last executing test programs: 4m10.25280903s ago: executing program 32 (id=434): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 4m7.485448236s ago: executing program 33 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 3m35.203925921s ago: executing program 34 (id=1445): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 3m35.012597938s ago: executing program 6 (id=1454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 3m34.933429375s ago: executing program 6 (id=1456): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@setlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20040840) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3m33.450203866s ago: executing program 6 (id=1468): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x4049880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3m33.377449733s ago: executing program 6 (id=1472): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@nojournal_checksum}]}, 0x7, 0x4ba, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 3m33.063864471s ago: executing program 6 (id=1460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 3m32.275639311s ago: executing program 6 (id=1482): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) unshare(0x6040200) 3m32.243449084s ago: executing program 35 (id=1482): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) unshare(0x6040200) 3m12.050245986s ago: executing program 7 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 3m11.883968881s ago: executing program 7 (id=2084): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 3m11.699402607s ago: executing program 7 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x402, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x8, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x404, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0x2d70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x1, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 3m11.651049371s ago: executing program 7 (id=2088): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 3m11.608358485s ago: executing program 7 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0xb, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x8, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x1}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x7, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x9, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0xfffff000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x0, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0x7ff, 0x1, 0x0, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0xfffffffe, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x0, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x8002, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x6, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xc8, 0xfffc, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x8, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x7, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x1}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m11.414497962s ago: executing program 7 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 3m11.380387155s ago: executing program 36 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 1m29.549366582s ago: executing program 0 (id=5257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x800000000000002}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054"], 0xfdef) 1m29.401308525s ago: executing program 0 (id=5262): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000580)={r2, @in={{0x2, 0x4e23, @private=0xa010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3, 0xb}, 0x8) 1m29.283835366s ago: executing program 0 (id=5264): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1m29.195649824s ago: executing program 0 (id=5265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x621c2, 0x0) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0xaf88, 0x12, 0x400, 0x322}) ftruncate(r1, 0x8800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) sendfile(r2, r1, 0x0, 0x558410e8) close_range(r0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 1m28.985115162s ago: executing program 0 (id=5279): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m28.928926958s ago: executing program 0 (id=5271): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m16.009430024s ago: executing program 8 (id=5578): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4409e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x600) 1m15.903284694s ago: executing program 8 (id=5579): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 1m15.886025985s ago: executing program 8 (id=5581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1m14.903007472s ago: executing program 8 (id=5603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m14.856114846s ago: executing program 8 (id=5605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m14.832665148s ago: executing program 8 (id=5606): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1m13.908838801s ago: executing program 37 (id=5271): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m9.334893166s ago: executing program 4 (id=5713): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 1m9.168633501s ago: executing program 4 (id=5719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m9.083534869s ago: executing program 4 (id=5720): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m8.62296778s ago: executing program 4 (id=5726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x61201, 0x1103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x5a3}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}]}}}]}, 0x4c}}, 0x4048084) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1m8.465594863s ago: executing program 4 (id=5729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m8.425691887s ago: executing program 4 (id=5731): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 59.326463225s ago: executing program 38 (id=5606): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 53.328059437s ago: executing program 39 (id=5731): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.668467344s ago: executing program 1 (id=7192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x603f) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 3.572431643s ago: executing program 1 (id=7198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x2a0) 3.521922797s ago: executing program 1 (id=7202): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRESOCT=r0], 0x0, 0x23e, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3.362356321s ago: executing program 1 (id=7206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000500)={0x3, 0x1, 0x6, 0x2, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 2.573857901s ago: executing program 2 (id=7228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 2.569111962s ago: executing program 2 (id=7230): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.809071429s ago: executing program 2 (id=7242): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x0, 0x1}, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.437356832s ago: executing program 9 (id=7248): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.389927366s ago: executing program 9 (id=7249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.371383658s ago: executing program 3 (id=7250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000500), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1.321606433s ago: executing program 9 (id=7251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) 1.053943326s ago: executing program 9 (id=7263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) 1.053351656s ago: executing program 3 (id=7253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x140) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 992.666682ms ago: executing program 5 (id=7254): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) io_uring_enter(r2, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) 940.201316ms ago: executing program 5 (id=7257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0x2) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 709.713497ms ago: executing program 3 (id=7258): prctl$PR_SET_NAME(0xf, 0x0) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x0, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x20) 654.097982ms ago: executing program 5 (id=7259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x6}, 0x8) 601.907036ms ago: executing program 2 (id=7260): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0xa85, 0xf) 584.478628ms ago: executing program 1 (id=7261): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x8, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) sigaltstack(0x0, 0x0) 563.43973ms ago: executing program 2 (id=7262): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) pipe2(0x0, 0x0) 536.072112ms ago: executing program 5 (id=7264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) io_uring_enter(r2, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) 524.569134ms ago: executing program 1 (id=7265): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 435.963901ms ago: executing program 2 (id=7266): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 435.399961ms ago: executing program 9 (id=7267): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x81}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 188.899593ms ago: executing program 5 (id=7268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000035c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e00000000000008000100", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x40010) 160.756726ms ago: executing program 3 (id=7269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 30.491297ms ago: executing program 3 (id=7270): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x12e) listen(0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) 27.994617ms ago: executing program 5 (id=7271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=7272): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): =-116 [ 220.201490][T16941] EXT4-fs (loop2): Remounting filesystem read-only [ 220.228035][T16941] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.241150][T16941] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 220.323348][T16941] EXT4-fs (loop2): 1 orphan inode deleted [ 220.329770][T16941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.576034][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.205354][T16969] netlink: 'syz.8.5318': attribute type 3 has an invalid length. [ 221.344881][T16969] netlink: 'syz.8.5318': attribute type 3 has an invalid length. [ 221.720829][T16982] loop9: detected capacity change from 0 to 512 [ 221.753193][T16982] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.795042][T16982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 221.821715][T16994] sch_fq: defrate 0 ignored. [ 221.828236][T16982] EXT4-fs (loop9): failed to initialize system zone (-117) [ 221.869950][T16982] EXT4-fs (loop9): mount failed [ 222.469700][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 222.469718][ T29] audit: type=1326 audit(1767546720.171:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 222.513001][ T29] audit: type=1326 audit(1767546720.211:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 222.536810][ T29] audit: type=1326 audit(1767546720.211:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 222.560324][ T29] audit: type=1326 audit(1767546720.211:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 222.583928][ T29] audit: type=1326 audit(1767546720.211:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 222.607601][ T29] audit: type=1326 audit(1767546720.211:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 222.631315][ T29] audit: type=1326 audit(1767546720.211:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb61ef965e7 code=0x7ffc0000 [ 222.654797][ T29] audit: type=1326 audit(1767546720.211:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61ef3b829 code=0x7ffc0000 [ 222.678217][ T29] audit: type=1326 audit(1767546720.211:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb61ef965e7 code=0x7ffc0000 [ 222.701741][ T29] audit: type=1326 audit(1767546720.211:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.9.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61ef3b829 code=0x7ffc0000 [ 222.947729][T17059] loop2: detected capacity change from 0 to 512 [ 222.993413][T17059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.038482][T17059] EXT4-fs (loop2): 1 truncate cleaned up [ 223.045267][T17059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.072666][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.088538][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5357'. [ 223.119534][T17066] IPVS: Error connecting to the multicast addr [ 223.181813][T17073] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5361'. [ 223.203211][ T3425] IPVS: starting estimator thread 0... [ 223.210487][T17079] IPVS: dh: FWM 3 0x00000003 - no destination available [ 223.217594][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 223.292655][T17080] IPVS: using max 2160 ests per chain, 108000 per kthread [ 223.335365][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5369'. [ 223.491594][T17109] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5377'. [ 223.552437][T17111] lo speed is unknown, defaulting to 1000 [ 223.756864][T17129] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5385'. [ 223.957248][T17111] lo speed is unknown, defaulting to 1000 [ 223.989390][T17140] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5390'. [ 224.236581][T17153] xt_hashlimit: max too large, truncated to 1048576 [ 224.384016][T17161] loop8: detected capacity change from 0 to 164 [ 224.395221][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5399'. [ 224.616068][T17175] bio_check_eod: 101 callbacks suppressed [ 224.616084][T17175] syz.8.5398: attempt to access beyond end of device [ 224.616084][T17175] loop8: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 224.636374][T17175] syz.8.5398: attempt to access beyond end of device [ 224.636374][T17175] loop8: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 224.943257][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5415'. [ 225.190124][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 225.214581][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 225.828856][T17251] bridge: RTM_NEWNEIGH with invalid ether address [ 225.996700][T17255] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.037679][T17257] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17257 comm=syz.8.5441 [ 226.098442][T17255] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.197285][T17255] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.281460][T17255] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.376439][ T4431] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.396429][ T4431] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.421238][ T4431] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.444369][ T4431] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.463500][T17266] netlink: 'syz.9.5445': attribute type 12 has an invalid length. [ 227.033931][T17293] lo speed is unknown, defaulting to 1000 [ 227.407221][T17293] lo speed is unknown, defaulting to 1000 [ 227.673859][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 227.673874][ T29] audit: type=1400 audit(1767546725.381:7258): avc: denied { mount } for pid=17310 comm="+}[@" name="/" dev="rpc_pipefs" ino=54646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 227.797877][T17314] lo speed is unknown, defaulting to 1000 [ 228.127271][T17314] lo speed is unknown, defaulting to 1000 [ 228.163330][T17334] __nla_validate_parse: 2 callbacks suppressed [ 228.163348][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5474'. [ 228.305182][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5480'. [ 228.710353][ T29] audit: type=1326 audit(1767546726.411:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.769166][ T29] audit: type=1326 audit(1767546726.411:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.793290][ T29] audit: type=1326 audit(1767546726.411:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.816914][ T29] audit: type=1326 audit(1767546726.411:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.841333][ T29] audit: type=1326 audit(1767546726.411:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.865764][ T29] audit: type=1326 audit(1767546726.411:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.889565][ T29] audit: type=1326 audit(1767546726.411:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.913980][ T29] audit: type=1326 audit(1767546726.411:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 228.937661][ T29] audit: type=1326 audit(1767546726.411:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 229.377631][T17442] SELinux: failed to load policy [ 229.525749][T17463] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.535777][T17463] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.615830][T17463] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.625699][T17463] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.693134][T17474] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5531'. [ 229.705512][T17463] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.715512][T17463] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.795089][T17463] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.804987][T17463] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.881781][ T4407] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.890047][ T4407] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.942663][ T4407] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.950984][ T4407] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.982984][ T4407] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.991248][ T4407] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.032634][ T4407] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.040951][ T4407] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.312353][T17507] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5544'. [ 230.743693][T17544] netlink: 'syz.9.5561': attribute type 83 has an invalid length. [ 230.960482][T17564] loop8: detected capacity change from 0 to 512 [ 230.983404][T17564] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 231.010447][T17564] EXT4-fs (loop8): 1 truncate cleaned up [ 231.033057][T17564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.137034][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5573'. [ 231.239786][ T7263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.278705][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5575'. [ 231.321524][T17581] bond1: entered promiscuous mode [ 231.341393][T17581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.500121][T17461] loop2: detected capacity change from 0 to 512 [ 231.507827][T17461] EXT4-fs: Ignoring removed i_version option [ 231.534040][T17461] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.542817][T17461] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.5529: EA inode hash validation failed [ 231.562884][T17461] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 231.600783][T17461] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.5529: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 231.651849][T17461] EXT4-fs (loop2): Remounting filesystem read-only [ 231.658525][T17461] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.5529: ea_inode dec ref err=-117 [ 231.679197][T17461] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 231.690609][T17461] EXT4-fs (loop2): 1 orphan inode deleted [ 231.728822][T17461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 231.822791][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5587'. [ 231.948732][T17612] netlink: 'syz.9.5589': attribute type 30 has an invalid length. [ 231.987724][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.911327][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 232.911396][ T29] audit: type=1326 audit(1767546730.611:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 232.962905][ T29] audit: type=1326 audit(1767546730.651:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 232.987202][ T29] audit: type=1326 audit(1767546730.651:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.010822][ T29] audit: type=1326 audit(1767546730.651:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.035170][ T29] audit: type=1326 audit(1767546730.651:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.058782][ T29] audit: type=1326 audit(1767546730.651:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.082492][ T29] audit: type=1326 audit(1767546730.651:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.106865][ T29] audit: type=1326 audit(1767546730.651:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.130573][ T29] audit: type=1326 audit(1767546730.651:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.154778][ T29] audit: type=1326 audit(1767546730.651:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17661 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 233.304816][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5618'. [ 233.652061][T17707] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.662064][T17707] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.756375][T17707] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.766398][T17707] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.801668][T17697] lo speed is unknown, defaulting to 1000 [ 233.825037][T17707] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.834895][T17707] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.895470][T17707] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.906099][T17707] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.003276][ T4449] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.011527][ T4449] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.063147][ T4420] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.071410][ T4420] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.094308][ T4420] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.102604][ T4420] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.132654][ T4420] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.140960][ T4420] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.194143][T17697] lo speed is unknown, defaulting to 1000 [ 234.384516][T17697] chnl_net:caif_netlink_parms(): no params data found [ 234.530065][T17697] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.537545][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.562770][T17697] bridge_slave_0: entered allmulticast mode [ 234.569612][T17697] bridge_slave_0: entered promiscuous mode [ 234.581981][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5643'. [ 234.585297][T17697] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.598145][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.605556][T17697] bridge_slave_1: entered allmulticast mode [ 234.612548][T17697] bridge_slave_1: entered promiscuous mode [ 234.651479][T17697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.683048][T17697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.713116][T17697] team0: Port device team_slave_0 added [ 234.727697][T17697] team0: Port device team_slave_1 added [ 234.802868][T17697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.810401][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.836354][T17697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.870290][T17697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.877378][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.903382][T17697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.940023][T17697] hsr_slave_0: entered promiscuous mode [ 234.972962][T17697] hsr_slave_1: entered promiscuous mode [ 234.979263][T17697] debugfs: 'hsr0' already exists in 'hsr' [ 234.985073][T17697] Cannot create hsr debugfs directory [ 235.153162][T17782] loop2: detected capacity change from 0 to 512 [ 235.163770][T17780] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 235.191039][T17782] EXT4-fs (loop2): too many log groups per flexible block group [ 235.214461][T17782] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 235.221361][T17782] EXT4-fs (loop2): mount failed [ 235.236671][T17788] vlan3: entered allmulticast mode [ 235.241961][T17788] bridge_slave_0: entered allmulticast mode [ 235.425105][T17697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.444957][T17697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.457804][T17697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.478173][T17697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.577851][T17697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.606920][T17697] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.625904][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.633108][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.676575][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.683794][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.845441][T17697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.871025][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5673'. [ 235.897820][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5673'. [ 236.103680][T17697] veth0_vlan: entered promiscuous mode [ 236.122582][T17697] veth1_vlan: entered promiscuous mode [ 236.161113][T17697] veth0_macvtap: entered promiscuous mode [ 236.171923][T17697] veth1_macvtap: entered promiscuous mode [ 236.190798][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5679'. [ 236.220256][T17697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.231531][T17697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.244445][ T4449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.259904][ T4449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.294611][ T4449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.309147][ T4449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.591090][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5695'. [ 236.600201][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5695'. [ 236.624276][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5695'. [ 236.634098][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5695'. [ 236.903410][T17907] netlink: 'syz.5.5702': attribute type 1 has an invalid length. [ 237.013414][T17907] bond0: entered promiscuous mode [ 237.018671][T17907] bond0: entered allmulticast mode [ 237.079195][T17907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.117603][T17909] macvlan2: entered promiscuous mode [ 237.123334][T17909] macvlan2: entered allmulticast mode [ 237.271500][T17909] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.615778][T17890] Set syz1 is full, maxelem 65536 reached [ 238.721328][T17963] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5724'. [ 238.739034][T17963] IPVS: Error connecting to the multicast addr [ 238.906635][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5726'. [ 239.053257][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 239.053311][ T29] audit: type=1326 audit(1767546736.761:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.109414][ T29] audit: type=1326 audit(1767546736.761:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.133786][ T29] audit: type=1326 audit(1767546736.791:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.150969][T17980] loop2: detected capacity change from 0 to 2048 [ 239.157408][ T29] audit: type=1326 audit(1767546736.791:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.188006][ T29] audit: type=1326 audit(1767546736.791:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.212186][ T29] audit: type=1326 audit(1767546736.791:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.236435][ T29] audit: type=1326 audit(1767546736.791:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.259970][ T29] audit: type=1326 audit(1767546736.791:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.284186][ T29] audit: type=1326 audit(1767546736.801:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.307865][ T29] audit: type=1326 audit(1767546736.801:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17977 comm="syz.9.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 239.346894][T17980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.360453][T17980] ext4 filesystem being mounted at /1085/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.635531][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.659744][T17990] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 239.669932][T17990] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.739946][T17992] xt_hashlimit: max too large, truncated to 1048576 [ 239.774512][T17990] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 239.784536][T17990] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.865071][T17990] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 239.875090][T17990] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.912987][T18004] loop2: detected capacity change from 0 to 164 [ 239.944717][T17990] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 239.954690][T17990] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 240.033557][ T4430] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 240.041893][ T4430] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.063040][ T4430] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 240.071367][ T4430] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.110280][ T4430] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 240.118645][ T4430] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.143645][ T4430] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 240.151968][ T4430] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.235247][T18004] syz.2.5741: attempt to access beyond end of device [ 240.235247][T18004] loop2: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 240.249395][T18004] syz.2.5741: attempt to access beyond end of device [ 240.249395][T18004] loop2: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 241.319523][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5754'. [ 241.578948][T18040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5756'. [ 242.826952][T18085] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5778'. [ 242.903982][T18091] netlink: 'syz.5.5780': attribute type 30 has an invalid length. [ 242.974515][T18099] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5782'. [ 242.983548][T18099] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5782'. [ 243.008282][T18099] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5782'. [ 243.017419][T18099] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5782'. [ 243.261027][T18107] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.301993][T18108] netlink: 'syz.2.5795': attribute type 30 has an invalid length. [ 243.353542][T18107] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.425988][T18107] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.484655][T18107] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.564628][ T4449] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.580479][ T4449] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.601415][ T4449] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.619136][ T4449] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.183002][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5796'. [ 244.192000][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5796'. [ 244.234873][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5796'. [ 244.243987][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5796'. [ 244.378566][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5810'. [ 244.459753][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5810'. [ 244.752812][T18162] vlan2: entered allmulticast mode [ 246.408610][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 246.408629][ T29] audit: type=1400 audit(1767546744.111:7468): avc: denied { connect } for pid=18221 comm="syz.5.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.493022][ T29] audit: type=1400 audit(1767546744.141:7469): avc: denied { setopt } for pid=18221 comm="syz.5.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.513365][ T29] audit: type=1326 audit(1767546744.151:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.537039][ T29] audit: type=1326 audit(1767546744.151:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.561624][ T29] audit: type=1326 audit(1767546744.151:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.586133][ T29] audit: type=1326 audit(1767546744.151:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.609762][ T29] audit: type=1326 audit(1767546744.151:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.634020][ T29] audit: type=1326 audit(1767546744.151:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.657585][ T29] audit: type=1326 audit(1767546744.151:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 246.681871][ T29] audit: type=1326 audit(1767546744.151:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.2.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 248.115101][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5847'. [ 248.153233][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5847'. [ 248.310047][T18256] netlink: 212892 bytes leftover after parsing attributes in process `syz.5.5846'. [ 248.357474][ T4439] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.367461][ T4439] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.421137][T18239] lo speed is unknown, defaulting to 1000 [ 248.429122][ T4439] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.438953][ T4439] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.525185][T18271] lo speed is unknown, defaulting to 1000 [ 248.535169][ T4439] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.545029][ T4439] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.634938][ T4439] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.644881][ T4439] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.759861][ T4439] batadv1: left allmulticast mode [ 248.765103][ T4439] batadv1: left promiscuous mode [ 248.770230][ T4439] bridge0: port 1(batadv1) entered disabled state [ 248.926811][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.936432][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.946680][ T4439] bond0 (unregistering): Released all slaves [ 248.957792][ T4439] bond1 (unregistering): Released all slaves [ 248.967233][T18239] lo speed is unknown, defaulting to 1000 [ 248.998346][ T4439] tipc: Left network mode [ 249.043626][T18271] lo speed is unknown, defaulting to 1000 [ 249.126788][T18239] chnl_net:caif_netlink_parms(): no params data found [ 249.196542][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.204103][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.212237][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.219756][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.232364][ T4439] veth1_macvtap: left promiscuous mode [ 249.238017][ T4439] veth0_macvtap: left promiscuous mode [ 249.253474][ T4439] veth1_vlan: left promiscuous mode [ 249.403478][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 249.424219][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 249.511303][T18239] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.518568][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.537099][T18239] bridge_slave_0: entered allmulticast mode [ 249.546746][T18239] bridge_slave_0: entered promiscuous mode [ 249.560021][T18239] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.567415][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.584908][T18239] bridge_slave_1: entered allmulticast mode [ 249.591915][T18239] bridge_slave_1: entered promiscuous mode [ 249.598458][T18293] lo speed is unknown, defaulting to 1000 [ 249.622336][T18239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.634267][T18239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.665502][T18239] team0: Port device team_slave_0 added [ 249.687523][T18239] team0: Port device team_slave_1 added [ 249.720616][T18239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.727659][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.754414][T18239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.773538][T18239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.780705][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.807442][T18239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.858647][T18239] hsr_slave_0: entered promiscuous mode [ 249.865121][T18239] hsr_slave_1: entered promiscuous mode [ 249.871198][T18239] debugfs: 'hsr0' already exists in 'hsr' [ 249.876996][T18239] Cannot create hsr debugfs directory [ 249.885677][ T4439] IPVS: stop unused estimator thread 0... [ 249.939445][T18293] lo speed is unknown, defaulting to 1000 [ 250.261065][T18239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.286660][T18239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.305033][T18239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.324899][T18239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.377630][T18239] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.384789][T18239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.436444][T18239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.465774][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.494243][T18239] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.526737][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.533986][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.556680][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.563808][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.736244][T18239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.908291][T18239] veth0_vlan: entered promiscuous mode [ 250.926779][T18239] veth1_vlan: entered promiscuous mode [ 250.968347][T18239] veth0_macvtap: entered promiscuous mode [ 250.980335][T18239] veth1_macvtap: entered promiscuous mode [ 250.994276][T18239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.007500][T18239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.025527][ T4443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.059371][ T4443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.086330][ T4443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.103200][ T4443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.187266][T18388] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.224987][T18388] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.276104][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5893'. [ 251.286372][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5893'. [ 251.301215][T18388] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.354602][T18388] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.424874][ T4439] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.437110][ T4439] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.455096][ T4439] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.471010][ T4439] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.522338][T18404] tipc: New replicast peer: 255.255.255.255 [ 251.528560][T18404] tipc: Enabled bearer , priority 10 [ 251.570647][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 251.570667][ T29] audit: type=1326 audit(1767546749.271:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18407 comm="syz.5.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 251.604542][ T29] audit: type=1326 audit(1767546749.311:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18407 comm="syz.5.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 251.678757][ T29] audit: type=1326 audit(1767546749.331:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18407 comm="syz.5.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 251.702511][ T29] audit: type=1326 audit(1767546749.331:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18407 comm="syz.5.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 252.003906][T18438] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5912'. [ 252.039082][T18438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5912'. [ 252.140143][ T29] audit: type=1326 audit(1767546749.841:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.9.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 252.164027][ T29] audit: type=1326 audit(1767546749.841:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.9.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 252.187657][ T29] audit: type=1326 audit(1767546749.841:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.9.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 252.244392][ T29] audit: type=1326 audit(1767546749.921:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.9.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 252.267961][ T29] audit: type=1326 audit(1767546749.921:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.9.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 252.291610][ T29] audit: type=1326 audit(1767546749.921:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.9.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 252.642645][ T10] tipc: Node number set to 2886997007 [ 254.307298][ T4439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.393523][ T4439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.446038][T18482] lo speed is unknown, defaulting to 1000 [ 254.519608][ T4439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.617071][ T4439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.754814][ T4439] bridge_slave_1: left allmulticast mode [ 254.760656][ T4439] bridge_slave_1: left promiscuous mode [ 254.766518][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.815191][ T4439] bridge_slave_0: left allmulticast mode [ 254.820937][ T4439] bridge_slave_0: left promiscuous mode [ 254.826732][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.040973][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.064115][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.075487][ T4439] bond0 (unregistering): Released all slaves [ 255.085071][T18482] lo speed is unknown, defaulting to 1000 [ 255.320406][T18562] tipc: Started in network mode [ 255.325518][T18562] tipc: Node identity 821203dccdcb, cluster identity 4711 [ 255.332838][T18562] tipc: Enabled bearer , priority 0 [ 255.348910][ T4439] hsr_slave_0: left promiscuous mode [ 255.356184][ T4439] hsr_slave_1: left promiscuous mode [ 255.383839][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.391427][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.445145][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.452859][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.473945][ T4439] veth1_macvtap: left promiscuous mode [ 255.480674][ T4439] veth0_macvtap: left promiscuous mode [ 255.491680][ T4439] veth1_vlan: left promiscuous mode [ 255.504072][ T4439] veth0_vlan: left promiscuous mode [ 255.706423][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 255.833363][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 256.194954][T18562] tipc: Disabling bearer [ 256.209128][T18482] chnl_net:caif_netlink_parms(): no params data found [ 256.285791][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.293672][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.329286][T18482] bridge_slave_0: entered allmulticast mode [ 256.352308][T18482] bridge_slave_0: entered promiscuous mode [ 256.370786][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.378752][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.393459][T18621] loop3: detected capacity change from 0 to 512 [ 256.420065][T18482] bridge_slave_1: entered allmulticast mode [ 256.439754][T18482] bridge_slave_1: entered promiscuous mode [ 256.497051][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.514438][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.544113][T18626] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.5983'. [ 256.553342][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5983'. [ 256.587042][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 256.587059][ T29] audit: type=1326 audit(1767546754.291:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.633349][ T29] audit: type=1326 audit(1767546754.321:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.657780][ T29] audit: type=1326 audit(1767546754.321:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.681401][ T29] audit: type=1326 audit(1767546754.321:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.705827][ T29] audit: type=1326 audit(1767546754.321:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.729545][ T29] audit: type=1326 audit(1767546754.321:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.753791][ T29] audit: type=1326 audit(1767546754.321:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.777391][ T29] audit: type=1326 audit(1767546754.321:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.801645][ T29] audit: type=1326 audit(1767546754.321:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.828692][T18482] team0: Port device team_slave_0 added [ 256.835858][T18482] team0: Port device team_slave_1 added [ 256.863673][ T29] audit: type=1326 audit(1767546754.341:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18624 comm="syz.3.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 256.889013][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.896228][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.922919][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.934662][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.941640][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.968348][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.003869][T18482] hsr_slave_0: entered promiscuous mode [ 257.020330][T18482] hsr_slave_1: entered promiscuous mode [ 257.032812][T18482] debugfs: 'hsr0' already exists in 'hsr' [ 257.038674][T18482] Cannot create hsr debugfs directory [ 257.372897][T18482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.382288][T18482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.392260][T18482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.401821][T18482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.472932][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.491868][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.504297][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.511503][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.536842][T18482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.547354][T18482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.560928][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.568054][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.644794][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.733697][T18482] veth0_vlan: entered promiscuous mode [ 257.742509][T18482] veth1_vlan: entered promiscuous mode [ 257.761516][T18482] veth0_macvtap: entered promiscuous mode [ 257.769855][T18482] veth1_macvtap: entered promiscuous mode [ 257.782646][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.795590][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.807067][ T4409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.816135][ T4409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.825655][ T4409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.835714][ T4409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.995810][T18694] .`: (slave bond_slave_0): Releasing backup interface [ 258.005272][T18694] .`: (slave bond_slave_1): Releasing backup interface [ 258.012728][T18696] loop3: detected capacity change from 0 to 128 [ 258.019853][T18694] team0: Port device team_slave_0 removed [ 258.024479][T18696] vfat: Unknown parameter 's' [ 258.030821][T18694] team0: Port device team_slave_1 removed [ 258.037707][T18694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.047209][T18694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.055018][T18697] netlink: 'syz.5.6004': attribute type 10 has an invalid length. [ 258.055660][T18694] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 258.070253][T18694] batman_adv: batadv0: Removing interface: veth1_vlan [ 258.084550][T18697] 8021q: adding VLAN 0 to HW filter on device .` [ 258.093158][T18697] team0: Port device .` added [ 258.119267][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6004'. [ 258.134778][T18694] team0 (unregistering): Port device .` removed [ 258.467831][T18740] netlink: 'syz.5.6024': attribute type 1 has an invalid length. [ 258.483988][T18740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.497651][T18740] bond3: entered promiscuous mode [ 258.502816][T18740] bond3: entered allmulticast mode [ 258.868415][T18783] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6044'. [ 259.099108][T18799] syz_tun: refused to change device tx_queue_len [ 259.159040][T18801] wireguard0: entered promiscuous mode [ 259.164618][T18801] wireguard0: entered allmulticast mode [ 259.302755][T18809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6056'. [ 259.417196][T18825] loop1: detected capacity change from 0 to 256 [ 259.528495][T18844] netlink: 'syz.1.6068': attribute type 13 has an invalid length. [ 259.622383][T18851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6070'. [ 259.776517][T18855] team_slave_1: Caught tx_queue_len zero misconfig [ 259.959284][T18866] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 259.979355][T18866] SELinux: failed to load policy [ 261.071227][T18911] wireguard0: entered promiscuous mode [ 261.076852][T18911] wireguard0: entered allmulticast mode [ 261.285967][T18926] pimreg: entered allmulticast mode [ 261.304956][T18926] pimreg: left allmulticast mode [ 261.720591][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 261.720609][ T29] audit: type=1326 audit(1767546759.421:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 261.758169][ T29] audit: type=1326 audit(1767546759.421:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 261.781765][ T29] audit: type=1326 audit(1767546759.451:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 261.819014][ T29] audit: type=1326 audit(1767546759.521:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 261.833530][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6123'. [ 261.842592][ T29] audit: type=1326 audit(1767546759.521:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbd8b02005 code=0x7ffc0000 [ 261.855840][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6123'. [ 261.888033][ T29] audit: type=1326 audit(1767546759.591:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 261.969185][ T29] audit: type=1326 audit(1767546759.671:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18972 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 262.042785][ T29] audit: type=1326 audit(1767546759.711:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbd8a6b829 code=0x7ffc0000 [ 262.066495][ T29] audit: type=1326 audit(1767546759.711:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.5.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 262.215703][T18990] netlink: 'syz.1.6130': attribute type 10 has an invalid length. [ 262.226137][T18986] bridge_slave_0: left allmulticast mode [ 262.231835][T18986] bridge_slave_0: left promiscuous mode [ 262.237680][T18986] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.266939][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6130'. [ 262.284992][T18986] bridge_slave_1: left allmulticast mode [ 262.290716][T18986] bridge_slave_1: left promiscuous mode [ 262.296827][T18986] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.322173][ T29] audit: type=1326 audit(1767546760.021:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18998 comm="syz.5.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 262.359223][T18986] bond0: (slave bond_slave_0): Releasing backup interface [ 262.400060][T18986] bond0: (slave bond_slave_1): Releasing backup interface [ 262.436742][T18986] team0: Port device team_slave_0 removed [ 262.504950][T18986] team0: Port device team_slave_1 removed [ 262.517832][T18986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.525586][T18986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.620073][T18986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.628106][T18986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.660117][T18986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.745700][T18989] wireguard0: entered promiscuous mode [ 262.751240][T18989] wireguard0: entered allmulticast mode [ 262.802521][T18990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.844039][T18990] team0: Port device bond0 added [ 262.876394][T18994] team0 (unregistering): Port device bond0 removed [ 262.918401][ T4443] smc: removing ib device syz1 [ 262.924178][ T10] syz1: Port: 1 Link DOWN [ 263.035985][T19025] loop1: detected capacity change from 0 to 164 [ 263.475244][T19052] ref_ctr_offset mismatch. inode: 0x119c offset: 0x4 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 263.512262][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6158'. [ 263.529761][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 263.579611][T19056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6158'. [ 263.717045][T19075] wireguard0: entered promiscuous mode [ 263.722775][T19075] wireguard0: entered allmulticast mode [ 263.784960][T19080] loop3: detected capacity change from 0 to 512 [ 263.813709][T19080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.828343][T19080] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.840085][T19080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.091333][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'. [ 264.202395][T19112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6181'. [ 264.407672][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'. [ 264.439254][T19127] wireguard0: entered promiscuous mode [ 264.444981][T19127] wireguard0: entered allmulticast mode [ 264.491225][T19133] loop1: detected capacity change from 0 to 512 [ 264.506727][T19133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.519597][T19133] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.530556][T19133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.805956][T19143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6191'. [ 264.828314][T19143] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 264.839949][T19143] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 264.951618][T19159] netlink: 'syz.1.6198': attribute type 3 has an invalid length. [ 264.959563][T19159] netlink: 'syz.1.6198': attribute type 1 has an invalid length. [ 265.214321][T19180] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 265.226371][T19180] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 265.355743][T19188] bond0: (slave bond_slave_0): Releasing backup interface [ 265.366823][T19188] bond0: (slave bond_slave_1): Releasing backup interface [ 265.442241][T19191] netlink: 'syz.9.6210': attribute type 10 has an invalid length. [ 265.490662][T19195] lo speed is unknown, defaulting to 1000 [ 265.613180][T19195] lo speed is unknown, defaulting to 1000 [ 265.637382][T19201] netem: change failed [ 265.920016][T19210] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.005695][T19219] lo speed is unknown, defaulting to 1000 [ 266.015535][T19221] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 266.051046][T19224] loop1: detected capacity change from 0 to 512 [ 266.073603][T19224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.103328][T19224] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 266.130214][T19224] EXT4-fs (loop1): 1 truncate cleaned up [ 266.179083][T19219] lo speed is unknown, defaulting to 1000 [ 266.195592][T19224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.289967][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.356167][T19239] xt_hashlimit: max too large, truncated to 1048576 [ 266.651987][T19265] lo speed is unknown, defaulting to 1000 [ 266.688359][T19263] lo speed is unknown, defaulting to 1000 [ 266.697081][T19269] loop1: detected capacity change from 0 to 512 [ 266.714241][T19269] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 266.777136][T19269] EXT4-fs (loop1): orphan cleanup on readonly fs [ 266.783996][T19269] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.6241: Block bitmap for bg 0 marked uninitialized [ 266.850735][T19269] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 266.885582][T19269] EXT4-fs (loop1): 1 orphan inode deleted [ 266.904733][T19269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 266.907643][T19265] lo speed is unknown, defaulting to 1000 [ 266.983398][T19269] EXT4-fs: Ignoring removed orlov option [ 266.991367][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 266.991386][ T29] audit: type=1400 audit(1767546764.681:8186): avc: denied { remount } for pid=19268 comm="syz.1.6241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 267.024326][T19269] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 267.047537][T19269] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 267.070320][T19263] lo speed is unknown, defaulting to 1000 [ 267.077724][T19269] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 267.107343][T19265] __nla_validate_parse: 11 callbacks suppressed [ 267.107359][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6240'. [ 267.122634][T19265] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6240'. [ 267.134766][T19265] geneve3: entered promiscuous mode [ 267.140210][T19265] geneve3: entered allmulticast mode [ 267.152946][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.225636][ T29] audit: type=1326 audit(1767546764.931:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.338129][ T29] audit: type=1326 audit(1767546764.961:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.362612][ T29] audit: type=1326 audit(1767546764.961:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.371881][T19289] lo speed is unknown, defaulting to 1000 [ 267.387935][ T29] audit: type=1326 audit(1767546764.961:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.416074][ T29] audit: type=1326 audit(1767546764.961:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.439653][ T29] audit: type=1326 audit(1767546764.961:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.463833][ T29] audit: type=1326 audit(1767546764.961:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.487444][ T29] audit: type=1326 audit(1767546764.961:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.511639][ T29] audit: type=1326 audit(1767546764.961:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.1.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879216f749 code=0x7ffc0000 [ 267.608308][T19301] loop3: detected capacity change from 0 to 256 [ 267.654260][T19301] syz.3.6252: attempt to access beyond end of device [ 267.654260][T19301] loop3: rw=8388608, sector=272, nr_sectors = 4 limit=256 [ 267.689433][T19301] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 267.697660][T19301] FAT-fs (loop3): Filesystem has been set read-only [ 267.726514][T19301] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 267.857250][T19289] lo speed is unknown, defaulting to 1000 [ 268.214514][T19332] netlink: 'syz.5.6263': attribute type 21 has an invalid length. [ 268.222424][T19332] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6263'. [ 268.241210][T19332] netlink: 'syz.5.6263': attribute type 5 has an invalid length. [ 268.249163][T19332] netlink: 'syz.5.6263': attribute type 6 has an invalid length. [ 268.256953][T19332] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6263'. [ 268.420384][T19352] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6271'. [ 268.459766][T19355] lo speed is unknown, defaulting to 1000 [ 268.466080][T19357] lo speed is unknown, defaulting to 1000 [ 268.610716][T19357] lo speed is unknown, defaulting to 1000 [ 268.804239][T19355] lo speed is unknown, defaulting to 1000 [ 268.818568][T19370] loop3: detected capacity change from 0 to 512 [ 268.878219][T19370] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 268.912803][T19370] EXT4-fs (loop3): orphan cleanup on readonly fs [ 268.943662][T19370] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6278: Block bitmap for bg 0 marked uninitialized [ 268.959887][T19370] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 268.969129][T19370] EXT4-fs (loop3): 1 orphan inode deleted [ 268.976289][T19370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.004046][T19370] EXT4-fs: Ignoring removed orlov option [ 269.009938][T19370] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 269.020030][T19370] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 269.030254][T19370] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 269.051792][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.064685][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6290'. [ 269.074662][T19377] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6290'. [ 269.200756][T19384] loop1: detected capacity change from 0 to 512 [ 269.235169][T19384] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 269.274927][T19384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 269.288683][T19384] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.6281: Block bitmap for bg 0 marked uninitialized [ 269.303551][T19384] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 269.314623][T19384] EXT4-fs (loop1): 1 orphan inode deleted [ 269.323068][T19384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.349198][T19384] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 269.360879][T19384] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 269.408004][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6289'. [ 269.434763][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.476897][T19407] ref_ctr increment failed for inode: 0x1a40 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813a835100 [ 269.500626][T19406] uprobe: syz.5.6293:19406 failed to unregister, leaking uprobe [ 269.727452][T19430] netem: change failed [ 269.779675][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6304'. [ 270.181415][T19464] loop3: detected capacity change from 0 to 512 [ 270.188327][T19464] EXT4-fs: Ignoring removed nobh option [ 270.194140][T19464] EXT4-fs: Ignoring removed orlov option [ 270.200170][T19464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.214999][T19464] EXT4-fs (loop3): 1 truncate cleaned up [ 270.221174][T19464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.243563][T19464] netlink: 'syz.3.6316': attribute type 13 has an invalid length. [ 270.258430][T19464] gretap0: refused to change device tx_queue_len [ 270.266105][T19464] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.319196][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.457526][T19475] lo speed is unknown, defaulting to 1000 [ 270.467857][T19474] : renamed from veth0_to_bond (while UP) [ 270.581493][T19475] lo speed is unknown, defaulting to 1000 [ 270.655388][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6325'. [ 270.752750][T19494] loop1: detected capacity change from 0 to 128 [ 270.774115][T19494] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.803740][T19494] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.861870][ T4439] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.979724][T19513] lo speed is unknown, defaulting to 1000 [ 271.289391][T19531] geneve2: entered promiscuous mode [ 271.295090][T19531] geneve2: entered allmulticast mode [ 271.367270][T19513] lo speed is unknown, defaulting to 1000 [ 271.993323][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 271.993403][ T29] audit: type=1326 audit(1767546769.701:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb61ef965e7 code=0x7ffc0000 [ 272.023968][ T29] audit: type=1326 audit(1767546769.701:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61ef3b829 code=0x7ffc0000 [ 272.047683][ T29] audit: type=1326 audit(1767546769.701:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 272.065335][T19575] team1: entered promiscuous mode [ 272.076431][T19575] team1: entered allmulticast mode [ 272.082868][T19575] 8021q: adding VLAN 0 to HW filter on device team1 [ 272.100613][ T29] audit: type=1326 audit(1767546769.701:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb61ef965e7 code=0x7ffc0000 [ 272.124123][ T29] audit: type=1326 audit(1767546769.701:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61ef3b829 code=0x7ffc0000 [ 272.147613][ T29] audit: type=1326 audit(1767546769.701:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 272.171188][ T29] audit: type=1326 audit(1767546769.701:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb61ef965e7 code=0x7ffc0000 [ 272.194684][ T29] audit: type=1326 audit(1767546769.701:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb61ef3b829 code=0x7ffc0000 [ 272.218181][ T29] audit: type=1326 audit(1767546769.701:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 272.241751][ T29] audit: type=1326 audit(1767546769.731:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb61ef965e7 code=0x7ffc0000 [ 272.282411][T19580] __nla_validate_parse: 5 callbacks suppressed [ 272.282426][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6364'. [ 272.348063][T19586] loop1: detected capacity change from 0 to 512 [ 272.354988][T19586] EXT4-fs: Ignoring removed nobh option [ 272.360662][T19586] EXT4-fs: Ignoring removed orlov option [ 272.367063][T19586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.384310][T19586] EXT4-fs (loop1): 1 truncate cleaned up [ 272.390748][T19586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.410363][T19586] netlink: 'syz.1.6367': attribute type 13 has an invalid length. [ 272.423279][T19586] gretap0: refused to change device tx_queue_len [ 272.430318][T19586] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.514973][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.527740][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6370'. [ 272.566497][T19601] loop1: detected capacity change from 0 to 512 [ 272.596247][T19601] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 272.612707][ T3412] page_pool_release_retry() stalled pool shutdown: id 155, 1 inflight 60 sec [ 272.640193][T19601] EXT4-fs (loop1): mount failed [ 272.906886][ T3507] lo speed is unknown, defaulting to 1000 [ 272.912738][ T3507] syz2: Port: 1 Link DOWN [ 272.915717][T19629] netlink: 'syz.2.6383': attribute type 13 has an invalid length. [ 272.932308][T19629] gretap0: refused to change device tx_queue_len [ 272.939873][T19629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.955647][ T3412] lo speed is unknown, defaulting to 1000 [ 272.961415][ T3412] syz2: Port: 1 Link ACTIVE [ 273.239329][T19650] lo speed is unknown, defaulting to 1000 [ 273.305746][T19650] lo speed is unknown, defaulting to 1000 [ 273.407540][T19659] lo speed is unknown, defaulting to 1000 [ 273.506205][T19659] lo speed is unknown, defaulting to 1000 [ 273.638772][T19671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19671 comm=syz.3.6399 [ 273.706333][ T3426] IPVS: starting estimator thread 0... [ 273.802632][T19679] IPVS: using max 2208 ests per chain, 110400 per kthread [ 274.049392][T19697] loop1: detected capacity change from 0 to 128 [ 274.824704][T19738] lo speed is unknown, defaulting to 1000 [ 275.024999][T19738] lo speed is unknown, defaulting to 1000 [ 275.654798][T19784] lo speed is unknown, defaulting to 1000 [ 275.774382][T19784] lo speed is unknown, defaulting to 1000 [ 275.840863][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6451'. [ 275.851986][T19793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.942893][T19802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6452'. [ 276.042182][T19793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.168765][T19793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.268729][T19793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.345103][ T4469] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.367627][ T4469] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.413610][ T4469] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.448319][ T4469] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.486997][T19837] bridge0: entered promiscuous mode [ 276.502169][T19837] bridge0: port 1(macvtap1) entered blocking state [ 276.509525][T19837] bridge0: port 1(macvtap1) entered disabled state [ 276.538776][T19837] macvtap1: entered allmulticast mode [ 276.544454][T19837] bridge0: entered allmulticast mode [ 276.557637][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6471'. [ 276.563916][T19837] macvtap1: left allmulticast mode [ 276.570039][T19847] netlink: 312 bytes leftover after parsing attributes in process `syz.9.6471'. [ 276.571729][T19837] bridge0: left allmulticast mode [ 276.580972][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6471'. [ 276.621878][T19837] bridge0: left promiscuous mode [ 276.753834][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6479'. [ 277.120400][T19882] loop3: detected capacity change from 0 to 8192 [ 277.390361][T19889] loop3: detected capacity change from 0 to 4096 [ 277.418257][T19889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.438267][T19893] loop1: detected capacity change from 0 to 1024 [ 277.484962][T19893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.566762][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 277.566850][ T29] audit: type=1400 audit(1767546775.271:8627): avc: denied { read } for pid=19892 comm="syz.1.6491" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 277.603813][T19902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6493'. [ 277.655205][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.706014][T19902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6493'. [ 277.873807][T19910] Falling back ldisc for ptm0. [ 278.021586][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.234097][ T29] audit: type=1400 audit(1767546776.941:8628): avc: denied { read } for pid=19962 comm="syz.5.6519" name="file0" dev="tmpfs" ino=6944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.436109][ T29] audit: type=1326 audit(1767546777.141:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.492663][ T29] audit: type=1326 audit(1767546777.141:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.516370][ T29] audit: type=1326 audit(1767546777.171:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.539895][ T29] audit: type=1326 audit(1767546777.171:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.563414][ T29] audit: type=1326 audit(1767546777.171:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.587080][ T29] audit: type=1326 audit(1767546777.171:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.610623][ T29] audit: type=1326 audit(1767546777.171:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.634131][ T29] audit: type=1326 audit(1767546777.171:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.5.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 279.803811][T19984] netlink: 'syz.1.6526': attribute type 3 has an invalid length. [ 280.108592][T20005] siw: device registration error -23 [ 280.184816][T20011] netlink: 304 bytes leftover after parsing attributes in process `syz.2.6540'. [ 280.360153][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6548'. [ 280.442025][T20036] loop1: detected capacity change from 0 to 256 [ 280.458923][T20036] syz.1.6552: attempt to access beyond end of device [ 280.458923][T20036] loop1: rw=8388608, sector=272, nr_sectors = 4 limit=256 [ 280.473293][T20036] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 280.481589][T20036] FAT-fs (loop1): Filesystem has been set read-only [ 280.489668][T20036] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 280.570586][T20042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.579910][T20042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.878724][T20047] tipc: New replicast peer: 255.255.255.255 [ 280.885018][T20047] tipc: Enabled bearer , priority 10 [ 280.891585][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6556'. [ 280.900637][T20047] tipc: Disabling bearer [ 280.955946][T20053] loop3: detected capacity change from 0 to 512 [ 280.964482][T20053] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.984963][T20053] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.6559: inode has both inline data and extents flags [ 280.999339][T20053] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.6559: couldn't read orphan inode 17 (err -117) [ 281.027437][T20060] lo speed is unknown, defaulting to 1000 [ 281.037324][T20053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.066696][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.155630][T20060] lo speed is unknown, defaulting to 1000 [ 281.599037][T20100] loop3: detected capacity change from 0 to 512 [ 281.614494][T20100] EXT4-fs: Ignoring removed i_version option [ 281.632987][T20100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.648339][T20100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.684335][T20110] netlink: 'syz.1.6578': attribute type 1 has an invalid length. [ 281.748094][T20110] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.756805][T20110] bond2: (slave batadv1): making interface the new active one [ 281.765965][T20110] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 281.999837][T20140] netlink: 'syz.1.6590': attribute type 6 has an invalid length. [ 282.282585][T20162] vlan2: entered allmulticast mode [ 282.407002][T20176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6607'. [ 282.437727][T20176] IPVS: Error connecting to the multicast addr [ 282.544251][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6615'. [ 282.553870][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6615'. [ 282.879540][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6631'. [ 282.947537][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 282.947556][ T29] audit: type=1326 audit(1767546780.651:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 282.996908][ T29] audit: type=1326 audit(1767546780.691:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.020727][ T29] audit: type=1326 audit(1767546780.691:8778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.044267][ T29] audit: type=1326 audit(1767546780.691:8779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.067898][ T29] audit: type=1326 audit(1767546780.691:8780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.091577][ T29] audit: type=1326 audit(1767546780.691:8781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.115159][ T29] audit: type=1326 audit(1767546780.691:8782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.138693][ T29] audit: type=1326 audit(1767546780.691:8783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.162285][ T29] audit: type=1400 audit(1767546780.691:8784): avc: denied { setattr } for pid=20252 comm="syz.2.6635" name="/" dev="configfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 283.184777][ T29] audit: type=1326 audit(1767546780.691:8785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.2.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 283.453178][T20280] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6646'. [ 283.537162][T20285] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6648'. [ 283.547227][T20287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6649'. [ 283.556739][T20285] 0{X功: renamed from gretap0 (while UP) [ 283.607773][T20285] 0{X功: entered allmulticast mode [ 283.624602][T20285] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 283.641837][T20287] IPVS: Error connecting to the multicast addr [ 284.010192][T20322] ref_ctr_offset mismatch. inode: 0x2d9 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 284.197794][T20328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6668'. [ 284.299250][T20331] loop5: detected capacity change from 0 to 7 [ 284.311990][T20331] loop5: [ 284.419706][T20335] netlink: 'syz.3.6671': attribute type 30 has an invalid length. [ 284.799947][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6679'. [ 285.041103][T20361] netlink: 'syz.2.6682': attribute type 29 has an invalid length. [ 285.065591][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6683'. [ 285.075850][T20365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6683'. [ 285.337246][T20384] loop1: detected capacity change from 0 to 512 [ 285.368414][T20384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.403314][T20384] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.497937][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.564660][T20405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20405 comm=syz.1.6698 [ 285.577411][T20405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20405 comm=syz.1.6698 [ 285.602436][T20408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6701'. [ 285.743320][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6710'. [ 285.766119][T20423] ip6gre1: entered allmulticast mode [ 285.858711][T20436] vlan3: entered allmulticast mode [ 285.874570][T20436] dummy0: entered allmulticast mode [ 285.964462][T20443] loop3: detected capacity change from 0 to 512 [ 285.972031][T20443] journal_path: Non-blockdev passed as './bus' [ 285.979046][T20443] EXT4-fs: error: could not find journal device path [ 286.330004][T20486] : renamed from veth0_to_bond (while UP) [ 286.667379][T20514] : renamed from gretap0 (while UP) [ 286.682815][T20514] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 286.699408][T20514] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 287.140837][T20557] bridge0: entered promiscuous mode [ 287.148840][T20557] bridge0: port 3(macvtap1) entered blocking state [ 287.155567][T20557] bridge0: port 3(macvtap1) entered disabled state [ 287.170205][T20557] macvtap1: entered allmulticast mode [ 287.176390][T20557] bridge0: entered allmulticast mode [ 287.184670][T20557] macvtap1: left allmulticast mode [ 287.189858][T20557] bridge0: left allmulticast mode [ 287.198521][T20557] bridge0: left promiscuous mode [ 287.333457][T20576] team0: entered promiscuous mode [ 287.338574][T20576] team0: entered allmulticast mode [ 287.345205][T20576] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.353297][T20578] IPv6: Can't replace route, no match found [ 287.454218][T20593] netlink: 'syz.2.6780': attribute type 3 has an invalid length. [ 287.462033][T20593] netlink: 'syz.2.6780': attribute type 1 has an invalid length. [ 287.520712][T20601] 0{X功: renamed from gretap0 (while UP) [ 287.530726][T20601] 0{X功: entered allmulticast mode [ 287.537336][T20601] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 287.566010][T20602] xt_connbytes: Forcing CT accounting to be enabled [ 287.705027][T20615] vlan0: entered allmulticast mode [ 287.779150][T20621] sg_read: process 369 (syz.1.6792) changed security contexts after opening file descriptor, this is not allowed. [ 287.868468][T20627] bridge0: entered promiscuous mode [ 287.884514][T20627] bridge0: port 1(macvtap2) entered blocking state [ 287.891258][T20627] bridge0: port 1(macvtap2) entered disabled state [ 287.901181][T20627] macvtap2: entered allmulticast mode [ 287.906712][T20627] bridge0: entered allmulticast mode [ 287.913964][T20627] macvtap2: left allmulticast mode [ 287.919202][T20627] bridge0: left allmulticast mode [ 287.924951][T20627] bridge0: left promiscuous mode [ 288.026471][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 288.026488][ T29] audit: type=1326 audit(1767546785.731:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.085553][ T29] audit: type=1326 audit(1767546785.761:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.109280][ T29] audit: type=1326 audit(1767546785.761:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.133543][ T29] audit: type=1326 audit(1767546785.761:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.157193][ T29] audit: type=1326 audit(1767546785.761:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.181499][ T29] audit: type=1326 audit(1767546785.761:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.205910][ T29] audit: type=1326 audit(1767546785.761:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.229554][ T29] audit: type=1326 audit(1767546785.761:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.248290][T20650] __nla_validate_parse: 7 callbacks suppressed [ 288.248336][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6802'. [ 288.254735][ T29] audit: type=1326 audit(1767546785.761:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.263904][T20650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6802'. [ 288.268209][ T29] audit: type=1326 audit(1767546785.761:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20643 comm="syz.2.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8712e2f749 code=0x7ffc0000 [ 288.417070][T20662] vlan2: entered allmulticast mode [ 288.963700][ T3398] IPVS: starting estimator thread 0... [ 289.097335][T20696] loop3: detected capacity change from 0 to 512 [ 289.133443][T20696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.219539][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6824'. [ 289.238337][T20702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6824'. [ 289.249434][T20696] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.250614][T20704] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.322691][T20688] IPVS: using max 1872 ests per chain, 93600 per kthread [ 289.325070][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.350759][T20704] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.427070][T20704] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.496343][T20704] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.590360][ T4422] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.647753][ T4422] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.673312][ T4422] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.695854][ T4422] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.757290][ T4324] IPVS: starting estimator thread 0... [ 289.852692][T20739] IPVS: using max 2304 ests per chain, 115200 per kthread [ 290.122088][T20766] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.132012][T20766] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.225747][T20766] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.235602][T20766] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.314579][T20766] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.324432][T20766] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.343666][T20777] loop1: detected capacity change from 0 to 8192 [ 290.385325][T20766] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.395966][T20766] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.455608][ T4443] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.463906][ T4443] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.482409][ T4443] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.491445][ T4443] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.552448][ T4443] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.560737][ T4443] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.573739][ T4443] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.582019][ T4443] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.835884][T20803] Falling back ldisc for ptm0. [ 290.875176][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 291.232117][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6874'. [ 291.728314][T20863] netem: change failed [ 292.053588][T20884] netlink: 'syz.2.6906': attribute type 6 has an invalid length. [ 292.062041][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6896'. [ 292.369439][ T2969] IPVS: starting estimator thread 0... [ 292.462678][T20916] IPVS: using max 2256 ests per chain, 112800 per kthread [ 292.471852][T20928] loop3: detected capacity change from 0 to 1024 [ 292.478986][T20928] EXT4-fs: Ignoring removed bh option [ 292.500069][T20928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.557040][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.585447][T20940] netlink: 'syz.1.6917': attribute type 3 has an invalid length. [ 292.593374][T20940] netlink: 'syz.1.6917': attribute type 1 has an invalid length. [ 292.601124][T20940] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6917'. [ 292.732427][T20955] loop3: detected capacity change from 0 to 512 [ 292.740001][T20955] EXT4-fs: Ignoring removed orlov option [ 292.746200][T20955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.755797][T20955] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec018, mo2=0003] [ 292.764095][T20955] System zones: 1-2, 4-12, 8-8 [ 292.769495][T20955] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.6922: iget: bad i_size value: 38620345925642 [ 292.782760][T20955] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.6922: couldn't read orphan inode 15 (err -117) [ 292.795561][T20955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.877556][T20959] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6922: bg 0: block 5: invalid block bitmap [ 292.891304][T20959] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2012 with error 28 [ 292.903950][T20959] EXT4-fs (loop3): This should not happen!! Data will be lost [ 292.903950][T20959] [ 292.914347][T20959] EXT4-fs (loop3): Total free blocks count 0 [ 292.920395][T20959] EXT4-fs (loop3): Free/Dirty block details [ 292.926376][T20959] EXT4-fs (loop3): free_blocks=0 [ 292.931339][T20959] EXT4-fs (loop3): dirty_blocks=2532 [ 292.936734][T20959] EXT4-fs (loop3): Block reservation details [ 292.943605][T20959] EXT4-fs (loop3): i_reserved_data_blocks=2532 [ 292.979985][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2012 with max blocks 520 with error 28 [ 293.506775][T20971] loop3: detected capacity change from 0 to 512 [ 293.514665][T20969] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6927'. [ 293.524666][T20971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.552186][T20971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.567632][T20971] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.607269][T20978] lo speed is unknown, defaulting to 1000 [ 293.648763][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.737563][T20978] lo speed is unknown, defaulting to 1000 [ 294.110007][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 294.110043][ T29] audit: type=1326 audit(1767546791.811:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.227000][ T29] audit: type=1326 audit(1767546791.811:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.250664][ T29] audit: type=1326 audit(1767546791.811:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.274955][ T29] audit: type=1326 audit(1767546791.811:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.298506][ T29] audit: type=1326 audit(1767546791.811:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd88760e3aa code=0x7ffc0000 [ 294.322573][ T29] audit: type=1326 audit(1767546791.811:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd887642005 code=0x7ffc0000 [ 294.346796][ T29] audit: type=1326 audit(1767546791.811:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.374030][ T29] audit: type=1326 audit(1767546792.021:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.397711][ T29] audit: type=1326 audit(1767546792.021:9121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.421969][ T29] audit: type=1326 audit(1767546792.021:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20993 comm="syz.3.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88760f749 code=0x7ffc0000 [ 294.638699][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 294.660230][T21010] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6943'. [ 294.669374][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 294.676656][T21013] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6945'. [ 294.704228][T21013] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6945'. [ 295.115889][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6952'. [ 295.259969][T21045] loop3: detected capacity change from 0 to 128 [ 295.426319][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6955'. [ 295.435992][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6955'. [ 295.453369][T21045] syz.3.6951: attempt to access beyond end of device [ 295.453369][T21045] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 295.579894][T21037] syz.3.6951: attempt to access beyond end of device [ 295.579894][T21037] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 295.633774][T21037] syz.3.6951: attempt to access beyond end of device [ 295.633774][T21037] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 295.673192][T21037] syz.3.6951: attempt to access beyond end of device [ 295.673192][T21037] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 295.721876][T21037] syz.3.6951: attempt to access beyond end of device [ 295.721876][T21037] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 295.766719][T21037] syz.3.6951: attempt to access beyond end of device [ 295.766719][T21037] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 295.792369][T21067] netlink: 'syz.9.6959': attribute type 1 has an invalid length. [ 295.817881][T21037] syz.3.6951: attempt to access beyond end of device [ 295.817881][T21037] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 295.835415][T21069] loop1: detected capacity change from 0 to 2048 [ 295.894606][T21069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 295.908696][T21067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.972291][T21067] bond2: (slave batadv0): making interface the new active one [ 295.997774][T21069] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 296.016006][T21069] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 680 with error 28 [ 296.029269][T21069] EXT4-fs (loop1): This should not happen!! Data will be lost [ 296.029269][T21069] [ 296.038988][T21069] EXT4-fs (loop1): Total free blocks count 0 [ 296.045024][T21069] EXT4-fs (loop1): Free/Dirty block details [ 296.050950][T21069] EXT4-fs (loop1): free_blocks=2415919104 [ 296.057519][T21069] EXT4-fs (loop1): dirty_blocks=688 [ 296.062811][T21069] EXT4-fs (loop1): Block reservation details [ 296.068888][T21069] EXT4-fs (loop1): i_reserved_data_blocks=43 [ 296.079141][T21067] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 296.100649][T21077] 0{X功: left allmulticast mode [ 296.119630][T21082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6967'. [ 296.224633][ T4443] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 296.469548][T21115] netlink: 'syz.3.6980': attribute type 1 has an invalid length. [ 296.524546][T21115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 296.545571][T21115] bond1: (slave batadv1): making interface the new active one [ 296.555131][T21115] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 296.730208][T21123] 0{X功: left allmulticast mode [ 296.741345][T21129] loop1: detected capacity change from 0 to 1024 [ 296.768892][T21129] EXT4-fs: Ignoring removed bh option [ 296.796625][T21129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.921198][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.196101][T21154] loop1: detected capacity change from 0 to 1024 [ 297.213394][T21154] EXT4-fs: Ignoring removed nobh option [ 297.219025][T21154] EXT4-fs: Ignoring removed bh option [ 297.239415][T21154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.271816][T21164] netlink: 'syz.9.6998': attribute type 30 has an invalid length. [ 297.324328][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.770687][T21208] netlink: 'syz.3.7019': attribute type 12 has an invalid length. [ 297.831447][T21211] lo speed is unknown, defaulting to 1000 [ 298.018455][T21211] lo speed is unknown, defaulting to 1000 [ 298.236893][T21247] ip6gre2: entered allmulticast mode [ 298.522911][T21267] __nla_validate_parse: 9 callbacks suppressed [ 298.522931][T21267] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7046'. [ 298.558655][T21267] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7046'. [ 298.786626][T21289] lo speed is unknown, defaulting to 1000 [ 298.863054][T21289] lo speed is unknown, defaulting to 1000 [ 299.091547][T21298] lo speed is unknown, defaulting to 1000 [ 299.165150][T21298] lo speed is unknown, defaulting to 1000 [ 299.938752][T21353] lo speed is unknown, defaulting to 1000 [ 299.969832][T21361] sch_fq: defrate 0 ignored. [ 300.018123][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 300.018178][ T29] audit: type=1326 audit(1767546797.721:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21364 comm="syz.5.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 300.096968][ T29] audit: type=1326 audit(1767546797.761:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21364 comm="syz.5.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 300.121220][ T29] audit: type=1326 audit(1767546797.761:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21364 comm="syz.5.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 300.145629][ T29] audit: type=1326 audit(1767546797.761:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21364 comm="syz.5.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8acf749 code=0x7ffc0000 [ 300.230398][T21353] lo speed is unknown, defaulting to 1000 [ 300.511865][ T29] audit: type=1400 audit(1767546798.211:9268): avc: denied { relabelfrom } for pid=21389 comm="syz.2.7093" name="NETLINK" dev="sockfs" ino=71305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 300.537344][ T29] audit: type=1401 audit(1767546798.211:9269): op=setxattr invalid_context="" [ 300.704235][ T29] audit: type=1326 audit(1767546798.411:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.9.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 300.746281][ T29] audit: type=1326 audit(1767546798.411:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.9.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 300.769902][ T29] audit: type=1326 audit(1767546798.411:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.9.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 300.793535][ T29] audit: type=1326 audit(1767546798.411:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.9.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 300.864280][T21414] lo speed is unknown, defaulting to 1000 [ 300.892949][T21421] sch_fq: defrate 0 ignored. [ 301.032116][T21414] lo speed is unknown, defaulting to 1000 [ 301.088264][T21433] IPv6: Can't replace route, no match found [ 301.248552][T21447] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.7118'. [ 301.268842][T21449] loop3: detected capacity change from 0 to 512 [ 301.276167][T21447] netlink: zone id is out of range [ 301.281330][T21447] netlink: zone id is out of range [ 301.292808][T21449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 301.304686][T21447] netlink: zone id is out of range [ 301.310914][T21447] netlink: zone id is out of range [ 301.337890][T21449] EXT4-fs (loop3): 1 truncate cleaned up [ 301.344960][T21449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.358306][T21447] netlink: zone id is out of range [ 301.363519][T21447] netlink: zone id is out of range [ 301.368677][T21447] netlink: zone id is out of range [ 301.374485][T21447] netlink: zone id is out of range [ 301.379623][T21447] netlink: zone id is out of range [ 301.384794][T21447] netlink: zone id is out of range [ 301.581698][T21467] lo speed is unknown, defaulting to 1000 [ 301.634452][T21471] lo speed is unknown, defaulting to 1000 [ 301.671848][T21474] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 301.678855][T21474] sch_fq: defrate 0 ignored. [ 301.766365][T21467] lo speed is unknown, defaulting to 1000 [ 301.813846][T21483] wireguard0: entered promiscuous mode [ 301.819498][T21483] wireguard0: entered allmulticast mode [ 301.837827][T21471] lo speed is unknown, defaulting to 1000 [ 302.117407][T18239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.266446][T21510] bond3: invalid ARP target 0.0.0.0 specified for addition [ 302.273990][T21510] bond3: option arp_ip_target: invalid value (0) [ 302.284860][T21510] bond3 (unregistering): Released all slaves [ 302.366495][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7149'. [ 302.386412][T21520] loop1: detected capacity change from 0 to 1024 [ 302.395868][T21522] SELinux: policydb version 65545 does not match my version range 15-35 [ 302.407427][T21522] SELinux: failed to load policy [ 302.415329][T21526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7152'. [ 302.440947][T21520] EXT4-fs: inline encryption not supported [ 302.481344][T21520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.649160][T18482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.675818][T21551] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7162'. [ 302.812694][T21565] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7168'. [ 303.089457][T21582] lo speed is unknown, defaulting to 1000 [ 303.149891][ T10] hid_parser_main: 48 callbacks suppressed [ 303.149985][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 303.164492][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 303.190172][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.195545][T21582] lo speed is unknown, defaulting to 1000 [ 303.198130][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.211376][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.219805][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.227537][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.235329][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.243627][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.251325][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 303.328713][ T10] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 303.410309][T21600] loop1: detected capacity change from 0 to 1024 [ 303.554847][T21611] bridge0: port 1(30{X功) entered blocking state [ 303.561632][T21611] bridge0: port 1(30{X功) entered disabled state [ 303.595207][T21611] 0{X功: entered allmulticast mode [ 303.601354][T21611] 0{X功: entered promiscuous mode [ 303.620260][T21611] bridge0: port 1(30{X功) entered blocking state [ 303.627127][T21611] bridge0: port 1(30{X功) entered forwarding state [ 303.781215][T21627] Falling back ldisc for ptm0. [ 303.802538][T21629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21629 comm=syz.5.7196 [ 303.898963][T21641] loop1: detected capacity change from 0 to 256 [ 303.914753][T21641] FAT-fs (loop1): bogus number of FAT sectors [ 303.920906][T21641] FAT-fs (loop1): Can't find a valid FAT filesystem [ 303.938126][T21643] lo speed is unknown, defaulting to 1000 [ 303.966731][T21648] sch_fq: defrate 0 ignored. [ 304.096008][T21643] lo speed is unknown, defaulting to 1000 [ 304.402348][T21696] bond3: invalid ARP target 0.0.0.0 specified for addition [ 304.409813][T21696] bond3: option arp_ip_target: invalid value (0) [ 304.440675][T21696] bond3 (unregistering): Released all slaves [ 304.500074][T21712] loop3: detected capacity change from 0 to 256 [ 304.511259][T21712] FAT-fs (loop3): bogus number of FAT sectors [ 304.517461][T21712] FAT-fs (loop3): Can't find a valid FAT filesystem [ 304.561677][T21716] lo speed is unknown, defaulting to 1000 [ 304.687730][T21716] lo speed is unknown, defaulting to 1000 [ 304.874335][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7231'. [ 304.894683][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7231'. [ 305.708915][T21837] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 305.925435][T21864] : renamed from wg2 (while UP) [ 306.063663][ T3398] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 306.110008][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7251'. [ 306.357674][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 306.357693][ T29] audit: type=1326 audit(1767546804.061:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.462743][ T29] audit: type=1326 audit(1767546804.061:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.486379][ T29] audit: type=1326 audit(1767546804.061:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.509937][ T29] audit: type=1326 audit(1767546804.061:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.533586][ T29] audit: type=1326 audit(1767546804.061:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.557204][ T29] audit: type=1326 audit(1767546804.081:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.580730][ T29] audit: type=1326 audit(1767546804.081:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.604351][ T29] audit: type=1326 audit(1767546804.111:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.628004][ T29] audit: type=1326 audit(1767546804.111:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.651599][ T29] audit: type=1326 audit(1767546804.111:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.9.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61ef9f749 code=0x7ffc0000 [ 306.979755][T21915] lo speed is unknown, defaulting to 1000 [ 307.354805][T21915] lo speed is unknown, defaulting to 1000 [ 307.408465][T21919] ================================================================== [ 307.416615][T21919] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 307.423604][T21919] [ 307.425948][T21919] read-write to 0xffff88813b182a2c of 4 bytes by task 21913 on cpu 0: [ 307.434117][T21919] fifo_open+0x86/0x5d0 [ 307.438315][T21919] do_dentry_open+0x54b/0xa60 [ 307.443019][T21919] vfs_open+0x37/0x1e0 [ 307.447132][T21919] path_openat+0x1ddd/0x23b0 [ 307.451754][T21919] do_filp_open+0x109/0x230 [ 307.456289][T21919] do_sys_openat2+0xa6/0x150 [ 307.460908][T21919] __x64_sys_open+0xe6/0x110 [ 307.465538][T21919] x64_sys_call+0x166f/0x3000 [ 307.470243][T21919] do_syscall_64+0xca/0x2b0 [ 307.474781][T21919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.480706][T21919] [ 307.483048][T21919] read to 0xffff88813b182a2c of 4 bytes by task 21919 on cpu 1: [ 307.490711][T21919] wait_for_partner+0xb5/0x1c0 [ 307.495513][T21919] fifo_open+0x462/0x5d0 [ 307.499781][T21919] do_dentry_open+0x54b/0xa60 [ 307.504483][T21919] vfs_open+0x37/0x1e0 [ 307.508600][T21919] path_openat+0x1ddd/0x23b0 [ 307.513226][T21919] do_filp_open+0x109/0x230 [ 307.517772][T21919] do_sys_openat2+0xa6/0x150 [ 307.522398][T21919] __x64_sys_open+0xe6/0x110 [ 307.527019][T21919] x64_sys_call+0x166f/0x3000 [ 307.531719][T21919] do_syscall_64+0xca/0x2b0 [ 307.536255][T21919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.542168][T21919] [ 307.544501][T21919] value changed: 0x00000001 -> 0x00000002 [ 307.550225][T21919] [ 307.552565][T21919] Reported by Kernel Concurrency Sanitizer on: [ 307.558747][T21919] CPU: 1 UID: 0 PID: 21919 Comm: syz.1.7265 Not tainted syzkaller #0 PREEMPT(voluntary) [ 307.568575][T21919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.578746][T21919] ================================================================== [ 307.644815][T21930] vlan2: entered allmulticast mode