165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.250495][T13177] serio: Serial port ptm0 [ 141.286585][T13165] EXT4-fs warning (device loop7): ext4_xattr_inode_get:556: inode #19: comm syz.7.4054: EA inode hash validation failed [ 141.333122][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.334307][T13189] netlink: 'syz.5.4066': attribute type 1 has an invalid length. [ 141.382180][T13189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.415203][T13189] bond2: (slave gretap1): making interface the new active one [ 141.423714][T13189] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 141.674942][T13214] IPv6: Can't replace route, no match found [ 141.806764][T13229] 0X: renamed from caif0 [ 141.819381][T13229] 0X: entered allmulticast mode [ 141.824652][T13229] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 142.171283][T13272] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 142.320769][T13289] GUP no longer grows the stack in syz.0.4113 (13289): 200000004000-20000000a000 (200000002000) [ 142.331313][T13289] CPU: 1 UID: 0 PID: 13289 Comm: syz.0.4113 Tainted: G W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 142.331351][T13289] Tainted: [W]=WARN [ 142.331357][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.331369][T13289] Call Trace: [ 142.331375][T13289] [ 142.331383][T13289] dump_stack_lvl+0xf6/0x150 [ 142.331403][T13289] dump_stack+0x15/0x1a [ 142.331448][T13289] __get_user_pages+0x1dc1/0x2340 [ 142.331475][T13289] ? xfd_validate_state+0x46/0xf0 [ 142.331511][T13289] get_user_pages_remote+0x1f4/0x800 [ 142.331596][T13289] __access_remote_vm+0x160/0x590 [ 142.331620][T13289] access_remote_vm+0x34/0x50 [ 142.331640][T13289] proc_pid_cmdline_read+0x3fd/0x720 [ 142.331671][T13289] vfs_readv+0x3e5/0x660 [ 142.331734][T13289] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 142.331781][T13289] __x64_sys_preadv+0xf9/0x1c0 [ 142.331798][T13289] x64_sys_call+0x1410/0x2e10 [ 142.331814][T13289] do_syscall_64+0xc9/0x1a0 [ 142.331900][T13289] ? clear_bhb_loop+0x25/0x80 [ 142.331951][T13289] ? clear_bhb_loop+0x25/0x80 [ 142.332007][T13289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.332026][T13289] RIP: 0033:0x7f2e50e9e969 [ 142.332118][T13289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.332133][T13289] RSP: 002b:00007f2e4f507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 142.332186][T13289] RAX: ffffffffffffffda RBX: 00007f2e510c5fa0 RCX: 00007f2e50e9e969 [ 142.332198][T13289] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 142.332209][T13289] RBP: 00007f2e50f20ab1 R08: 00000000fffffff9 R09: 0000000000000000 [ 142.332261][T13289] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 142.332271][T13289] R13: 0000000000000000 R14: 00007f2e510c5fa0 R15: 00007ffd4e31b178 [ 142.332285][T13289] [ 142.690973][T13313] SELinux: failed to load policy [ 142.708798][T13321] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.837494][T13341] __nla_validate_parse: 12 callbacks suppressed [ 142.837522][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4132'. [ 142.887514][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4137'. [ 142.930785][T13355] hub 9-0:1.0: USB hub found [ 142.935633][T13353] sd 0:0:1:0: device reset [ 142.941166][T13355] hub 9-0:1.0: 8 ports detected [ 143.005367][T13370] loop0: detected capacity change from 0 to 128 [ 143.052622][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 143.136181][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 143.215105][T13387] sd 0:0:1:0: device reset [ 143.260750][T13395] loop7: detected capacity change from 0 to 128 [ 143.294703][T13397] SELinux: syz.0.4161 (13397) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 143.845600][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4200'. [ 143.870950][T13487] netlink: 'syz.5.4202': attribute type 27 has an invalid length. [ 143.895911][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.903094][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.912239][T13487] bond0: left promiscuous mode [ 143.917146][T13487] bond_slave_0: left promiscuous mode [ 143.922620][T13487] bond_slave_1: left promiscuous mode [ 143.932320][T13487] 0X: left allmulticast mode [ 143.955477][T13487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.965822][T13487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.981925][T13487] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.990452][T13487] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.998919][T13487] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.007265][T13487] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.703423][T13547] IPVS: Error connecting to the multicast addr [ 144.842457][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 144.842472][ T29] audit: type=1400 audit(1745479105.025:7965): avc: denied { name_bind } for pid=13558 comm="syz.7.4234" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 144.876767][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4235'. [ 144.885976][T13561] IPVS: Error joining to the multicast group [ 144.908574][ T29] audit: type=1326 audit(1745479105.095:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 144.932273][ T29] audit: type=1326 audit(1745479105.095:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 144.980197][ T29] audit: type=1326 audit(1745479105.145:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.003854][ T29] audit: type=1326 audit(1745479105.145:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.027438][ T29] audit: type=1326 audit(1745479105.145:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.051006][ T29] audit: type=1326 audit(1745479105.145:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.074577][ T29] audit: type=1326 audit(1745479105.145:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.098144][ T29] audit: type=1326 audit(1745479105.145:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.121816][ T29] audit: type=1326 audit(1745479105.145:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa8066be969 code=0x7ffc0000 [ 145.351327][T13599] loop0: detected capacity change from 0 to 164 [ 145.377028][T13599] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.386597][T13599] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.398485][T13599] Symlink component flag not implemented [ 145.404170][T13599] Symlink component flag not implemented [ 145.410469][T13599] Symlink component flag not implemented (7) [ 145.416487][T13599] Symlink component flag not implemented (116) [ 145.595322][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'. [ 145.604290][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'. [ 145.613628][T13614] netlink: 'syz.1.4260': attribute type 7 has an invalid length. [ 145.685792][T13623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4263'. [ 145.747411][T13633] serio: Serial port ttyS3 [ 145.924700][T13643] xt_hashlimit: size too large, truncated to 1048576 [ 146.137612][T13577] syz.7.4243 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 146.151775][T13577] CPU: 0 UID: 0 PID: 13577 Comm: syz.7.4243 Tainted: G W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 146.151808][T13577] Tainted: [W]=WARN [ 146.151815][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.151826][T13577] Call Trace: [ 146.151839][T13577] [ 146.151846][T13577] dump_stack_lvl+0xf6/0x150 [ 146.151870][T13577] dump_stack+0x15/0x1a [ 146.151893][T13577] dump_header+0x83/0x2d0 [ 146.151911][T13577] oom_kill_process+0x341/0x4c0 [ 146.151928][T13577] out_of_memory+0x9d1/0xc20 [ 146.151946][T13577] mem_cgroup_out_of_memory+0x13f/0x190 [ 146.151967][T13577] try_charge_memcg+0x5f1/0x890 [ 146.152008][T13577] obj_cgroup_charge_pages+0xc0/0x1a0 [ 146.152031][T13577] __memcg_kmem_charge_page+0x9d/0x170 [ 146.152053][T13577] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 146.152072][T13577] alloc_pages_mpol+0xb6/0x260 [ 146.152150][T13577] alloc_pages_noprof+0xe8/0x130 [ 146.152174][T13577] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 146.152275][T13577] __kvmalloc_node_noprof+0x311/0x520 [ 146.152299][T13577] ? ip_set_alloc+0x1f/0x30 [ 146.152409][T13577] ? ip_set_alloc+0x1f/0x30 [ 146.152434][T13577] ip_set_alloc+0x1f/0x30 [ 146.152460][T13577] hash_netiface_create+0x273/0x730 [ 146.152490][T13577] ? __nla_parse+0x40/0x60 [ 146.152528][T13577] ? __pfx_hash_netiface_create+0x10/0x10 [ 146.152553][T13577] ip_set_create+0x3b6/0x970 [ 146.152585][T13577] ? __nla_parse+0x40/0x60 [ 146.152653][T13577] nfnetlink_rcv_msg+0x4ba/0x580 [ 146.152687][T13577] netlink_rcv_skb+0x12f/0x230 [ 146.152706][T13577] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.152737][T13577] nfnetlink_rcv+0x187/0x1610 [ 146.152815][T13577] ? page_counter_charge+0x21a/0x240 [ 146.152838][T13577] ? __rcu_read_unlock+0x4e/0x70 [ 146.152856][T13577] ? __rcu_read_unlock+0x4e/0x70 [ 146.152874][T13577] ? __memcg_kmem_charge_page+0xd2/0x170 [ 146.152950][T13577] ? mas_next_slot+0xb8d/0xbe0 [ 146.152974][T13577] ? cmp_ex_search+0x56/0x70 [ 146.153000][T13577] ? bsearch+0x98/0xc0 [ 146.153060][T13577] ? __pfx_cmp_ex_search+0x10/0x10 [ 146.153088][T13577] ? strncpy_from_user+0x188/0x230 [ 146.153112][T13577] ? search_extable+0x59/0x80 [ 146.153134][T13577] ? strncpy_from_user+0x188/0x230 [ 146.153191][T13577] ? strncpy_from_user+0x188/0x230 [ 146.153222][T13577] ? should_fail_ex+0x31/0x270 [ 146.153245][T13577] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 146.153301][T13577] ? __rcu_read_unlock+0x34/0x70 [ 146.153321][T13577] ? __netlink_lookup+0x25d/0x2a0 [ 146.153403][T13577] netlink_unicast+0x605/0x6c0 [ 146.153429][T13577] netlink_sendmsg+0x609/0x720 [ 146.153448][T13577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.153469][T13577] __sock_sendmsg+0x140/0x180 [ 146.153507][T13577] ____sys_sendmsg+0x350/0x4e0 [ 146.153531][T13577] __sys_sendmsg+0x1a0/0x240 [ 146.153584][T13577] __x64_sys_sendmsg+0x46/0x50 [ 146.153613][T13577] x64_sys_call+0x26f3/0x2e10 [ 146.153631][T13577] do_syscall_64+0xc9/0x1a0 [ 146.153655][T13577] ? clear_bhb_loop+0x25/0x80 [ 146.153674][T13577] ? clear_bhb_loop+0x25/0x80 [ 146.153694][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.153763][T13577] RIP: 0033:0x7f5e54dce969 [ 146.153779][T13577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.153826][T13577] RSP: 002b:00007f5e53437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.153841][T13577] RAX: ffffffffffffffda RBX: 00007f5e54ff5fa0 RCX: 00007f5e54dce969 [ 146.153852][T13577] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 146.153864][T13577] RBP: 00007f5e54e50ab1 R08: 0000000000000000 R09: 0000000000000000 [ 146.153877][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.153889][T13577] R13: 0000000000000000 R14: 00007f5e54ff5fa0 R15: 00007ffe41b572c8 [ 146.153993][T13577] [ 146.154000][T13577] memory: usage 307200kB, limit 307200kB, failcnt 240 [ 146.537528][T13577] memory+swap: usage 307284kB, limit 9007199254740988kB, failcnt 0 [ 146.545500][T13577] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 146.552808][T13577] Memory cgroup stats for /syz7: [ 146.553067][T13577] cache 0 [ 146.560967][T13577] rss 24576 [ 146.564268][T13577] shmem 0 [ 146.567236][T13577] mapped_file 0 [ 146.571500][T13577] dirty 0 [ 146.574492][T13577] writeback 0 [ 146.578391][T13577] workingset_refault_anon 68 [ 146.583162][T13577] workingset_refault_file 0 [ 146.587800][T13577] swap 172032 [ 146.591091][T13577] swapcached 28672 [ 146.594812][T13577] pgpgin 13953 [ 146.598266][T13577] pgpgout 13945 [ 146.601865][T13577] pgfault 22798 [ 146.605428][T13577] pgmajfault 20 [ 146.608918][T13577] inactive_anon 16384 [ 146.612894][T13577] active_anon 16384 [ 146.616693][T13577] inactive_file 0 [ 146.620335][T13577] active_file 0 [ 146.623788][T13577] unevictable 0 [ 146.627253][T13577] hierarchical_memory_limit 314572800 [ 146.632662][T13577] hierarchical_memsw_limit 9223372036854771712 [ 146.638841][T13577] total_cache 0 [ 146.642316][T13577] total_rss 24576 [ 146.645951][T13577] total_shmem 0 [ 146.649470][T13577] total_mapped_file 0 [ 146.653450][T13577] total_dirty 0 [ 146.656916][T13577] total_writeback 0 [ 146.660780][T13577] total_workingset_refault_anon 68 [ 146.665925][T13577] total_workingset_refault_file 0 [ 146.670965][T13577] total_swap 172032 [ 146.674773][T13577] total_swapcached 28672 [ 146.679184][T13577] total_pgpgin 13953 [ 146.683075][T13577] total_pgpgout 13945 [ 146.687033][T13577] total_pgfault 22798 [ 146.691055][T13577] total_pgmajfault 20 [ 146.695028][T13577] total_inactive_anon 16384 [ 146.699613][T13577] total_active_anon 16384 [ 146.703927][T13577] total_inactive_file 0 [ 146.708093][T13577] total_active_file 0 [ 146.712055][T13577] total_unevictable 0 [ 146.716069][T13577] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4243,pid=13576,uid=0 [ 146.730840][T13577] Memory cgroup out of memory: Killed process 13577 (syz.7.4243) total-vm:95664kB, anon-rss:944kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 146.811602][T13671] netlink: 'syz.6.4281': attribute type 27 has an invalid length. [ 146.821728][T13671] lo: left promiscuous mode [ 146.826274][T13671] lo: left allmulticast mode [ 146.901537][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.908818][T13671] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.997532][T13671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.018067][T13671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.032729][T13682] loop0: detected capacity change from 0 to 164 [ 147.051069][T13682] Unable to read rock-ridge attributes [ 147.064331][T13682] Unable to read rock-ridge attributes [ 147.069921][T13671] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.079054][T13671] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.080942][T13682] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.087984][T13671] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.088040][T13671] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.207160][T13696] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4294'. [ 147.470394][T13740] netlink: 'syz.7.4310': attribute type 27 has an invalid length. [ 147.479989][T13740] 0X: left allmulticast mode [ 147.488197][T13740] vxlan0: left promiscuous mode [ 147.540513][T13750] loop7: detected capacity change from 0 to 164 [ 147.559128][T13750] Unable to read rock-ridge attributes [ 147.574809][T13750] Unable to read rock-ridge attributes [ 147.590558][T13750] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.710874][T13767] loop7: detected capacity change from 0 to 512 [ 147.719363][T13767] EXT4-fs (loop7): bad s_want_extra_isize: 3314 [ 148.039807][T13789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.049832][T13789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.425839][ T3370] IPVS: starting estimator thread 0... [ 148.554372][ T3787] IPVS: stop unused estimator thread 0... [ 149.126345][T13885] SELinux: syz.1.4375 (13885) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.398852][T13910] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 149.398852][T13910] program syz.0.4384 not setting count and/or reply_len properly [ 149.446020][T13912] SELinux: syz.7.4386 (13912) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.627249][T13932] vlan2: entered allmulticast mode [ 149.632563][T13932] bond0: entered allmulticast mode [ 149.637783][T13932] bond_slave_0: entered allmulticast mode [ 149.643510][T13932] bond_slave_1: entered allmulticast mode [ 149.649267][T13932] team0: entered allmulticast mode [ 149.654491][T13932] team_slave_0: entered allmulticast mode [ 149.660414][T13932] team_slave_1: entered allmulticast mode [ 149.664646][T13938] xt_hashlimit: size too large, truncated to 1048576 [ 149.787812][T13950] SELinux: syz.0.4401 (13950) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.999194][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 149.999208][ T29] audit: type=1400 audit(1745479110.185:8144): avc: denied { map } for pid=13969 comm="syz.1.4412" path="socket:[44060]" dev="sockfs" ino=44060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.028815][ T29] audit: type=1400 audit(1745479110.185:8145): avc: denied { read } for pid=13969 comm="syz.1.4412" path="socket:[44060]" dev="sockfs" ino=44060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.450890][T13988] __nla_validate_parse: 3 callbacks suppressed [ 150.450905][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4421'. [ 150.468296][ T29] audit: type=1400 audit(1745479110.635:8146): avc: denied { setopt } for pid=13987 comm="syz.5.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.905755][T14014] netlink: 'syz.5.4430': attribute type 3 has an invalid length. [ 150.984678][T14021] hub 2-0:1.0: USB hub found [ 150.989536][T14021] hub 2-0:1.0: 8 ports detected [ 150.995168][ T29] audit: type=1400 audit(1745479111.175:8147): avc: denied { mounton } for pid=14025 comm="syz.1.4435" path="/952/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 151.102408][T14036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.296094][T14041] chnl_net:caif_netlink_parms(): no params data found [ 151.333919][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.341273][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.349002][T14041] bridge_slave_0: entered allmulticast mode [ 151.355512][T14041] bridge_slave_0: entered promiscuous mode [ 151.362484][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.370126][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.378808][T14041] bridge_slave_1: entered allmulticast mode [ 151.385293][T14041] bridge_slave_1: entered promiscuous mode [ 151.416254][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.442355][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.452884][T14065] hub 2-0:1.0: USB hub found [ 151.465352][T14065] hub 2-0:1.0: 8 ports detected [ 151.474241][T14041] team0: Port device team_slave_0 added [ 151.499943][T14041] team0: Port device team_slave_1 added [ 151.536345][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.543819][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.569846][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.595428][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.602483][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.629279][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.685424][T14041] hsr_slave_0: entered promiscuous mode [ 151.696291][T14041] hsr_slave_1: entered promiscuous mode [ 151.702670][T14041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.710964][T14041] Cannot create hsr debugfs directory [ 151.821349][T14092] vlan2: entered allmulticast mode [ 151.826507][T14092] bond0: entered allmulticast mode [ 151.831700][T14092] bond_slave_0: entered allmulticast mode [ 151.837459][T14092] bond_slave_1: entered allmulticast mode [ 151.842790][T14096] loop0: detected capacity change from 0 to 1024 [ 151.857405][T14094] IPVS: Error connecting to the multicast addr [ 151.877963][T14096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.912113][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.952042][T14106] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 151.958265][ T29] audit: type=1400 audit(1745479112.135:8148): avc: denied { relabelfrom } for pid=14105 comm="syz.6.4465" name="UDP" dev="sockfs" ino=43623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 151.986119][ T29] audit: type=1400 audit(1745479112.145:8149): avc: denied { relabelto } for pid=14105 comm="syz.6.4465" name="UDP" dev="sockfs" ino=43623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 152.011269][T14041] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 152.024201][ T3806] bridge_slave_1: left allmulticast mode [ 152.029889][ T3806] bridge_slave_1: left promiscuous mode [ 152.035585][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.045999][ T3806] bridge_slave_0: left promiscuous mode [ 152.051944][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.073500][ T3806] bond2 (unregistering): (slave gretap1): Releasing active interface [ 152.090777][ T29] audit: type=1326 audit(1745479112.275:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.7.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e54dce969 code=0x7ffc0000 [ 152.114874][ T29] audit: type=1326 audit(1745479112.275:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.7.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e54dce969 code=0x7ffc0000 [ 152.138569][ T29] audit: type=1326 audit(1745479112.275:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.7.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f5e54dce969 code=0x7ffc0000 [ 152.148707][T14104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.165611][ T29] audit: type=1326 audit(1745479112.275:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.7.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e54dce969 code=0x7ffc0000 [ 152.174327][T14104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.209610][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.226418][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.236046][ T3806] bond0 (unregistering): Released all slaves [ 152.245976][ T3806] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 152.255129][ T3806] bond1 (unregistering): Released all slaves [ 152.263006][ T3806] bond2 (unregistering): Released all slaves [ 152.272683][T14109] wireguard0: entered promiscuous mode [ 152.278181][T14109] wireguard0: entered allmulticast mode [ 152.287381][T14041] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 152.298521][T14071] chnl_net:caif_netlink_parms(): no params data found [ 152.307082][T14041] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 152.318934][ T3806] tipc: Disabling bearer [ 152.323994][ T3806] tipc: Left network mode [ 152.331659][T14041] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 152.352442][ T3806] hsr_slave_0: left promiscuous mode [ 152.358351][ T3806] hsr_slave_1: left promiscuous mode [ 152.363980][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.371979][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.393105][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 152.402657][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 152.445471][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.452609][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.459892][T14071] bridge_slave_0: entered allmulticast mode [ 152.466443][T14071] bridge_slave_0: entered promiscuous mode [ 152.473309][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.480442][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.487845][T14071] bridge_slave_1: entered allmulticast mode [ 152.494379][T14071] bridge_slave_1: entered promiscuous mode [ 152.525885][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.552995][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.566438][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.586854][T14071] team0: Port device team_slave_0 added [ 152.602676][T14071] team0: Port device team_slave_1 added [ 152.614262][T14041] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.634247][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.641381][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.667416][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.693673][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.700977][ T3834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.728574][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.735678][ T3834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.750335][T14148] netlink: 'syz.7.4480': attribute type 1 has an invalid length. [ 152.759459][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.766427][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.795313][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.868225][T14071] hsr_slave_0: entered promiscuous mode [ 152.878062][T14071] hsr_slave_1: entered promiscuous mode [ 152.896353][T14041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.033125][T14071] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 153.052568][T14071] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 153.066162][T14071] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 153.085911][T14071] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 153.096777][T14189] loop0: detected capacity change from 0 to 512 [ 153.130559][T14189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.157825][T14189] ext4 filesystem being mounted at /889/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.189975][T14041] veth0_vlan: entered promiscuous mode [ 153.201641][T14203] loop7: detected capacity change from 0 to 512 [ 153.217220][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.232356][T14041] veth1_vlan: entered promiscuous mode [ 153.244824][T14071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.257950][T14203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.281271][T14203] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.285195][T14071] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.306475][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.313989][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.332764][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.336374][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.349589][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.385979][T14041] veth0_macvtap: entered promiscuous mode [ 153.397107][T14071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.415335][T14041] veth1_macvtap: entered promiscuous mode [ 153.429860][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.440766][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.465350][T14041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.477283][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.488562][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.513567][T14041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.541791][T14041] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.551053][T14041] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.560158][T14041] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.569071][T14041] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.599159][T14071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.703409][T14256] x_tables: duplicate underflow at hook 4 [ 153.735146][T14260] openvswitch: netlink: Message has 6 unknown bytes. [ 153.765304][T14071] veth0_vlan: entered promiscuous mode [ 153.774254][T14071] veth1_vlan: entered promiscuous mode [ 153.792413][T14071] veth0_macvtap: entered promiscuous mode [ 153.801453][T14071] veth1_macvtap: entered promiscuous mode [ 153.813278][T14071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.823868][T14071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.834392][T14071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.846016][T14071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.857641][T14071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.868436][T14268] vlan2: entered allmulticast mode [ 153.873671][T14268] bond0: entered allmulticast mode [ 153.878938][T14268] bond_slave_0: entered allmulticast mode [ 153.884771][T14268] bond_slave_1: entered allmulticast mode [ 153.912794][T14071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.923487][T14071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.933460][T14071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.944111][T14071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.956013][T14071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.973042][T14071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.981902][T14071] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.991495][T14071] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.000964][T14071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.054112][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4452'. [ 154.162374][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4531'. [ 154.172163][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4531'. [ 154.191233][T14304] wireguard0: entered promiscuous mode [ 154.197007][T14304] wireguard0: entered allmulticast mode [ 154.296920][T14328] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4544'. [ 154.336431][T14335] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 154.360857][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4549'. [ 154.370707][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4549'. [ 154.382728][T14338] wireguard0: entered promiscuous mode [ 154.388455][T14338] wireguard0: entered allmulticast mode [ 154.474742][T14354] loop9: detected capacity change from 0 to 512 [ 154.483068][T14350] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 154.492246][T14350] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 154.496092][T14354] EXT4-fs (loop9): orphan cleanup on readonly fs [ 154.509622][T14354] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4556: bg 0: block 248: padding at end of block bitmap is not set [ 154.526374][T14354] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4556: Failed to acquire dquot type 1 [ 154.538745][T14332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.547215][T14332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.558172][T14354] EXT4-fs (loop9): 1 truncate cleaned up [ 154.564614][T14354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.618485][T14354] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 154.639166][T14354] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 154.664311][T14071] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.707880][T14365] Falling back ldisc for ttyS3. [ 154.828806][T14368] chnl_net:caif_netlink_parms(): no params data found [ 154.898086][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.905193][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.912484][T14368] bridge_slave_0: entered allmulticast mode [ 154.919592][T14368] bridge_slave_0: entered promiscuous mode [ 154.926534][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.933742][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.941060][T14368] bridge_slave_1: entered allmulticast mode [ 154.947539][T14368] bridge_slave_1: entered promiscuous mode [ 154.966580][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.978015][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.012837][T14368] team0: Port device team_slave_0 added [ 155.022216][T14413] vlan2: entered allmulticast mode [ 155.027358][T14413] bond0: entered allmulticast mode [ 155.032962][T14413] bond_slave_0: entered allmulticast mode [ 155.038768][T14413] bond_slave_1: entered allmulticast mode [ 155.054670][T14368] team0: Port device team_slave_1 added [ 155.091573][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.098792][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.124889][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.146276][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.153399][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.179823][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.273692][T14368] hsr_slave_0: entered promiscuous mode [ 155.288267][T14368] hsr_slave_1: entered promiscuous mode [ 155.305895][T14368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.322264][T14368] Cannot create hsr debugfs directory [ 155.374120][T14422] SELinux: ebitmap: truncated map [ 155.397017][T14422] SELinux: failed to load policy [ 155.437321][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 155.437334][ T29] audit: type=1326 audit(1745479115.615:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.9.4589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffac4e8e969 code=0x0 [ 155.513875][T14424] chnl_net:caif_netlink_parms(): no params data found [ 155.553553][T14424] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.560768][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.569641][T14424] bridge_slave_0: entered allmulticast mode [ 155.576195][T14424] bridge_slave_0: entered promiscuous mode [ 155.583116][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.590334][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.597535][T14424] bridge_slave_1: entered allmulticast mode [ 155.604570][T14424] bridge_slave_1: entered promiscuous mode [ 155.623698][T14424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.635497][T14424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.657320][T14424] team0: Port device team_slave_0 added [ 155.665002][T14424] team0: Port device team_slave_1 added [ 155.681235][T14424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.688311][T14424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.714306][T14424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.729233][T14424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.736683][T14424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.763607][T14424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.795160][T14424] hsr_slave_0: entered promiscuous mode [ 155.801263][T14424] hsr_slave_1: entered promiscuous mode [ 155.807193][T14424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.814873][T14424] Cannot create hsr debugfs directory [ 155.823361][T14368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.838400][T14368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.852188][T14368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.873970][T14368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.941831][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.971893][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.982843][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.990030][ T3834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.006507][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.013629][ T3834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.066568][ T29] audit: type=1326 audit(1745479116.245:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 156.079171][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.114355][ T29] audit: type=1326 audit(1745479116.275:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 156.138194][ T29] audit: type=1326 audit(1745479116.275:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 156.163278][ T29] audit: type=1326 audit(1745479116.275:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 156.186883][ T29] audit: type=1326 audit(1745479116.275:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 156.210450][ T29] audit: type=1326 audit(1745479116.275:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 156.260481][T14485] loop7: detected capacity change from 0 to 512 [ 156.270346][T14485] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.4605: corrupted in-inode xattr: invalid ea_ino [ 156.288117][T14485] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.4605: couldn't read orphan inode 15 (err -117) [ 156.306671][T14485] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.341270][T14495] pim6reg: entered allmulticast mode [ 156.346709][ T29] audit: type=1400 audit(1745479116.525:8297): avc: denied { rename } for pid=14483 comm="syz.7.4605" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.369562][ T29] audit: type=1400 audit(1745479116.525:8298): avc: denied { unlink } for pid=14483 comm="syz.7.4605" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 156.374668][T14368] veth0_vlan: entered promiscuous mode [ 156.392464][ T29] audit: type=1400 audit(1745479116.525:8299): avc: denied { rename } for pid=14483 comm="syz.7.4605" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 156.408930][T14368] veth1_vlan: entered promiscuous mode [ 156.426002][T14495] pim6reg: left allmulticast mode [ 156.438752][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.451281][T14424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.460290][T14424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.476703][T14424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.486159][T14424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.534053][T14368] veth0_macvtap: entered promiscuous mode [ 156.544786][T14368] veth1_macvtap: entered promiscuous mode [ 156.559690][T14501] ALSA: seq fatal error: cannot create timer (-22) [ 156.569240][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.580717][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.592216][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.604982][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.615037][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.625616][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.642921][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.660690][T14511] netlink: 'syz.9.4615': attribute type 10 has an invalid length. [ 156.668616][T14511] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4615'. [ 156.680045][T14424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.687810][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.698429][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.708327][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.718794][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.728715][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.739216][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.750350][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.763013][T14511] dummy0: entered promiscuous mode [ 156.768885][T14511] bridge0: port 3(dummy0) entered blocking state [ 156.775543][T14511] bridge0: port 3(dummy0) entered disabled state [ 156.783892][T14511] dummy0: entered allmulticast mode [ 156.790300][T14511] bridge0: port 3(dummy0) entered blocking state [ 156.797209][T14511] bridge0: port 3(dummy0) entered forwarding state [ 156.815821][T14368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.825153][T14368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.833963][T14368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.842827][T14368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.885848][T14424] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.917350][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.925367][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.959040][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.966184][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.100610][T14424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.104226][T14557] loop7: detected capacity change from 0 to 1024 [ 157.135695][T14559] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 157.146608][T14557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.160418][T14557] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.200953][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.245303][T14424] veth0_vlan: entered promiscuous mode [ 157.258698][T14424] veth1_vlan: entered promiscuous mode [ 157.294105][T14424] veth0_macvtap: entered promiscuous mode [ 157.317054][T14424] veth1_macvtap: entered promiscuous mode [ 157.339487][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.350338][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.360241][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.370816][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.380664][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.391109][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.401748][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.412506][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.478493][T14424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.498223][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.509999][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.520138][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.530739][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.540822][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.551319][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.561434][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.571963][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.587159][T14424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.599924][T14424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.608852][T14424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.618071][T14424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.626946][T14424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.646867][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4646'. [ 157.703299][T14600] syzkaller0: entered allmulticast mode [ 157.721172][T14606] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.732815][T14600] syzkaller0 (unregistering): left allmulticast mode [ 157.775612][T14616] loop9: detected capacity change from 0 to 128 [ 157.831773][T14623] loop3: detected capacity change from 0 to 512 [ 157.870044][T14623] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4657: corrupted in-inode xattr: invalid ea_ino [ 157.892688][T14623] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4657: couldn't read orphan inode 15 (err -117) [ 157.918320][T14623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.919687][T14621] SELinux: ebitmap: truncated map [ 157.948986][T14424] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.966799][T14621] SELinux: failed to load policy [ 157.980775][ T3834] kworker/u8:54: attempt to access beyond end of device [ 157.980775][ T3834] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 158.012799][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.012799][ T3834] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 158.031956][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.031956][ T3834] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 158.048252][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.048252][ T3834] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 158.062334][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.062334][ T3834] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 158.077155][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.077155][ T3834] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 158.092315][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.092315][ T3834] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 158.098838][T14636] loop7: detected capacity change from 0 to 164 [ 158.106562][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.106562][ T3834] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 158.129041][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.129041][ T3834] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 158.173949][T14640] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4667'. [ 158.178043][T14636] Unable to read rock-ridge attributes [ 158.207610][ T3834] kworker/u8:54: attempt to access beyond end of device [ 158.207610][ T3834] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 158.230698][T14636] Unable to read rock-ridge attributes [ 158.235660][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4669'. [ 158.238750][T14636] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.246708][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 158.322460][T14649] xt_hashlimit: max too large, truncated to 1048576 [ 158.454825][T14673] SELinux: syz.7.4683 (14673) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.538231][T14684] loop7: detected capacity change from 0 to 128 [ 158.552316][T14684] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.565415][T14684] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.600509][T14690] lo: entered promiscuous mode [ 158.606542][T14690] lo: entered allmulticast mode [ 158.611615][ T3834] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.623272][T14690] lo: left allmulticast mode [ 158.628042][T14690] lo: left promiscuous mode [ 158.695304][T14706] loop2: detected capacity change from 0 to 2048 [ 158.705872][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.714513][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.723487][T14706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.739938][T14706] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.4696: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.777096][T14368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.891315][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4705'. [ 158.905198][T14727] 8021q: adding VLAN 0 to HW filter on device team1 [ 158.934813][T14729] xt_hashlimit: max too large, truncated to 1048576 [ 158.956143][T14735] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4708'. [ 158.979315][T14737] loop2: detected capacity change from 0 to 128 [ 159.017313][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4713'. [ 159.054195][T14745] loop7: detected capacity change from 0 to 2048 [ 159.089058][T14745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.135140][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.163080][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4719'. [ 159.247433][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4726'. [ 159.270147][T14775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 159.278274][T14775] batadv1: entered allmulticast mode [ 159.283781][T14775] team0: Port device batadv1 added [ 159.367798][T14784] xt_hashlimit: max too large, truncated to 1048576 [ 159.636975][T14828] netlink: 'syz.8.4754': attribute type 12 has an invalid length. [ 159.652987][T14832] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.692116][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.702779][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.817700][T14862] netem: incorrect gi model size [ 159.822742][T14862] netem: change failed [ 159.945289][T14886] xt_hashlimit: max too large, truncated to 1048576 [ 159.985513][T14892] loop9: detected capacity change from 0 to 164 [ 160.018761][T14896] netlink: 'syz.9.4785': attribute type 2 has an invalid length. [ 160.026595][T14896] netlink: 'syz.9.4785': attribute type 9 has an invalid length. [ 160.150485][T14908] loop2: detected capacity change from 0 to 2048 [ 160.169257][T14908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.196159][T14368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.233495][T14918] bond1: entered promiscuous mode [ 160.238717][T14918] bond1: entered allmulticast mode [ 160.246122][T14918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.268304][T14918] bond1 (unregistering): Released all slaves [ 160.328805][T14933] loop8: detected capacity change from 0 to 512 [ 160.336155][T14933] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 160.349816][T14933] EXT4-fs (loop8): 1 truncate cleaned up [ 160.356700][T14935] IPv6: Can't replace route, no match found [ 160.374268][T14933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.416773][T14041] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.461245][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.470231][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 160.470244][ T29] audit: type=1326 audit(1745479120.645:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.499991][ T29] audit: type=1326 audit(1745479120.645:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.523599][ T29] audit: type=1326 audit(1745479120.645:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.547147][ T29] audit: type=1326 audit(1745479120.645:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.570764][ T29] audit: type=1326 audit(1745479120.645:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.570837][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.594279][ T29] audit: type=1326 audit(1745479120.645:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.625521][ T29] audit: type=1326 audit(1745479120.645:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.675741][ T29] audit: type=1326 audit(1745479120.735:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.675831][T14953] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 160.699390][ T29] audit: type=1326 audit(1745479120.735:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.729919][ T29] audit: type=1326 audit(1745479120.735:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.8.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fbd1692e969 code=0x7ffc0000 [ 160.756099][T14958] loop2: detected capacity change from 0 to 128 [ 160.762827][T14958] EXT4-fs: test_dummy_encryption option not supported [ 160.848170][T14978] ALSA: seq fatal error: cannot create timer (-22) [ 160.962164][T14992] netlink: 'syz.2.4829': attribute type 1 has an invalid length. [ 160.969994][T14992] netlink: 'syz.2.4829': attribute type 4 has an invalid length. [ 161.224080][T15030] netlink: 'syz.2.4846': attribute type 3 has an invalid length. [ 161.297366][T15043] program syz.8.4863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.409732][T15059] loop2: detected capacity change from 0 to 512 [ 161.416949][T15059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.417728][T15061] netlink: 'syz.8.4860': attribute type 3 has an invalid length. [ 161.441092][T15059] EXT4-fs (loop2): 1 truncate cleaned up [ 161.453338][T15059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.496022][T14368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.680045][T15103] __nla_validate_parse: 11 callbacks suppressed [ 161.680059][T15103] netlink: 536 bytes leftover after parsing attributes in process `syz.2.4882'. [ 161.697153][T15103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4882'. [ 161.748587][T15112] bond1: entered promiscuous mode [ 161.753675][T15112] bond1: entered allmulticast mode [ 161.759157][T15112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.773413][T15108] loop7: detected capacity change from 0 to 4096 [ 161.782402][T15112] bond1 (unregistering): Released all slaves [ 161.792785][T15108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.825879][T15123] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 161.842244][T15123] SELinux: failed to load policy [ 161.859178][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.899132][T15134] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4895'. [ 162.009488][T15156] loop3: detected capacity change from 0 to 256 [ 162.019745][T15156] vfat: Unknown parameter '00000000000000000000000' [ 162.035965][T15158] wireguard1: entered promiscuous mode [ 162.041768][T15158] wireguard1: entered allmulticast mode [ 162.053829][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4905'. [ 162.133574][T15175] loop2: detected capacity change from 0 to 512 [ 162.170901][T15175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.194372][T15175] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.211656][T15175] EXT4-fs (loop2): shut down requested (0) [ 162.223697][T15182] : renamed from pim6reg1 [ 162.250379][T15186] loop3: detected capacity change from 0 to 1024 [ 162.256958][T15186] EXT4-fs: Ignoring removed bh option [ 162.262456][T15186] EXT4-fs: Ignoring removed orlov option [ 162.268157][T15186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.293443][T15186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.337899][T15186] loop3: detected capacity change from 1024 to 64 [ 162.345185][T15186] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 162.356555][T15186] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 162.369304][T15186] Buffer I/O error on device loop3, logical block 128 [ 162.383447][T14424] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /26/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 162.410710][T14424] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.420756][T15187] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 162.742422][T14368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.754738][T15217] chnl_net:caif_netlink_parms(): no params data found [ 162.834622][T15217] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.841812][T15217] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.850728][T15253] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4944'. [ 162.863303][T15217] bridge_slave_0: entered allmulticast mode [ 162.876127][T15217] bridge_slave_0: entered promiscuous mode [ 162.886298][T15217] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.893471][T15217] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.901011][T15217] bridge_slave_1: entered allmulticast mode [ 162.907741][T15217] bridge_slave_1: entered promiscuous mode [ 162.945580][T15217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.966733][T15217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.016706][T15217] team0: Port device team_slave_0 added [ 163.028954][T15217] team0: Port device team_slave_1 added [ 163.070865][T15217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.078214][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.104233][T15217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.122313][T15273] loop9: detected capacity change from 0 to 256 [ 163.147892][T15273] vfat: Unknown parameter '00000000000000000000000' [ 163.171071][T15217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.178050][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.204842][T15217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.215883][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4952'. [ 163.267169][ T3433] Process accounting resumed [ 163.290604][T15217] hsr_slave_0: entered promiscuous mode [ 163.306847][T15217] hsr_slave_1: entered promiscuous mode [ 163.316067][T15217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.339458][T15217] Cannot create hsr debugfs directory [ 163.345152][T15288] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 163.353392][T15288] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 163.429280][T15300] loop9: detected capacity change from 0 to 512 [ 163.460000][T15300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.518601][T15300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.533464][T15300] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.573331][T15300] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 163.649599][T15300] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 163.727366][T14071] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.802459][T15297] Set syz1 is full, maxelem 65536 reached [ 163.831397][T15217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.850222][T15217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.862549][T15217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.882109][T15217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.948741][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4974'. [ 163.952482][T15217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.957775][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4974'. [ 163.968468][T15217] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.990136][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.997237][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.018047][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.025243][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.084599][T15327] netlink: 'syz.2.4984': attribute type 1 has an invalid length. [ 164.094406][T15333] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:1c26:34ff:fed4:b322 error=-28 [ 164.158639][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.166301][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.170301][T15333] infiniband syz!: set down [ 164.173786][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.178327][T15333] infiniband syz!: added team_slave_0 [ 164.197447][T15217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.211042][T15333] RDS/IB: syz!: added [ 164.215204][T15333] smc: adding ib device syz! with port count 1 [ 164.222063][T15333] smc: ib device syz! port 1 has pnetid [ 164.234604][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.242437][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.250162][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.257702][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.265092][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.272695][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.280296][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.287829][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.295251][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.302866][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.361717][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.369456][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.377267][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.384743][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.392369][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.399844][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.407239][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.414687][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.422237][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.429818][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.437204][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.444813][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.452349][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.459884][ T3433] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 164.476536][ T3433] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 164.584955][T15217] veth0_vlan: entered promiscuous mode [ 164.606218][T15217] veth1_vlan: entered promiscuous mode [ 164.641449][T15217] veth0_macvtap: entered promiscuous mode [ 164.652580][T15217] veth1_macvtap: entered promiscuous mode [ 164.702705][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.713280][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.723438][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.733974][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.744262][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.754972][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.766481][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.777049][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.786880][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.797382][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.808443][T15217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.816628][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.827087][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.837423][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.848079][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.858461][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.869014][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.878908][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.889773][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.899634][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.910055][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.921022][T15217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.948646][ T3806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.984169][ T3806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.007225][T15217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.016162][T15217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.024961][T15217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.033836][T15217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.081691][ T3806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.170387][ T3806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.277316][T15410] netlink: 'syz.4.5004': attribute type 4 has an invalid length. [ 165.328997][T15415] loop7: detected capacity change from 0 to 1024 [ 165.336274][T15415] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 165.346191][T15415] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 165.356308][T15415] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 165.361464][T15408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.367027][T15415] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: inode #5: comm syz.7.5007: unexpected bad inode w/o EXT4_IGET_BAD [ 165.379421][T15417] netlink: 'syz.4.5004': attribute type 4 has an invalid length. [ 165.392040][T15415] EXT4-fs (loop7): no journal found [ 165.402671][T15415] EXT4-fs (loop7): can't get journal size [ 165.409143][T15415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.455085][ T3806] bridge_slave_1: left allmulticast mode [ 165.460938][ T3806] bridge_slave_1: left promiscuous mode [ 165.466667][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.474938][T11608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.490583][ T3806] bridge_slave_0: left allmulticast mode [ 165.496314][ T3806] bridge_slave_0: left promiscuous mode [ 165.501993][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.650924][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.671186][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.689933][ T3806] bond0 (unregistering): Released all slaves [ 165.710570][T15408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.733924][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 165.733939][ T29] audit: type=1400 audit(1745479125.915:8606): avc: denied { create } for pid=15443 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 165.772083][T15441] pimreg: entered allmulticast mode [ 165.777876][ T29] audit: type=1400 audit(1745479125.915:8607): avc: denied { bind } for pid=15443 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 165.813835][T15408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.835650][T15441] pimreg: left allmulticast mode [ 165.875667][ T3806] hsr_slave_0: left promiscuous mode [ 165.884823][ T3806] hsr_slave_1: left promiscuous mode [ 165.891630][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.899166][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.906835][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.914298][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.925151][ T3806] veth1_macvtap: left promiscuous mode [ 165.930838][ T3806] veth0_macvtap: left promiscuous mode [ 165.936485][ T3806] veth1_vlan: left promiscuous mode [ 165.944098][ T3806] veth0_vlan: left promiscuous mode [ 166.043485][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 166.063571][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 166.111900][T15408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.178313][T15408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.198382][T15408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.216235][T15408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.235370][T15408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.282229][T15439] chnl_net:caif_netlink_parms(): no params data found [ 166.293891][T15484] netlink: 'syz.2.5035': attribute type 4 has an invalid length. [ 166.314839][T15484] netlink: 'syz.2.5035': attribute type 4 has an invalid length. [ 166.337507][T15439] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.344720][T15439] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.354316][T15439] bridge_slave_0: entered allmulticast mode [ 166.361162][T15439] bridge_slave_0: entered promiscuous mode [ 166.370887][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5037'. [ 166.381100][T15439] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.388251][T15439] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.395928][T15439] bridge_slave_1: entered allmulticast mode [ 166.413031][T15439] bridge_slave_1: entered promiscuous mode [ 166.437430][T15439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.454581][T15439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.477724][ T29] audit: type=1326 audit(1745479126.665:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1e94ce969 code=0x7ffc0000 [ 166.501361][ T29] audit: type=1326 audit(1745479126.665:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1e94ce969 code=0x7ffc0000 [ 166.525392][ T29] audit: type=1326 audit(1745479126.665:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb1e94ce969 code=0x7ffc0000 [ 166.548937][ T29] audit: type=1326 audit(1745479126.665:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1e94ce9a3 code=0x7ffc0000 [ 166.572425][ T29] audit: type=1326 audit(1745479126.665:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb1e94cd41f code=0x7ffc0000 [ 166.595974][ T29] audit: type=1326 audit(1745479126.665:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb1e94ce9f7 code=0x7ffc0000 [ 166.619385][ T29] audit: type=1326 audit(1745479126.685:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1e94cd2d0 code=0x7ffc0000 [ 166.643198][ T29] audit: type=1326 audit(1745479126.685:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.2.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb1e94cd5ca code=0x7ffc0000 [ 166.673852][T15439] team0: Port device team_slave_0 added [ 166.680673][T15439] team0: Port device team_slave_1 added [ 166.694697][T15439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.701719][T15439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.727760][T15439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.739200][T15439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.746149][T15439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.772651][T15439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.822931][T15514] wireguard0: entered promiscuous mode [ 166.828508][T15514] wireguard0: entered allmulticast mode [ 166.843829][T15439] hsr_slave_0: entered promiscuous mode [ 166.856396][T15439] hsr_slave_1: entered promiscuous mode [ 166.864331][T15439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.873409][T15439] Cannot create hsr debugfs directory [ 167.050828][T15526] binfmt_misc: register: failed to install interpreter file ./file2 [ 167.294609][T15439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.317693][ T1080] page_pool_release_retry() stalled pool shutdown: id 68, 1 inflight 60 sec [ 167.345104][T15439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.366008][T15439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.377878][T15439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.380227][T15542] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5057'. [ 167.395709][T15544] netlink: 332 bytes leftover after parsing attributes in process `syz.9.5058'. [ 167.405871][T15542] netlink: 'syz.4.5057': attribute type 5 has an invalid length. [ 167.413710][T15542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5057'. [ 167.440005][T15546] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.462720][ T3800] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.511582][T15548] smc: net device bond0 applied user defined pnetid SYZ0 [ 167.521863][T15439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.528571][T15548] smc: net device bond0 erased user defined pnetid SYZ0 [ 167.537329][T15439] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.553811][ T3800] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.583484][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.590596][ T3834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.601743][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.608872][ T3834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.624901][T15439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.635307][T15439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.659979][T15560] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 167.680168][T15556] loop9: detected capacity change from 0 to 1024 [ 167.688386][T15556] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 167.698288][T15556] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 167.709990][ T3800] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.723243][T15556] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 167.750233][T15556] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #5: comm syz.9.5064: unexpected bad inode w/o EXT4_IGET_BAD [ 167.771485][ T3800] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.775486][T15556] EXT4-fs (loop9): no journal found [ 167.787176][T15556] EXT4-fs (loop9): can't get journal size [ 167.802307][T15439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.812563][T15556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.856815][T14071] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.870013][ T3800] bridge_slave_1: left allmulticast mode [ 167.870030][ T3800] bridge_slave_1: left promiscuous mode [ 167.870220][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.873611][ T3800] bridge_slave_0: left allmulticast mode [ 167.873629][ T3800] bridge_slave_0: left promiscuous mode [ 167.873758][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.946968][T15583] SET target dimension over the limit! [ 168.090429][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.104751][ T3800] bond_slave_0: left allmulticast mode [ 168.115012][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.127973][ T3800] bond_slave_1: left allmulticast mode [ 168.134576][ T3800] bond0 (unregistering): Released all slaves [ 168.191494][T15439] veth0_vlan: entered promiscuous mode [ 168.210861][T15439] veth1_vlan: entered promiscuous mode [ 168.234012][ T3800] hsr_slave_0: left promiscuous mode [ 168.240065][ T3800] hsr_slave_1: left promiscuous mode [ 168.245752][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.253421][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.261805][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.269459][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.280441][ T3800] veth1_macvtap: left promiscuous mode [ 168.285963][ T3800] veth0_macvtap: left promiscuous mode [ 168.291674][ T3800] veth1_vlan: left promiscuous mode [ 168.297007][ T3800] veth0_vlan: left promiscuous mode [ 168.327283][T15619] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 168.369434][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 168.379667][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 168.410242][T15617] netlink: 1092 bytes leftover after parsing attributes in process `syz.9.5095'. [ 168.422424][T15439] veth0_macvtap: entered promiscuous mode [ 168.429466][T15617] netlink: 1092 bytes leftover after parsing attributes in process `syz.9.5095'. [ 168.441742][T15439] veth1_macvtap: entered promiscuous mode [ 168.448921][T15625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15625 comm=syz.4.5090 [ 168.470225][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.480867][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.490969][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.501950][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.511773][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.522248][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.532111][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.542556][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.554480][T15439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.566312][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.576992][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.586915][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.597472][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.607411][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.617899][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.627762][T15439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.638204][T15439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.648883][T15439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.662043][T15439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.670984][T15439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.679968][T15439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.688791][T15439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.124666][T15665] loop9: detected capacity change from 0 to 128 [ 169.134032][T15663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15663 comm=syz.2.5107 [ 169.146798][T15663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15663 comm=syz.2.5107 [ 169.240968][T15669] usb usb6: usbfs: process 15669 (syz.2.5110) did not claim interface 0 before use [ 169.267312][T15673] netlink: 'syz.7.5112': attribute type 1 has an invalid length. [ 169.336584][T15673] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.345095][T15673] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.353450][T15673] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.361738][T15673] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.384365][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5117'. [ 169.413750][T15673] bond1: (slave geneve2): making interface the new active one [ 169.443588][T15673] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 169.496497][T15690] netlink: '+}[@': attribute type 13 has an invalid length. [ 169.586700][T15690] bridge0: port 3(dummy0) entered disabled state [ 169.593147][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.600355][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.697008][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.709615][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.756133][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5131'. [ 169.766609][T15690] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.775706][T15690] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.784888][T15690] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.793842][T15690] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.851307][T15723] SELinux: policydb version 280 does not match my version range 15-34 [ 169.861965][T15723] SELinux: failed to load policy [ 169.893314][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5138'. [ 169.903207][T15729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 169.988437][T15734] SELinux: failed to load policy [ 170.050627][T15758] netlink: '+}[@': attribute type 13 has an invalid length. [ 170.062268][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.087661][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.121782][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.129021][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.148408][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5156'. [ 170.187738][T15758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.199766][T15758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.227797][T15758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.236712][T15758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.245647][T15758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.254748][T15758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.596652][T15820] netlink: '+}[@': attribute type 13 has an invalid length. [ 170.642133][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.649389][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.685791][T15820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.696534][T15820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.728233][T15820] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.736759][T15820] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.745239][T15820] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.753645][T15820] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.817702][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 170.817715][ T29] audit: type=1400 audit(1745479131.005:8834): avc: denied { read } for pid=15832 comm="syz.2.5181" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 170.853145][ T29] audit: type=1400 audit(1745479131.005:8835): avc: denied { open } for pid=15832 comm="syz.2.5181" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 170.911721][ T29] audit: type=1400 audit(1745479131.095:8836): avc: denied { create } for pid=15837 comm="syz.1.5182" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.951088][T15439] block device autoloading is deprecated and will be removed. [ 170.963280][ T29] audit: type=1400 audit(1745479131.145:8837): avc: denied { read write } for pid=14368 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.986885][ T29] audit: type=1400 audit(1745479131.145:8838): avc: denied { open } for pid=14368 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.010221][ T29] audit: type=1400 audit(1745479131.145:8839): avc: denied { ioctl } for pid=14368 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.037668][ T29] audit: type=1400 audit(1745479131.145:8840): avc: denied { unlink } for pid=15439 comm="syz-executor" name="file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.038023][T15840] rdma_op ffff888118851180 conn xmit_rdma 0000000000000000 [ 171.060440][ T29] audit: type=1400 audit(1745479131.225:8841): avc: denied { create } for pid=15839 comm="syz.2.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.088039][ T29] audit: type=1400 audit(1745479131.225:8842): avc: denied { bind } for pid=15839 comm="syz.2.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.107595][ T29] audit: type=1400 audit(1745479131.225:8843): avc: denied { write } for pid=15839 comm="syz.2.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.164740][T15846] loop2: detected capacity change from 0 to 512 [ 171.188391][T15846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.237964][T15846] EXT4-fs (loop2): 1 truncate cleaned up [ 171.243991][T15846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.390844][ T3806] team_slave_0 (unregistering): left allmulticast mode [ 171.399208][ T3806] team0: Port device team_slave_0 removed [ 171.406074][ T3834] smc: removing ib device syz! [ 171.438527][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x1 [ 171.445942][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.453411][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.460902][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.468469][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.475969][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.483783][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 171.491327][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.498743][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.506127][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x4 [ 171.513640][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.521060][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.528504][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.535913][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.543396][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 171.550888][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.558330][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.565889][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.573477][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.577852][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5197'. [ 171.580902][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.597127][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.604629][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.612204][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.619634][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.627086][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.634541][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.642010][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.649539][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.656995][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.664644][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.672279][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.679707][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.687126][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.694581][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.702000][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.709473][ T1080] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 171.719828][T14368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.720337][ T1080] hid-generic 0000:0000:0000.0016: hidraw0: HID v10.00 Device [syz1] on syz1 [ 171.930919][T15892] block device autoloading is deprecated and will be removed. [ 172.254112][ T3796] team0: Port device team_slave_0 removed [ 172.346856][T15929] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 172.501951][T15952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5237'. [ 172.559425][T15962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5242'. [ 172.570566][T15963] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5241'. [ 172.665333][T15972] loop9: detected capacity change from 0 to 2048 [ 172.693556][T15972] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.803731][T15993] loop2: detected capacity change from 0 to 128 [ 172.814501][T15993] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 172.831729][T15993] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 172.839749][T15993] FAT-fs (loop2): Filesystem has been set read-only [ 172.849139][T15993] bio_check_eod: 218 callbacks suppressed [ 172.849153][T15993] syz.2.5265: attempt to access beyond end of device [ 172.849153][T15993] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.883215][T14071] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.064824][T16040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5277'. [ 173.242435][T16057] loop2: detected capacity change from 0 to 2048 [ 173.298013][T16057] loop2: p1 < > p4 < > [ 173.443248][T16069] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 173.525038][T16079] SELinux: ebitmap: truncated map [ 173.531893][T16079] SELinux: failed to load policy [ 173.564679][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5296'. [ 173.592449][T16087] hub 9-0:1.0: USB hub found [ 173.600408][T16087] hub 9-0:1.0: 8 ports detected [ 173.640374][T16091] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 173.657758][T16095] netlink: 'syz.1.5303': attribute type 13 has an invalid length. [ 173.668033][T16098] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 173.692023][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5305'. [ 173.701278][T16102] IPVS: Error joining to the multicast group [ 173.727140][T16107] SELinux: syz.2.5308 (16107) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 173.765445][T16112] netlink: 'syz.1.5310': attribute type 3 has an invalid length. [ 173.821527][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5315'. [ 173.863573][T16130] loop2: detected capacity change from 0 to 512 [ 173.892064][T16130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.916803][T16130] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.941594][T14368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.945151][T16148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.961483][T16148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.979283][T16153] pimreg: entered allmulticast mode [ 173.985069][T16153] pimreg: left allmulticast mode [ 174.136317][T16176] team0 (unregistering): Port device team_slave_0 removed [ 174.148281][T16176] team0 (unregistering): Port device team_slave_1 removed [ 174.206468][T16182] loop9: detected capacity change from 0 to 512 [ 174.213390][T16182] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 174.226455][T16182] EXT4-fs (loop9): 1 truncate cleaned up [ 174.232580][T16182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.287660][T16190] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5342'. [ 174.313378][T14071] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.360950][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5346'. [ 174.524230][T16213] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 174.530825][T16213] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.538821][T16213] vhci_hcd vhci_hcd.0: Device attached [ 174.545187][T16214] vhci_hcd: connection closed [ 174.545431][ T3796] vhci_hcd: stop threads [ 174.554384][ T3796] vhci_hcd: release socket [ 174.555934][T16216] netlink: 2052 bytes leftover after parsing attributes in process `syz.9.5351'. [ 174.558831][ T3796] vhci_hcd: disconnect device [ 174.654196][T16219] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 175.152125][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.160800][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.453761][T16250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.463084][T16250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.637631][T16294] loop9: detected capacity change from 0 to 512 [ 175.644542][T16294] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.653740][T16294] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 175.666473][T16294] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 175.676303][T16294] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 175.684387][T16294] System zones: 0-2, 18-18, 34-34 [ 175.690504][T16294] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 175.716329][T16294] EXT4-fs (loop9): 1 truncate cleaned up [ 175.724835][T16294] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.753176][T14071] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.776361][T16304] loop9: detected capacity change from 0 to 128 [ 175.783332][T16304] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 175.805534][T16304] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 175.813455][T16304] FAT-fs (loop9): Filesystem has been set read-only [ 175.824030][T16304] syz.9.5387: attempt to access beyond end of device [ 175.824030][T16304] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 175.950237][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 175.950251][ T29] audit: type=1400 audit(1745479136.135:9161): avc: denied { map } for pid=16321 comm="syz.4.5398" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.957144][T16322] vhci_hcd: invalid port number 96 [ 175.985979][T16322] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 176.053207][ T29] audit: type=1326 audit(1745479136.235:9162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.1.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bea55e969 code=0x7ffc0000 [ 176.076756][ T29] audit: type=1326 audit(1745479136.235:9163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.1.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f9bea55e969 code=0x7ffc0000 [ 176.100242][ T29] audit: type=1326 audit(1745479136.235:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.1.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bea55e969 code=0x7ffc0000 [ 176.137389][ T29] audit: type=1400 audit(1745479136.265:9165): avc: denied { bind } for pid=16334 comm="syz.4.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.157810][ T29] audit: type=1400 audit(1745479136.265:9166): avc: denied { connect } for pid=16334 comm="syz.4.5404" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.178448][ T29] audit: type=1400 audit(1745479136.265:9167): avc: denied { write } for pid=16334 comm="syz.4.5404" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.232366][ T29] audit: type=1400 audit(1745479136.345:9168): avc: denied { create } for pid=16338 comm="syz.1.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.252485][ T29] audit: type=1400 audit(1745479136.345:9169): avc: denied { setopt } for pid=16338 comm="syz.1.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.272594][ T29] audit: type=1400 audit(1745479136.345:9170): avc: denied { bind } for pid=16338 comm="syz.1.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.317326][T16354] syzkaller0: entered allmulticast mode [ 176.324258][T16354] syzkaller0 (unregistering): left allmulticast mode [ 176.389978][T16363] SELinux: failed to load policy [ 176.455061][T16359] syzkaller0: entered promiscuous mode [ 176.460647][T16359] syzkaller0: entered allmulticast mode [ 176.474221][T16367] ipvlan2: entered promiscuous mode [ 176.486214][T16367] bridge0: port 3(ipvlan2) entered blocking state [ 176.492732][T16367] bridge0: port 3(ipvlan2) entered disabled state [ 176.499762][T16367] ipvlan2: entered allmulticast mode [ 176.505070][T16367] bridge0: entered allmulticast mode [ 176.511216][T16367] ipvlan2: left allmulticast mode [ 176.516415][T16367] bridge0: left allmulticast mode [ 176.624375][T16383] vlan2: entered allmulticast mode [ 176.750595][T16401] team0 (unregistering): Port device team_slave_0 removed [ 176.759183][T16401] team0 (unregistering): Port device team_slave_1 removed [ 176.804372][T16411] 9pnet: p9_errstr2errno: server reported unknown error u0*iƇ޿_k."#p/yLa~+>3l{@!2!9k 8I$ [ 176.834443][T16413] netem: change failed [ 176.920148][T16422] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 177.329956][T16441] team0 (unregistering): Port device team_slave_1 removed [ 177.512380][T16445] loop2: detected capacity change from 0 to 128 [ 177.522133][T16445] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 177.553491][T16445] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 177.561430][T16445] FAT-fs (loop2): Filesystem has been set read-only [ 177.602549][T16445] syz.2.5453: attempt to access beyond end of device [ 177.602549][T16445] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 178.222608][T16464] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.259718][T16464] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.299540][T16464] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.349317][T16464] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 178.410411][T16464] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.442217][T16464] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.471343][T16464] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.496074][T16464] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.591164][T16476] team0 (unregistering): Port device team_slave_0 removed [ 178.606759][T16476] team0 (unregistering): Port device team_slave_1 removed [ 178.796232][T16491] vlan2: entered allmulticast mode [ 179.009667][T16513] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 179.016207][T16513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.024146][T16513] vhci_hcd vhci_hcd.0: Device attached [ 179.044944][T16519] vhci_hcd: connection closed [ 179.045307][ T3781] vhci_hcd: stop threads [ 179.054556][ T3781] vhci_hcd: release socket [ 179.059040][ T3781] vhci_hcd: disconnect device [ 179.065666][T16526] __nla_validate_parse: 2 callbacks suppressed [ 179.065680][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 179.083248][T16526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.091721][T16526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.231120][T16544] netlink: 2052 bytes leftover after parsing attributes in process `syz.1.5495'. [ 179.240386][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5495'. [ 179.596263][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5505'. [ 179.870389][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5518'. [ 179.879834][T16593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.887513][T16593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.018261][T16599] loop9: detected capacity change from 0 to 128 [ 180.037397][T16602] loop2: detected capacity change from 0 to 128 [ 180.048684][T16602] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.061823][T16602] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.369518][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5533'. [ 180.382887][T16628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.390884][T16628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.433956][T16632] netlink: 2052 bytes leftover after parsing attributes in process `syz.2.5534'. [ 180.443191][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 180.837082][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5551'. [ 180.847837][T16670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.855079][T16670] IPv6: NLM_F_CREATE should be set when creating new route [ 180.863465][T16672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5552'. [ 180.929577][ C0] ================================================================== [ 180.937677][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 180.943917][ C0] [ 180.946313][ C0] read to 0xffffc9000cadf9d0 of 4 bytes by task 16676 on cpu 1: [ 180.953927][ C0] do_select+0xeba/0xfc0 [ 180.958157][ C0] core_sys_select+0x4c3/0x6d0 [ 180.962907][ C0] __se_sys_pselect6+0x212/0x270 [ 180.967820][ C0] __x64_sys_pselect6+0x78/0x90 [ 180.972648][ C0] x64_sys_call+0x1c26/0x2e10 [ 180.977301][ C0] do_syscall_64+0xc9/0x1a0 [ 180.981804][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.987672][ C0] [ 180.989972][ C0] write to 0xffffc9000cadf9d0 of 4 bytes by interrupt on cpu 0: [ 180.997574][ C0] pollwake+0xc1/0x110 [ 181.001618][ C0] __wake_up+0x65/0xb0 [ 181.005934][ C0] bpf_ringbuf_notify+0x22/0x30 [ 181.010763][ C0] irq_work_run+0xe1/0x2d0 [ 181.015155][ C0] __sysvec_irq_work+0x23/0x1a0 [ 181.020004][ C0] sysvec_irq_work+0x66/0x80 [ 181.024589][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 181.029509][ C0] default_send_IPI_self+0x38/0x80 [ 181.034600][ C0] arch_irq_work_raise+0x48/0x50 [ 181.039519][ C0] __irq_work_queue_local+0x82/0x1d0 [ 181.044795][ C0] irq_work_queue+0x85/0x120 [ 181.049383][ C0] bpf_ringbuf_discard+0xcd/0xf0 [ 181.054303][ C0] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 181.059754][ C0] bpf_trace_run3+0x10e/0x1d0 [ 181.064415][ C0] kmem_cache_free+0x243/0x2e0 [ 181.069163][ C0] sctp_chunk_put+0x103/0x130 [ 181.073821][ C0] sctp_datamsg_put+0x2a6/0x310 [ 181.078649][ C0] sctp_chunk_free+0x34/0x50 [ 181.083219][ C0] __sctp_outq_teardown+0x40c/0x510 [ 181.088397][ C0] sctp_outq_free+0x15/0x20 [ 181.092873][ C0] sctp_association_free+0x15c/0x590 [ 181.098141][ C0] sctp_do_sm+0x2b1a/0x31c0 [ 181.102619][ C0] sctp_primitive_SHUTDOWN+0x75/0x90 [ 181.107924][ C0] sctp_close+0x270/0x550 [ 181.112240][ C0] inet_release+0xce/0xf0 [ 181.116548][ C0] inet6_release+0x3e/0x60 [ 181.120942][ C0] sock_close+0x68/0x150 [ 181.125183][ C0] __fput+0x2ac/0x640 [ 181.129160][ C0] fput_close_sync+0xc0/0x110 [ 181.133815][ C0] __x64_sys_close+0x55/0xe0 [ 181.138401][ C0] x64_sys_call+0x262b/0x2e10 [ 181.143055][ C0] do_syscall_64+0xc9/0x1a0 [ 181.147539][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.153412][ C0] [ 181.155723][ C0] value changed: 0x00000001 -> 0x00000000 [ 181.161414][ C0] [ 181.163713][ C0] Reported by Kernel Concurrency Sanitizer on: [ 181.169851][ C0] CPU: 0 UID: 0 PID: 16682 Comm: syz.9.5557 Tainted: G W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 181.183892][ C0] Tainted: [W]=WARN [ 181.187669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.197701][ C0] ==================================================================