last executing test programs: 2m9.159621896s ago: executing program 32 (id=68): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x97}, 0x18) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m39.367295069s ago: executing program 33 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m25.654338759s ago: executing program 34 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 59.85675519s ago: executing program 7 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @random="0010008c3e00", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x5, 0x4, 0x1, 0x32, 0x1c, 0x67, 0x0, 0x8, 0x2, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x14, 0x6, 0x0, @broadcast}}}}}}}, 0x32) 59.774686833s ago: executing program 7 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 59.748330864s ago: executing program 7 (id=2386): socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) 59.428555038s ago: executing program 7 (id=2391): wait4(0x0, 0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) fchmod(0xffffffffffffffff, 0xa0) 59.38052303s ago: executing program 7 (id=2393): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 59.328828702s ago: executing program 7 (id=2396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 59.328596583s ago: executing program 3 (id=2397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000a35000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) 59.280711144s ago: executing program 3 (id=2401): syz_open_dev$sg(&(0x7f00000002c0), 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) 59.254975145s ago: executing program 3 (id=2403): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 59.15161279s ago: executing program 3 (id=2405): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 59.111571142s ago: executing program 3 (id=2408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) 58.883047601s ago: executing program 3 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 58.846848053s ago: executing program 35 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 56.077938732s ago: executing program 8 (id=2494): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 55.884349231s ago: executing program 8 (id=2501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 54.982772509s ago: executing program 8 (id=2523): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) 54.932668142s ago: executing program 8 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) 54.896044963s ago: executing program 8 (id=2527): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffb, 0x5, 0x3, 0x14, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 53.722812324s ago: executing program 8 (id=2552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 53.718691344s ago: executing program 36 (id=2552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 44.2967956s ago: executing program 37 (id=2396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 8.354841321s ago: executing program 5 (id=4203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.093744832s ago: executing program 5 (id=4220): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 8.012052545s ago: executing program 5 (id=4211): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) 7.957680607s ago: executing program 5 (id=4215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 7.940945158s ago: executing program 5 (id=4217): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) close(r2) 7.895274621s ago: executing program 6 (id=4218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 7.43635674s ago: executing program 6 (id=4230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 7.355128044s ago: executing program 5 (id=4234): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x245}], 0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) unshare(0x400) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) 6.594765577s ago: executing program 39 (id=4251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) close(0x3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) unshare(0x400) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) 880.714063ms ago: executing program 4 (id=4422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 830.764175ms ago: executing program 4 (id=4424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 809.220066ms ago: executing program 1 (id=4425): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 787.086097ms ago: executing program 4 (id=4426): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) 756.603478ms ago: executing program 4 (id=4428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000000)={&(0x7f0000000440)={0x1d, r2, 0x2, {0x0, 0xf0, 0x5}, 0xfe}, 0x18, &(0x7f0000000180)={0x0, 0x20}, 0x4, 0x0, 0x0, 0x24004045}, 0x8001) 384.103914ms ago: executing program 1 (id=4438): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = syz_io_uring_setup(0x1549, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x0, 0x801e7}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 383.614924ms ago: executing program 1 (id=4439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000010440)={0xa, 0x20, 0x0, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 377.477415ms ago: executing program 2 (id=4440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 316.681377ms ago: executing program 2 (id=4441): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x60}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 306.665608ms ago: executing program 0 (id=4442): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x4c}}, 0x40000c0) 242.077591ms ago: executing program 2 (id=4444): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x800) 229.205081ms ago: executing program 0 (id=4445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x1) 208.804542ms ago: executing program 9 (id=4446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x2, 0x0, 0x0) 194.037853ms ago: executing program 2 (id=4447): openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 170.346333ms ago: executing program 9 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0xffffffff, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x2, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xba, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x3, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x2, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0xcc42, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x8001, 0x9, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x0, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0xfffa}, 0x1, 0x0, 0x0, 0x50}, 0x0) 150.853194ms ago: executing program 4 (id=4449): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x1, 0x4, {0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}}, 0x3a) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 136.992705ms ago: executing program 0 (id=4450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001d00b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) 103.244966ms ago: executing program 0 (id=4451): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31832abd7000000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4806) 102.710086ms ago: executing program 9 (id=4452): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, 0x0, &(0x7f0000000640)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000580), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x0) 92.426847ms ago: executing program 0 (id=4453): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a5ae4c65dce95956162d85bf465d0b26b42af3277e9683cd5783e296ca2"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 81.011807ms ago: executing program 9 (id=4454): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.15965ms ago: executing program 2 (id=4455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x40000}, 0x4000) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 30.87184ms ago: executing program 9 (id=4456): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x576, &(0x7f0000000d00)="$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") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x40004) 30.6876ms ago: executing program 2 (id=4457): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7ff, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 0s ago: executing program 9 (id=4458): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): imer: 0xffff88811b948800: rx timeout, send abort [ 103.631216][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b948000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.645494][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b948800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.679887][ T9136] loop6: detected capacity change from 0 to 512 [ 103.694092][ T9136] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2389: iget: bad extra_isize 90 (inode size 256) [ 103.733754][ T9136] EXT4-fs (loop6): Remounting filesystem read-only [ 103.751578][ T9136] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 103.760848][ T9136] EXT4-fs (loop6): 1 orphan inode deleted [ 103.767829][ T9136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.801684][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.847765][ T9155] loop5: detected capacity change from 0 to 512 [ 103.861913][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'. [ 103.870932][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'. [ 103.882634][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'. [ 103.891666][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'. [ 103.902528][ T9155] EXT4-fs (loop5): 1 orphan inode deleted [ 103.908775][ T9155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.921801][ T1006] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 103.933896][ T9155] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.961120][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.003496][ T9169] loop6: detected capacity change from 0 to 1024 [ 104.020297][ T9169] EXT4-fs: inline encryption not supported [ 104.060623][ T9169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.136805][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.417055][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2423'. [ 104.479416][ T9199] ip6_vti0 speed is unknown, defaulting to 1000 [ 104.557108][ T9217] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 104.665455][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 104.673631][ T9233] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.757533][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.764749][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.774833][ T9199] bridge_slave_0: entered allmulticast mode [ 104.781615][ T9199] bridge_slave_0: entered promiscuous mode [ 104.788442][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.795528][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.802777][ T9199] bridge_slave_1: entered allmulticast mode [ 104.809340][ T9199] bridge_slave_1: entered promiscuous mode [ 104.817303][ T9249] netlink: 'syz.6.2439': attribute type 12 has an invalid length. [ 104.846266][ T9253] netlink: 'syz.6.2441': attribute type 1 has an invalid length. [ 104.857522][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.873728][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.904617][ T9199] team0: Port device team_slave_0 added [ 104.911686][ T9199] team0: Port device team_slave_1 added [ 104.958053][ T9261] SELinux: failed to load policy [ 104.965319][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.972278][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.998273][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.014174][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.021171][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.047224][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.081837][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.092546][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.108539][ T9199] hsr_slave_0: entered promiscuous mode [ 105.120030][ T9199] hsr_slave_1: entered promiscuous mode [ 105.125999][ T9199] debugfs: 'hsr0' already exists in 'hsr' [ 105.131754][ T9199] Cannot create hsr debugfs directory [ 105.209726][ T9199] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.219348][ T9199] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.228761][ T9199] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.238032][ T9199] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.254732][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.261897][ T9199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.269380][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.276519][ T9199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.306934][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.319128][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.327505][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.340384][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.350191][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.357301][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.374322][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.381505][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.462175][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.584862][ T9199] veth0_vlan: entered promiscuous mode [ 105.592985][ T9199] veth1_vlan: entered promiscuous mode [ 105.608452][ T9199] veth0_macvtap: entered promiscuous mode [ 105.617106][ T9199] veth1_macvtap: entered promiscuous mode [ 105.628367][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.662185][ T9294] ip6_vti0 speed is unknown, defaulting to 1000 [ 105.683928][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.716101][ T1006] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.726395][ T9300] __nla_validate_parse: 3 callbacks suppressed [ 105.726409][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2451'. [ 105.742171][ T1006] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.760702][ T9298] ip6_vti0 speed is unknown, defaulting to 1000 [ 105.795800][ T1006] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.829552][ T1006] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.960016][ T9303] ip6_vti0 speed is unknown, defaulting to 1000 [ 105.977636][ T9325] tipc: Started in network mode [ 105.982612][ T9325] tipc: Node identity 4, cluster identity 4711 [ 105.988878][ T9325] tipc: Node number set to 4 [ 106.103593][ T9337] tipc: New replicast peer: 255.255.255.255 [ 106.109706][ T9337] tipc: Enabled bearer , priority 10 [ 106.359653][ T9357] SELinux: failed to load policy [ 107.044198][ T9401] tipc: Started in network mode [ 107.049151][ T9401] tipc: Node identity ac14140f, cluster identity 4711 [ 107.111913][ T9401] tipc: New replicast peer: 255.255.255.255 [ 107.118179][ T9401] tipc: Enabled bearer , priority 10 [ 107.431981][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 107.432016][ T29] audit: type=1326 audit(1764631106.098:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.432046][ T29] audit: type=1326 audit(1764631106.098:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.546100][ T29] audit: type=1326 audit(1764631106.178:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.569660][ T29] audit: type=1326 audit(1764631106.178:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.569705][ T29] audit: type=1326 audit(1764631106.178:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.569872][ T29] audit: type=1326 audit(1764631106.178:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.569900][ T29] audit: type=1326 audit(1764631106.188:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.569929][ T29] audit: type=1326 audit(1764631106.188:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.569953][ T29] audit: type=1326 audit(1764631106.198:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.570015][ T29] audit: type=1326 audit(1764631106.198:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 107.651952][ T9429] netlink: 'syz.5.2507': attribute type 3 has an invalid length. [ 107.963885][ T9454] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 108.133059][ T7299] tipc: Node number set to 2886997007 [ 108.496499][ T9480] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.983894][ T9505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2539'. [ 109.336540][ T297] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.426171][ T297] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.532064][ T297] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.574435][ T9538] ip6_vti0 speed is unknown, defaulting to 1000 [ 109.596987][ T297] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.712276][ T297] bridge_slave_1: left allmulticast mode [ 109.718129][ T297] bridge_slave_1: left promiscuous mode [ 109.723879][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.738607][ T297] bridge_slave_0: left allmulticast mode [ 109.744470][ T297] bridge_slave_0: left promiscuous mode [ 109.750146][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.920189][ T297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.930699][ T297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.940565][ T297] bond0 (unregistering): Released all slaves [ 110.004214][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2572'. [ 110.013353][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2572'. [ 110.024965][ T297] tipc: Left network mode [ 110.064511][ T9538] chnl_net:caif_netlink_parms(): no params data found [ 110.153176][ T297] hsr_slave_0: left promiscuous mode [ 110.163525][ T297] hsr_slave_1: left promiscuous mode [ 110.169303][ T297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.176746][ T297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.213294][ T297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.220743][ T297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.241498][ T297] veth1_macvtap: left promiscuous mode [ 110.252951][ T297] veth0_macvtap: left promiscuous mode [ 110.259721][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 110.268687][ T297] veth1_vlan: left promiscuous mode [ 110.278732][ T297] veth0_vlan: left promiscuous mode [ 110.376048][ T297] team0 (unregistering): Port device team_slave_1 removed [ 110.390795][ T297] team0 (unregistering): Port device team_slave_0 removed [ 110.518952][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.526230][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.534295][ T9538] bridge_slave_0: entered allmulticast mode [ 110.541347][ T9627] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.551530][ T9538] bridge_slave_0: entered promiscuous mode [ 110.560181][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.567405][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.585598][ T9538] bridge_slave_1: entered allmulticast mode [ 110.592161][ T9538] bridge_slave_1: entered promiscuous mode [ 110.612613][ T9538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.624015][ T9538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.645954][ T9538] team0: Port device team_slave_0 added [ 110.652801][ T9538] team0: Port device team_slave_1 added [ 110.671197][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.678220][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.704181][ T9538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.717341][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.724426][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.750363][ T9538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.799371][ T9538] hsr_slave_0: entered promiscuous mode [ 110.809229][ T9538] hsr_slave_1: entered promiscuous mode [ 110.815646][ T9538] debugfs: 'hsr0' already exists in 'hsr' [ 110.821424][ T9538] Cannot create hsr debugfs directory [ 110.849405][ T9630] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.903501][ T9639] bridge0: port 5(vlan2) entered blocking state [ 110.909905][ T9639] bridge0: port 5(vlan2) entered disabled state [ 110.916435][ T9639] vlan2: entered allmulticast mode [ 110.921551][ T9639] bridge0: entered allmulticast mode [ 110.933804][ T9639] vlan2: left allmulticast mode [ 110.938705][ T9639] bridge0: left allmulticast mode [ 110.980867][ T9633] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.078891][ T9636] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.169112][ T9538] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 111.194953][ T9640] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.195049][ T9538] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 111.237625][ T9647] loop6: detected capacity change from 0 to 1024 [ 111.259001][ T9647] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.270022][ T9647] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.281305][ T9538] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 111.298898][ T9647] JBD2: no valid journal superblock found [ 111.304721][ T9647] EXT4-fs (loop6): Could not load journal inode [ 111.315441][ T9538] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 111.325789][ T9647] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 111.405541][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.412662][ T9538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.419989][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.427124][ T9538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.456591][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2596'. [ 111.532989][ T9669] loop6: detected capacity change from 0 to 512 [ 111.538561][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.553221][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.565199][ T9669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.607410][ T9669] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.690520][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.727709][ T9538] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.743417][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.794591][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.801745][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.822465][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.829584][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.002561][ T9538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.036570][ T9693] loop5: detected capacity change from 0 to 512 [ 112.093099][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.105756][ T9693] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.176746][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.311801][ T9538] veth0_vlan: entered promiscuous mode [ 112.335269][ T9733] netlink: 'syz.6.2622': attribute type 4 has an invalid length. [ 112.336113][ T9538] veth1_vlan: entered promiscuous mode [ 112.385908][ T9733] netlink: 'syz.6.2622': attribute type 4 has an invalid length. [ 112.399682][ T9538] veth0_macvtap: entered promiscuous mode [ 112.433532][ T9538] veth1_macvtap: entered promiscuous mode [ 112.445238][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.460025][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.480074][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.521079][ T9750] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.563391][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 112.563424][ T29] audit: type=1400 audit(1764631111.238:2253): avc: denied { accept } for pid=9761 comm="syz.9.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.672261][ T9750] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.753831][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.945669][ T9816] loop6: detected capacity change from 0 to 512 [ 112.966144][ T9816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.993470][ T9816] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.032825][ T29] audit: type=1400 audit(1764631111.698:2254): avc: denied { append } for pid=9815 comm="syz.6.2632" path="/367/bus/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.145595][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.248436][ T9824] bridge0: port 4(vlan0) entered blocking state [ 113.254789][ T9824] bridge0: port 4(vlan0) entered disabled state [ 113.282238][ T9824] vlan0: entered allmulticast mode [ 113.287520][ T9824] bridge0: entered allmulticast mode [ 113.303768][ T9824] vlan0: left allmulticast mode [ 113.308735][ T9824] bridge0: left allmulticast mode [ 113.487023][ T9840] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 113.617718][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2649'. [ 113.634381][ T9859] loop5: detected capacity change from 0 to 128 [ 113.641026][ T9855] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 113.655165][ T9859] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 113.655385][ T29] audit: type=1326 audit(1764631112.328:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 113.663029][ T9859] FAT-fs (loop5): Filesystem has been set read-only [ 113.693645][ T29] audit: type=1326 audit(1764631112.328:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 113.717164][ T29] audit: type=1326 audit(1764631112.328:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 113.740886][ T29] audit: type=1326 audit(1764631112.368:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 113.764377][ T29] audit: type=1326 audit(1764631112.368:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9857 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 113.858000][ T9869] loop9: detected capacity change from 0 to 1024 [ 113.889921][ T29] audit: type=1326 audit(1764631112.498:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9863 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 113.913518][ T29] audit: type=1326 audit(1764631112.498:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9863 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 113.936999][ T29] audit: type=1326 audit(1764631112.498:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9863 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 113.966721][ T9869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 113.976051][ T9869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.077118][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.550807][ T9929] loop6: detected capacity change from 0 to 128 [ 114.583457][ T9929] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 114.591424][ T9929] FAT-fs (loop6): Filesystem has been set read-only [ 114.734602][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2691'. [ 114.904919][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2696'. [ 115.097632][ T3402] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 115.105439][ T3402] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 115.131719][ T3402] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 115.154038][ T3402] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 115.216697][ T9978] loop9: detected capacity change from 0 to 164 [ 115.236538][ T9978] Unable to read rock-ridge attributes [ 115.899728][T10007] syzkaller0: entered promiscuous mode [ 115.905339][T10007] syzkaller0: entered allmulticast mode [ 115.959401][T10015] netlink: 'syz.1.2723': attribute type 12 has an invalid length. [ 116.021522][T10018] netlink: 'syz.6.2724': attribute type 21 has an invalid length. [ 116.029440][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2724'. [ 116.083127][T10018] netlink: 'syz.6.2724': attribute type 21 has an invalid length. [ 116.091074][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2724'. [ 116.225812][T10031] loop5: detected capacity change from 0 to 164 [ 116.245313][T10031] rock: directory entry would overflow storage [ 116.251536][T10031] rock: sig=0x66, size=4, remaining=3 [ 116.282145][T10031] rock: directory entry would overflow storage [ 116.288512][T10031] rock: sig=0x66, size=4, remaining=3 [ 116.308970][T10031] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.610735][T10064] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2746'. [ 116.620849][T10064] netlink: zone id is out of range [ 116.626148][T10064] netlink: zone id is out of range [ 116.631589][T10064] netlink: zone id is out of range [ 116.658260][T10064] netlink: zone id is out of range [ 116.678390][T10064] netlink: set zone limit has 8 unknown bytes [ 116.976992][T10113] syzkaller1: entered promiscuous mode [ 116.982530][T10113] syzkaller1: entered allmulticast mode [ 117.221675][T10132] loop9: detected capacity change from 0 to 164 [ 117.233949][T10132] rock: directory entry would overflow storage [ 117.240148][T10132] rock: sig=0x66, size=4, remaining=3 [ 117.257095][T10132] rock: directory entry would overflow storage [ 117.263366][T10132] rock: sig=0x66, size=4, remaining=3 [ 117.280796][T10132] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 117.682974][T10168] loop6: detected capacity change from 0 to 164 [ 117.690638][T10168] rock: directory entry would overflow storage [ 117.696974][T10168] rock: sig=0x66, size=4, remaining=3 [ 117.705212][T10168] rock: directory entry would overflow storage [ 117.705222][T10168] rock: sig=0x66, size=4, remaining=3 [ 117.713174][T10168] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 117.774213][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 117.774226][ T29] audit: type=1326 audit(1764631116.448:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.774287][ T29] audit: type=1326 audit(1764631116.448:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.775729][ T29] audit: type=1326 audit(1764631116.448:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.775762][ T29] audit: type=1326 audit(1764631116.448:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.775868][ T29] audit: type=1326 audit(1764631116.448:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.777609][ T29] audit: type=1326 audit(1764631116.448:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.777791][ T29] audit: type=1326 audit(1764631116.448:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.777860][ T29] audit: type=1326 audit(1764631116.448:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.780290][ T29] audit: type=1326 audit(1764631116.448:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 117.781029][ T29] audit: type=1326 audit(1764631116.448:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.9.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 118.169646][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2804'. [ 118.169685][T10194] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2804'. [ 118.169704][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2804'. [ 118.169721][T10194] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2804'. [ 118.169940][T10194] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2804'. [ 118.289061][T10209] tipc: Started in network mode [ 118.294090][T10209] tipc: Node identity ac14140f, cluster identity 4711 [ 118.306703][T10209] tipc: New replicast peer: 255.255.255.255 [ 118.312824][T10209] tipc: Enabled bearer , priority 10 [ 118.320285][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2810'. [ 118.329312][T10209] tipc: Disabling bearer [ 118.359105][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2812'. [ 118.368144][T10213] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2812'. [ 118.377187][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2812'. [ 118.423341][ T3380] Process accounting resumed [ 118.990247][T10254] ip6_vti0 speed is unknown, defaulting to 1000 [ 119.057596][ T9774] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.068197][ T9774] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.167538][ T9774] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.177938][ T9774] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.277730][ T9774] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.288151][ T9774] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.311010][T10304] netlink: 'syz.6.2849': attribute type 3 has an invalid length. [ 119.364248][ T9774] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.374613][ T9774] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.398972][T10254] chnl_net:caif_netlink_parms(): no params data found [ 119.516060][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.523234][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.530529][T10254] bridge_slave_0: entered allmulticast mode [ 119.537055][T10254] bridge_slave_0: entered promiscuous mode [ 119.576444][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.583614][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.599638][T10254] bridge_slave_1: entered allmulticast mode [ 119.606737][T10254] bridge_slave_1: entered promiscuous mode [ 119.635556][T10254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.653497][T10325] tipc: New replicast peer: 255.255.255.255 [ 119.659652][T10325] tipc: Enabled bearer , priority 10 [ 119.665916][T10327] netlink: 'syz.9.2858': attribute type 1 has an invalid length. [ 119.675153][T10254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.687369][T10329] tipc: Disabling bearer [ 119.754503][T10254] team0: Port device team_slave_0 added [ 119.760585][ T9774] dummy0: left allmulticast mode [ 119.765804][ T9774] bridge0: port 3(dummy0) entered disabled state [ 119.774344][ T9774] bridge_slave_1: left allmulticast mode [ 119.780014][ T9774] bridge_slave_1: left promiscuous mode [ 119.785870][ T9774] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.808654][ T9774] bridge_slave_0: left allmulticast mode [ 119.814364][ T9774] bridge_slave_0: left promiscuous mode [ 119.820049][ T9774] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.964690][T10355] loop6: detected capacity change from 0 to 1024 [ 119.991967][T10355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.015686][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.027719][ T9774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.037294][ T9774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.038274][ T9774] bond0 (unregistering): Released all slaves [ 120.057491][T10254] team0: Port device team_slave_1 added [ 120.102994][ T9774] tipc: Left network mode [ 120.139715][T10254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.139793][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.139821][T10254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.140605][T10254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.140617][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.140658][T10254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.150338][T10365] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.214465][ T9774] hsr_slave_0: left promiscuous mode [ 120.214770][ T9774] hsr_slave_1: left promiscuous mode [ 120.215198][ T9774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.215211][ T9774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.215593][ T9774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.215608][ T9774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.218824][ T9774] veth1_macvtap: left promiscuous mode [ 120.218850][ T9774] veth0_macvtap: left promiscuous mode [ 120.430147][T10254] hsr_slave_0: entered promiscuous mode [ 120.430595][T10254] hsr_slave_1: entered promiscuous mode [ 120.430852][T10254] debugfs: 'hsr0' already exists in 'hsr' [ 120.430866][T10254] Cannot create hsr debugfs directory [ 120.638859][T10399] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.979434][T10254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.015507][T10254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.043152][T10254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.071824][T10444] loop5: detected capacity change from 0 to 1024 [ 121.087598][T10254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.112820][T10444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.140674][T10462] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.154763][T10444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.184915][T10254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.197248][T10254] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.207457][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.214557][ T6729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.245501][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.252598][ T6729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.269659][T10254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.280289][T10254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.401082][T10254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.407654][T10489] loop6: detected capacity change from 0 to 1024 [ 121.427053][T10489] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.438010][T10489] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.494174][T10489] JBD2: no valid journal superblock found [ 121.499992][T10489] EXT4-fs (loop6): Could not load journal inode [ 121.558051][T10489] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 121.650198][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.653404][T10254] veth0_vlan: entered promiscuous mode [ 121.697124][T10254] veth1_vlan: entered promiscuous mode [ 121.759679][T10254] veth0_macvtap: entered promiscuous mode [ 121.783833][T10254] veth1_macvtap: entered promiscuous mode [ 121.823946][T10254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.857935][T10254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.905065][ T297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.937588][ T297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.968602][ T297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.977511][ T297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.093461][T10572] __nla_validate_parse: 3 callbacks suppressed [ 122.093475][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2926'. [ 122.127649][T10572] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 122.213097][T10589] loop9: detected capacity change from 0 to 512 [ 122.247296][T10589] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2931: error while reading EA inode 32 err=-116 [ 122.309686][T10589] EXT4-fs (loop9): Remounting filesystem read-only [ 122.316430][T10589] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 122.326918][T10589] EXT4-fs (loop9): 1 orphan inode deleted [ 122.333623][T10589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.347431][T10589] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.356527][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 122.365452][T10603] netlink: 'syz.6.2936': attribute type 30 has an invalid length. [ 122.494627][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2943'. [ 122.508057][T10628] macvlan0: entered promiscuous mode [ 122.513447][T10628] macvlan0: entered allmulticast mode [ 122.518847][T10628] gretap0: entered allmulticast mode [ 122.670184][ T297] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.700082][ T297] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.727264][ T297] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.737535][ T297] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.783360][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 122.783376][ T29] audit: type=1326 audit(122.761:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.850246][ T29] audit: type=1326 audit(122.801:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.865060][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.873472][ T29] audit: type=1326 audit(122.801:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.880781][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.880806][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.885059][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.903839][ T29] audit: type=1326 audit(122.801:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.911213][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.911233][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.911257][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.918743][ T29] audit: type=1326 audit(122.801:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.926052][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.948864][ T29] audit: type=1326 audit(122.801:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.956270][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.963652][ T29] audit: type=1326 audit(122.801:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 122.970959][ T3380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 122.993780][ T29] audit: type=1326 audit(122.801:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 123.043736][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 123.054236][ T29] audit: type=1326 audit(122.801:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 123.061606][T10690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2965'. [ 123.125406][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 123.134339][T10690] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2965'. [ 123.145388][T10690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2965'. [ 123.176377][ T3380] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 123.207188][ T29] audit: type=1326 audit(123.191:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 123.271335][T10713] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2972'. [ 123.381159][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2979'. [ 123.397913][T10738] IPv6: Can't replace route, no match found [ 123.431882][ T36] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.442138][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.491290][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.989516][T10815] ip6gretap0: entered promiscuous mode [ 124.013340][T10815] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 124.169114][T10830] loop9: detected capacity change from 0 to 128 [ 124.178484][T10830] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.217569][T10839] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.262527][T10830] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.9.3004: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 124.329524][T10843] bond1: Unable to set down delay as MII monitoring is disabled [ 124.358418][T10830] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.9.3004: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 124.400459][T10843] bond1 (unregistering): Released all slaves [ 124.454263][ T9538] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.484454][T10919] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.644991][T10941] Cannot find del_set index 2 as target [ 124.669423][T10942] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.732274][T10957] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.980191][T11004] netlink: 'syz.6.3040': attribute type 10 has an invalid length. [ 125.050123][T11015] block device autoloading is deprecated and will be removed. [ 125.185865][T11031] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 125.287102][T11054] syzkaller1: entered promiscuous mode [ 125.292720][T11054] syzkaller1: entered allmulticast mode [ 125.367815][T11068] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.885198][T11107] bridge0: entered allmulticast mode [ 125.894042][T11107] pim6reg: entered allmulticast mode [ 126.254081][T11145] loop6: detected capacity change from 0 to 1024 [ 126.261159][T11145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.283534][T11145] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.524206][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 126.756951][T11190] netlink: 'syz.9.3109': attribute type 12 has an invalid length. [ 126.764938][T11190] netlink: 'syz.9.3109': attribute type 29 has an invalid length. [ 126.772816][T11190] netlink: 'syz.9.3109': attribute type 2 has an invalid length. [ 126.780633][T11190] netlink: 'syz.9.3109': attribute type 3 has an invalid length. [ 126.815757][T11196] loop9: detected capacity change from 0 to 1024 [ 126.822696][T11196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.846558][T11196] EXT4-fs (loop9): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.078880][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 127.280050][T11250] netlink: 'syz.6.3126': attribute type 12 has an invalid length. [ 127.287997][T11250] netlink: 'syz.6.3126': attribute type 29 has an invalid length. [ 127.295912][T11250] __nla_validate_parse: 6 callbacks suppressed [ 127.295936][T11250] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3126'. [ 127.311196][T11250] netlink: 'syz.6.3126': attribute type 2 has an invalid length. [ 127.318946][T11250] netlink: 'syz.6.3126': attribute type 3 has an invalid length. [ 127.326676][T11250] netlink: 15 bytes leftover after parsing attributes in process `syz.6.3126'. [ 127.520529][T11267] loop1: detected capacity change from 0 to 1024 [ 127.527445][T11267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.544541][T11267] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.755760][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 127.845458][T11301] rdma_op ffff8881398ce980 conn xmit_rdma 0000000000000000 [ 127.856986][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 127.857004][ T29] audit: type=1326 audit(127.841:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 127.886220][ T29] audit: type=1326 audit(127.841:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 127.909636][ T29] audit: type=1326 audit(127.841:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 127.932730][ T29] audit: type=1326 audit(127.841:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 127.955651][ T29] audit: type=1326 audit(127.841:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 127.978504][ T29] audit: type=1326 audit(127.871:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 128.001382][ T29] audit: type=1326 audit(127.891:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.5.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a0a9f749 code=0x7ffc0000 [ 128.123533][T11322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.189842][ T29] audit: type=1400 audit(128.171:2632): avc: denied { watch } for pid=11333 comm="syz.0.3163" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 128.259406][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3164'. [ 128.268640][ T29] audit: type=1326 audit(128.221:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 128.291727][ T29] audit: type=1326 audit(128.221:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 128.337770][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 128.390411][T11351] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.663562][T11374] rdma_op ffff88811992c980 conn xmit_rdma 0000000000000000 [ 129.191033][T11387] loop5: detected capacity change from 0 to 256 [ 129.357360][T11413] loop6: detected capacity change from 0 to 512 [ 129.381633][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3192'. [ 129.390664][T11413] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.401566][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3192'. [ 129.428862][T11413] EXT4-fs (loop6): 1 truncate cleaned up [ 129.435416][T11413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.567618][T11432] loop5: detected capacity change from 0 to 1024 [ 129.578528][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.604324][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'. [ 129.627970][T11432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.680978][T11452] netem: incorrect gi model size [ 129.686176][T11452] netem: change failed [ 129.691422][T11449] netlink: 'syz.0.3209': attribute type 1 has an invalid length. [ 129.713805][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.728226][T11456] loop1: detected capacity change from 0 to 1024 [ 129.803569][T11456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.839483][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.911455][T11488] loop9: detected capacity change from 0 to 256 [ 130.005572][T11497] netlink: 'syz.9.3225': attribute type 6 has an invalid length. [ 130.047312][T11504] loop9: detected capacity change from 0 to 512 [ 130.063577][T11504] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 130.078650][T11504] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3229: invalid indirect mapped block 4294967295 (level 0) [ 130.079428][T11510] loop1: detected capacity change from 0 to 1024 [ 130.093182][T11504] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3229: invalid indirect mapped block 4294967295 (level 1) [ 130.104019][T11510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.116172][T11504] EXT4-fs (loop9): 1 orphan inode deleted [ 130.125335][T11504] EXT4-fs (loop9): 1 truncate cleaned up [ 130.131553][T11504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.154876][T11510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.183767][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.234286][T11528] lo: Caught tx_queue_len zero misconfig [ 130.394383][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.510747][T11564] ip6_vti0 speed is unknown, defaulting to 1000 [ 130.703661][T11599] netem: incorrect gi model size [ 130.746974][T11603] loop1: detected capacity change from 0 to 128 [ 130.892616][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 130.902243][T11611] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 130.952674][T11615] loop6: detected capacity change from 0 to 512 [ 130.963885][T11615] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3263: inode has both inline data and extents flags [ 130.994640][T11615] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3263: couldn't read orphan inode 15 (err -117) [ 131.047431][T11615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.065122][T11627] loop1: detected capacity change from 0 to 512 [ 131.078034][T11627] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3269: error while reading EA inode 32 err=-116 [ 131.094235][T11631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11631 comm=syz.5.3270 [ 131.106875][T11631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11631 comm=syz.5.3270 [ 131.125117][T11615] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 131.140009][T11627] EXT4-fs (loop1): Remounting filesystem read-only [ 131.148870][T11627] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 131.159242][T11627] EXT4-fs (loop1): 1 orphan inode deleted [ 131.165469][T11627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.178940][T11627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.179765][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.251880][T11643] random: crng reseeded on system resumption [ 131.277631][T11646] loop5: detected capacity change from 0 to 512 [ 131.295500][T11646] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.333560][T11646] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3275: invalid indirect mapped block 4294967295 (level 0) [ 131.360343][T11646] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3275: invalid indirect mapped block 4294967295 (level 1) [ 131.363827][T11657] loop1: detected capacity change from 0 to 164 [ 131.374960][T11646] EXT4-fs (loop5): 1 orphan inode deleted [ 131.386436][T11646] EXT4-fs (loop5): 1 truncate cleaned up [ 131.392965][T11646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.413177][T11657] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.467493][T11657] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.476311][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3281'. [ 131.490698][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.503057][T11657] Symlink component flag not implemented [ 131.508774][T11657] Symlink component flag not implemented [ 131.524785][T11662] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.536045][T11657] Symlink component flag not implemented (7) [ 131.542602][T11657] Symlink component flag not implemented (116) [ 131.717862][T11711] loop9: detected capacity change from 0 to 128 [ 131.756250][T11720] loop1: detected capacity change from 0 to 512 [ 131.770917][T11720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.792783][T11720] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3291: invalid indirect mapped block 4294967295 (level 0) [ 131.813109][T11720] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3291: invalid indirect mapped block 4294967295 (level 1) [ 131.822618][T11721] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.838493][T11720] EXT4-fs (loop1): 1 orphan inode deleted [ 131.844317][T11720] EXT4-fs (loop1): 1 truncate cleaned up [ 131.854988][T11720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.885063][T11737] IPv6: Can't replace route, no match found [ 131.956754][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.015976][T11781] IPv6: Can't replace route, no match found [ 132.142483][T11803] loop6: detected capacity change from 0 to 128 [ 132.590294][T11859] ip6_vti0 speed is unknown, defaulting to 1000 [ 132.969309][ T37] nci: nci_ntf_packet: unknown ntf opcode 0x120 [ 133.161741][T11934] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 133.311945][T11943] ip6_vti0 speed is unknown, defaulting to 1000 [ 133.605811][T11978] loop0: detected capacity change from 0 to 128 [ 133.642287][T11978] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.672128][T11978] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.0.3357: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 133.718874][T11978] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.0.3357: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 133.861404][T10254] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.021986][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 134.022004][ T29] audit: type=1326 audit(134.001:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.058529][ T29] audit: type=1326 audit(134.031:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.081570][ T29] audit: type=1326 audit(134.041:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.104559][ T29] audit: type=1326 audit(134.041:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f2f7c2005 code=0x7ffc0000 [ 134.127504][ T29] audit: type=1326 audit(134.041:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.150508][ T29] audit: type=1326 audit(134.041:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.173690][ T29] audit: type=1326 audit(134.041:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.196707][ T29] audit: type=1326 audit(134.041:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.360443][ T29] audit: type=1326 audit(134.201:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 134.823775][ T29] audit: type=1326 audit(134.811:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f2f7865e7 code=0x7ffc0000 [ 134.905883][T12106] bond2: Unable to set down delay as MII monitoring is disabled [ 134.917481][T12106] bond2 (unregistering): Released all slaves [ 134.960507][T12176] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.206532][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3419'. [ 135.250414][T12236] loop9: detected capacity change from 0 to 512 [ 135.265119][T12236] journal_path: Non-blockdev passed as './bus' [ 135.271477][T12236] EXT4-fs: error: could not find journal device path [ 135.398253][ T9772] nci: nci_ntf_packet: unknown ntf opcode 0x120 [ 135.698234][T12304] loop5: detected capacity change from 0 to 2048 [ 135.708065][T12304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.721251][T12307] bond1: Unable to set down delay as MII monitoring is disabled [ 135.736254][T12307] bond1 (unregistering): Released all slaves [ 135.744474][T12304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.772204][T12304] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 5: comm wÞ£ÿ: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 135.791435][T12304] EXT4-fs (loop5): Remounting filesystem read-only [ 135.807926][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.852416][T12389] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.887627][T12391] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.047638][T12431] loop0: detected capacity change from 0 to 2048 [ 136.055206][T12431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.078295][T12434] bond1: Unable to set down delay as MII monitoring is disabled [ 136.086568][T12431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.101860][T12434] bond1 (unregistering): Released all slaves [ 136.104908][T12479] loop1: detected capacity change from 0 to 4096 [ 136.114843][T12479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.125726][T12479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.140032][T12431] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 5: comm wÞ£ÿ: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 136.159490][T12431] EXT4-fs (loop0): Remounting filesystem read-only [ 136.173638][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3446'. [ 136.211405][T10254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.223034][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3462'. [ 136.249694][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3462'. [ 136.364737][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.416989][T12545] loop1: detected capacity change from 0 to 512 [ 136.461097][T12545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.486388][T12540] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.519592][T12545] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 136.534370][T12545] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #2: comm syz.1.3474: corrupted inode contents [ 136.573533][T12545] EXT4-fs error (device loop1): ext4_dirty_inode:6513: inode #2: comm syz.1.3474: mark_inode_dirty error [ 136.612681][T12545] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #2: comm syz.1.3474: corrupted inode contents [ 136.652404][T12580] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.3474: path /764/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 136.695252][T12580] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.3474: path /764/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 136.721518][T12580] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.3474: path /764/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 136.742439][T12580] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.3474: path /764/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 136.774888][T12580] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.3474: path /764/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 136.803101][T12580] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.3474: path /764/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 136.830275][T12580] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #2: block 18: comm syz.1.3474: lblock 23 mapped to illegal pblock 18 (length 1) [ 136.909977][ T7300] hid_parser_main: 23 callbacks suppressed [ 136.909994][ T7300] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 136.923638][ T7300] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 136.934628][ T7300] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 136.952699][ T7300] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 137.017027][T12618] bond1: Unable to set down delay as MII monitoring is disabled [ 137.054103][T12618] bond1 (unregistering): Released all slaves [ 137.228810][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3496'. [ 137.255876][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3496'. [ 137.327659][T12711] ip6_vti0 speed is unknown, defaulting to 1000 [ 137.335369][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.480491][T12763] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3508'. [ 137.543628][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 137.579861][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 138.125502][T12804] ip6_vti0 speed is unknown, defaulting to 1000 [ 138.313623][T12840] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3528'. [ 138.508579][T12861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.515851][T12861] IPv6: NLM_F_CREATE should be set when creating new route [ 138.523080][T12861] IPv6: NLM_F_CREATE should be set when creating new route [ 138.530288][T12861] IPv6: NLM_F_CREATE should be set when creating new route [ 138.611148][T12871] usb usb1: usbfs: process 12871 (syz.1.3543) did not claim interface 63 before use [ 138.704127][T12881] loop9: detected capacity change from 0 to 1024 [ 138.733347][T12881] EXT4-fs: Ignoring removed bh option [ 138.738808][T12881] EXT4-fs: inline encryption not supported [ 138.766589][T12881] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.791642][T12881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 138.835187][T12881] EXT4-fs error (device loop9): ext4_map_blocks:777: inode #3: block 2: comm syz.9.3548: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.889581][T12881] EXT4-fs error (device loop9): ext4_map_blocks:777: inode #3: block 48: comm syz.9.3548: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.943150][T12881] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3548: Failed to acquire dquot type 0 [ 138.965236][T12906] loop0: detected capacity change from 0 to 1764 [ 138.978829][T12906] iso9660: Unknown parameter 'de' [ 138.984091][T12881] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 138.994469][T12881] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.3548: mark_inode_dirty error [ 139.006879][T12915] netlink: 'syz.6.3561': attribute type 1 has an invalid length. [ 139.022917][T12881] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 139.053130][T12881] EXT4-fs (loop9): 1 orphan inode deleted [ 139.065829][T12881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.078481][ T9772] EXT4-fs error (device loop9): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.103416][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 139.103431][ T29] audit: type=1400 audit(139.091:2841): avc: denied { remount } for pid=12880 comm="syz.9.3548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.130327][ T9772] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 139.138851][ T9772] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 0 [ 139.175422][T12881] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.184871][ T29] audit: type=1400 audit(139.151:2842): avc: denied { append } for pid=12930 comm="syz.6.3567" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.232276][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.314994][ T29] audit: type=1404 audit(139.301:2843): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 139.342219][ T29] audit: type=1400 audit(139.311:2844): avc: denied { recv } for pid=9765 comm="kworker/u8:25" saddr=10.128.0.163 src=30036 daddr=10.128.1.135 dest=35956 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 139.367356][ T29] audit: type=1400 audit(139.311:2845): avc: denied { read write } for pid=9538 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.391013][ T29] audit: type=1404 audit(139.311:2846): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 139.405366][ T29] audit: type=1400 audit(139.321:2847): avc: denied { prog_load } for pid=12950 comm="syz.5.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.424004][ T29] audit: type=1400 audit(139.321:2848): avc: denied { bpf } for pid=12950 comm="syz.5.3576" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.444018][ T29] audit: type=1400 audit(139.321:2849): avc: denied { perfmon } for pid=12950 comm="syz.5.3576" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.467044][T12951] loop5: detected capacity change from 0 to 128 [ 139.531059][T12968] loop6: detected capacity change from 0 to 512 [ 139.544029][T12968] journal_path: Non-blockdev passed as './bus' [ 139.550224][T12968] EXT4-fs: error: could not find journal device path [ 139.728832][T12999] loop9: detected capacity change from 0 to 128 [ 139.744910][T12999] FAT-fs (loop9): Directory bread(block 162) failed [ 139.778260][T12999] FAT-fs (loop9): Directory bread(block 163) failed [ 139.786866][T12999] FAT-fs (loop9): Directory bread(block 164) failed [ 139.793943][T12999] FAT-fs (loop9): Directory bread(block 165) failed [ 139.800848][T12999] FAT-fs (loop9): Directory bread(block 166) failed [ 139.807609][T12999] FAT-fs (loop9): Directory bread(block 167) failed [ 139.814353][T12999] FAT-fs (loop9): Directory bread(block 168) failed [ 139.821216][T12999] FAT-fs (loop9): Directory bread(block 169) failed [ 139.831766][T12999] FAT-fs (loop9): Directory bread(block 162) failed [ 139.847863][T12999] FAT-fs (loop9): Directory bread(block 163) failed [ 139.855064][T12999] bio_check_eod: 214 callbacks suppressed [ 139.855080][T12999] syz.9.3596: attempt to access beyond end of device [ 139.855080][T12999] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 139.874225][T12999] syz.9.3596: attempt to access beyond end of device [ 139.874225][T12999] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 139.931151][T13021] loop9: detected capacity change from 0 to 128 [ 139.947729][T13021] syz.9.3605: attempt to access beyond end of device [ 139.947729][T13021] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 139.975296][T13021] syz.9.3605: attempt to access beyond end of device [ 139.975296][T13021] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 139.988811][T13021] buffer_io_error: 53662 callbacks suppressed [ 139.988832][T13021] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 140.007320][T13021] syz.9.3605: attempt to access beyond end of device [ 140.007320][T13021] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 140.020782][T13021] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 140.034474][T13033] syz.1.3609 (13033) used obsolete PPPIOCDETACH ioctl [ 140.041696][T13021] syz.9.3605: attempt to access beyond end of device [ 140.041696][T13021] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 140.062545][T13021] syz.9.3605: attempt to access beyond end of device [ 140.062545][T13021] loop9: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 140.076057][T13021] Buffer I/O error on dev loop9, logical block 83, lost async page write [ 140.102444][T13021] syz.9.3605: attempt to access beyond end of device [ 140.102444][T13021] loop9: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 140.115993][T13021] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 140.125200][T13021] syz.9.3605: attempt to access beyond end of device [ 140.125200][T13021] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 140.139215][T13021] syz.9.3605: attempt to access beyond end of device [ 140.139215][T13021] loop9: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 140.152666][T13021] Buffer I/O error on dev loop9, logical block 95, lost async page write [ 140.161236][T13021] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 140.183713][T13039] SELinux: failed to load policy [ 140.215037][T13021] Buffer I/O error on dev loop9, logical block 99, lost async page write [ 140.241386][T13021] Buffer I/O error on dev loop9, logical block 100, lost async page write [ 140.253926][T13021] Buffer I/O error on dev loop9, logical block 111, lost async page write [ 140.272798][T13021] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 140.530086][T13089] IPVS: Error connecting to the multicast addr [ 140.678187][T13113] loop5: detected capacity change from 0 to 1024 [ 140.685833][T13113] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 140.706202][T13113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.732604][T13125] x_tables: ip_tables: state.0 match: invalid size 8 (kernel) != (user) 16 [ 140.761584][T13129] __nla_validate_parse: 1 callbacks suppressed [ 140.761600][T13129] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 140.864193][T13131] SELinux: failed to load policy [ 140.917572][T13113] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.3640: inode #209: comm syz.5.3640: iget: illegal inode # [ 140.931431][T13113] EXT4-fs (loop5): Remounting filesystem read-only [ 140.938189][T13113] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1134: inode #19: comm syz.5.3640: cleanup dec ref error -30 [ 140.954699][T13113] EXT4-fs warning (device loop5): ext4_xattr_block_set:2195: inode #19: comm syz.5.3640: dec ref error=-30 [ 140.992741][T13151] batadv0: entered promiscuous mode [ 141.001568][T13149] ip6erspan0: entered promiscuous mode [ 141.010898][T13150] batadv0: left promiscuous mode [ 141.031282][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.151664][T13181] netlink: 'syz.1.3666': attribute type 3 has an invalid length. [ 141.159744][T13181] netlink: 'syz.1.3666': attribute type 3 has an invalid length. [ 141.321776][T13203] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3676'. [ 141.364556][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'. [ 141.390173][T13211] netlink: 'syz.1.3680': attribute type 29 has an invalid length. [ 141.398922][T13211] netlink: 'syz.1.3680': attribute type 29 has an invalid length. [ 141.408537][T13211] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3680'. [ 141.466867][T13223] loop9: detected capacity change from 0 to 1024 [ 141.474021][T13223] EXT4-fs: Ignoring removed orlov option [ 141.482049][T13223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.505038][T13229] IPv6: Can't replace route, no match found [ 141.546181][T13233] SELinux: failed to load policy [ 141.709492][T13251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3696'. [ 141.812288][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.850831][T13266] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.872264][T13265] IPv6: Can't replace route, no match found [ 141.884453][T13269] dummy0: entered allmulticast mode [ 141.894937][T13269] dummy0: left allmulticast mode [ 142.068397][T13299] loop5: detected capacity change from 0 to 2048 [ 142.085964][T13299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.113750][T13299] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3714: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 142.143028][T13299] EXT4-fs (loop5): Remounting filesystem read-only [ 142.160274][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.420774][T13355] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3734'. [ 142.448161][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3736'. [ 143.226182][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3755'. [ 143.255410][T13418] loop5: detected capacity change from 0 to 1024 [ 143.274488][T13418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.336397][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.354924][T13426] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 143.617737][T13462] loop6: detected capacity change from 0 to 128 [ 143.665987][T13466] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 143.726556][T13477] netlink: 'syz.1.3775': attribute type 1 has an invalid length. [ 144.097329][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3801'. [ 144.146724][T13538] loop5: detected capacity change from 0 to 2048 [ 144.158491][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 144.158508][ T29] audit: type=1400 audit(144.141:3282): avc: denied { mounton } for pid=13539 comm="syz.9.3804" path="/255/file0" dev="tmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.167399][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3805'. [ 144.213981][T13538] Alternate GPT is invalid, using primary GPT. [ 144.220385][T13538] loop5: p1 p2 p3 [ 144.224178][T13538] loop5: partition table partially beyond EOD, truncated [ 144.329589][ T29] audit: type=1400 audit(144.311:3283): avc: denied { create } for pid=13570 comm="syz.6.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.350132][ T29] audit: type=1400 audit(144.311:3284): avc: denied { write } for pid=13570 comm="syz.6.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.370260][ T29] audit: type=1400 audit(144.311:3285): avc: denied { read } for pid=13570 comm="syz.6.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.396169][ T29] audit: type=1400 audit(144.381:3286): avc: denied { create } for pid=13572 comm="syz.5.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.418485][ T29] audit: type=1400 audit(144.411:3287): avc: denied { write } for pid=13572 comm="syz.5.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.437575][T13577] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.458350][ T29] audit: type=1400 audit(144.441:3288): avc: denied { create } for pid=13574 comm="syz.6.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.479743][ T29] audit: type=1400 audit(144.441:3289): avc: denied { write } for pid=13574 comm="syz.6.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.499627][ T29] audit: type=1400 audit(144.441:3290): avc: denied { nlmsg_write } for pid=13574 comm="syz.6.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.520774][ T29] audit: type=1400 audit(144.481:3291): avc: denied { sys_module } for pid=13580 comm="syz.6.3817" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 144.582693][T13586] ip6_vti0 speed is unknown, defaulting to 1000 [ 144.852069][T13623] loop5: detected capacity change from 0 to 4096 [ 144.861811][T13623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.893365][T13633] ip6_vti0 speed is unknown, defaulting to 1000 [ 144.904822][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.976192][T13651] netlink: 'syz.6.3834': attribute type 10 has an invalid length. [ 145.000139][T13651] bridge0: port 3(dummy0) entered disabled state [ 145.007153][T13651] dummy0: left promiscuous mode [ 145.012285][T13651] bridge0: port 3(dummy0) entered disabled state [ 145.021331][T13651] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.061767][T13670] loop1: detected capacity change from 0 to 1024 [ 145.079104][T13670] EXT4-fs: Ignoring removed orlov option [ 145.104129][T13670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.190264][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.294276][T13700] loop9: detected capacity change from 0 to 256 [ 145.460996][T13720] ip6_vti0 speed is unknown, defaulting to 1000 [ 145.674696][T13774] netlink: 'syz.1.3862': attribute type 1 has an invalid length. [ 145.762117][T13785] loop9: detected capacity change from 0 to 1764 [ 145.774273][T13785] iso9660: Unknown parameter 'de' [ 145.938319][T13818] IPv6: Can't replace route, no match found [ 146.158167][T13847] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.195306][T13854] loop6: detected capacity change from 0 to 1024 [ 146.211158][T13854] EXT4-fs: Ignoring removed bh option [ 146.233212][T13854] EXT4-fs: inline encryption not supported [ 146.241149][T13854] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.261101][T13854] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 146.279200][T13854] EXT4-fs error (device loop6): ext4_map_blocks:777: inode #3: block 2: comm syz.6.3897: lblock 2 mapped to illegal pblock 2 (length 1) [ 146.307678][T13854] EXT4-fs error (device loop6): ext4_map_blocks:777: inode #3: block 48: comm syz.6.3897: lblock 0 mapped to illegal pblock 48 (length 1) [ 146.324572][T13854] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3897: Failed to acquire dquot type 0 [ 146.336557][T13854] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 146.346130][T13854] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.3897: mark_inode_dirty error [ 146.357526][T13854] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 146.367916][T13854] EXT4-fs (loop6): 1 orphan inode deleted [ 146.374231][T13854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.395117][ T9788] EXT4-fs error (device loop6): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 146.409877][ T9788] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:48: Failed to release dquot type 0 [ 146.424311][T13854] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 146.446827][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.554561][T13912] __nla_validate_parse: 1 callbacks suppressed [ 146.554578][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3911'. [ 146.711908][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3923'. [ 146.760644][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3923'. [ 146.934477][T13953] IPVS: Scheduler module ip_vs_ not found [ 146.961323][T13957] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3930'. [ 147.002661][T13960] loop0: detected capacity change from 0 to 256 [ 147.179333][T13986] batadv0: entered promiscuous mode [ 147.188350][T13985] batadv0: left promiscuous mode [ 147.235461][T13988] loop0: detected capacity change from 0 to 1024 [ 147.243056][T13988] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 147.293899][T13988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.385975][T14002] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 147.409857][T14002] SELinux: failed to load policy [ 147.458276][T14008] ip6erspan0: entered promiscuous mode [ 147.537866][T14006] loop6: detected capacity change from 0 to 8192 [ 147.547114][T13988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.3940: inode #209: comm syz.0.3940: iget: illegal inode # [ 147.563233][T13988] EXT4-fs (loop0): Remounting filesystem read-only [ 147.576025][T13988] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1134: inode #19: comm syz.0.3940: cleanup dec ref error -30 [ 147.590362][T13988] EXT4-fs warning (device loop0): ext4_xattr_block_set:2195: inode #19: comm syz.0.3940: dec ref error=-30 [ 147.732053][T10254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.784735][T14040] rdma_op ffff88811acc1180 conn xmit_rdma 0000000000000000 [ 147.809387][T14042] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 148.003326][T14070] loop6: detected capacity change from 0 to 1024 [ 148.012025][T14070] EXT4-fs: Ignoring removed orlov option [ 148.020824][T14070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.214626][T14088] loop1: detected capacity change from 0 to 256 [ 148.279474][T14093] IPv6: Can't replace route, no match found [ 148.388967][ T5929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.451869][T14108] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3985'. [ 148.460994][T14108] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3985'. [ 148.469965][T14108] netlink: 'syz.0.3985': attribute type 6 has an invalid length. [ 148.477724][T14108] netlink: 'syz.0.3985': attribute type 5 has an invalid length. [ 148.485484][T14108] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3985'. [ 148.516819][T14112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14112 comm=syz.0.3987 [ 148.529500][T14112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14112 comm=syz.0.3987 [ 148.559080][T14109] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.793507][T14140] loop9: detected capacity change from 0 to 256 [ 148.802578][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3991'. [ 148.839252][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3991'. [ 148.934852][T14155] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3996'. [ 149.275135][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 149.275151][ T29] audit: type=1400 audit(149.261:3598): avc: denied { lock } for pid=14183 comm="syz.6.4007" path="socket:[39944]" dev="sockfs" ino=39944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 149.461770][ T29] audit: type=1326 audit(149.441:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.484785][ T29] audit: type=1326 audit(149.441:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.564973][ T29] audit: type=1326 audit(149.481:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.587975][ T29] audit: type=1326 audit(149.481:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.610966][ T29] audit: type=1326 audit(149.481:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.634603][ T29] audit: type=1326 audit(149.481:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.657718][ T29] audit: type=1326 audit(149.481:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.681154][ T29] audit: type=1326 audit(149.481:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.704032][ T29] audit: type=1326 audit(149.481:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.9.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b85ff749 code=0x7ffc0000 [ 149.764421][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.771874][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.779365][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.786814][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.794290][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.801691][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.809132][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.816547][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.824036][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.831444][ T3380] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 149.864954][ T3380] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 149.948679][T14235] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 150.016918][T14238] loop9: detected capacity change from 0 to 8192 [ 150.120009][T14271] loop0: detected capacity change from 0 to 512 [ 150.121918][T14271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.125163][T14271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.200178][T10254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.234912][T14326] vlan0: entered promiscuous mode [ 150.240422][T14325] vlan0: left promiscuous mode [ 150.371093][T14344] ip6_vti0 speed is unknown, defaulting to 1000 [ 150.383377][T14346] loop0: detected capacity change from 0 to 8192 [ 150.643322][T14395] atomic_op ffff88811992c928 conn xmit_atomic 0000000000000000 [ 150.691789][T14399] loop9: detected capacity change from 0 to 1024 [ 150.698914][T14399] EXT4-fs: Ignoring removed orlov option [ 150.707966][T14399] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.755608][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.771323][T14409] netlink: zone id is out of range [ 150.776500][T14409] netlink: zone id is out of range [ 150.782000][T14409] netlink: zone id is out of range [ 150.802337][T14409] netlink: set zone limit has 8 unknown bytes [ 150.863419][T14417] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 151.210208][T14442] loop9: detected capacity change from 0 to 1024 [ 151.227004][T14440] loop1: detected capacity change from 0 to 8192 [ 151.243315][T14442] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.254253][T14442] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 151.273977][T14442] JBD2: no valid journal superblock found [ 151.279821][T14442] EXT4-fs (loop9): Could not load journal inode [ 151.324848][T14442] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 151.383280][T14454] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 151.427221][T14462] loop9: detected capacity change from 0 to 512 [ 151.451687][T14462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.489025][T14462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.596583][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.744396][T14521] __nla_validate_parse: 5 callbacks suppressed [ 151.744446][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 151.858698][T14534] netlink: 'syz.0.4103': attribute type 6 has an invalid length. [ 151.866517][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4103'. [ 151.919339][T14534] bond1 (unregistering): Released all slaves [ 151.949633][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4106'. [ 151.958693][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4106'. [ 151.967808][T14605] netlink: 'syz.9.4106': attribute type 20 has an invalid length. [ 151.981361][ T9765] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.981475][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4106'. [ 151.990695][T14610] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4108'. [ 151.999125][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4106'. [ 152.017017][T14605] netlink: 'syz.9.4106': attribute type 20 has an invalid length. [ 152.025371][ T9790] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.050001][ T9790] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.063582][ T9790] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.127482][T14624] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 152.135929][T14624] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 152.298369][T14644] SELinux: policydb version 38290 does not match my version range 15-35 [ 152.314671][T14644] SELinux: failed to load policy [ 152.407020][T14652] netlink: 'syz.9.4124': attribute type 29 has an invalid length. [ 152.464166][T14660] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 152.587976][T14671] loop1: detected capacity change from 0 to 512 [ 152.615490][T14671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 152.643966][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 152.763075][T14697] rdma_op ffff888129f9c980 conn xmit_rdma 0000000000000000 [ 152.789698][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4143'. [ 153.029500][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.039086][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.065992][T14730] loop5: detected capacity change from 0 to 1024 [ 153.103795][T14730] EXT4-fs: Ignoring removed orlov option [ 153.115950][T14730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.132127][T14738] netlink: 'syz.0.4160': attribute type 13 has an invalid length. [ 153.142502][T14740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14740 comm=syz.1.4159 [ 153.155720][T14738] gretap0: refused to change device tx_queue_len [ 153.176729][T14738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 153.470071][ T3648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.531910][T14765] netlink: 'syz.5.4168': attribute type 4 has an invalid length. [ 153.724025][T14781] netlink: 'syz.9.4175': attribute type 3 has an invalid length. [ 153.728693][T14769] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.776713][T14786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14786 comm=syz.9.4176 [ 154.432778][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 154.432798][ T29] audit: type=1400 audit(154.411:3821): avc: denied { ioctl } for pid=14851 comm="syz.5.4194" path="socket:[40641]" dev="sockfs" ino=40641 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.478170][ T29] audit: type=1400 audit(154.461:3822): avc: denied { create } for pid=14853 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.500503][ T29] audit: type=1400 audit(154.481:3823): avc: denied { mount } for pid=14853 comm=77DEA305FF07 name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 154.572010][ T29] audit: type=1400 audit(154.551:3824): avc: denied { read } for pid=14859 comm="syz.5.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.759173][T14879] loop9: detected capacity change from 0 to 128 [ 154.775051][ T29] audit: type=1400 audit(154.761:3825): avc: denied { watch watch_reads } for pid=14874 comm="syz.6.4202" path="/674/file1" dev="tmpfs" ino=3470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.848824][ T29] audit: type=1400 audit(154.831:3826): avc: denied { mount } for pid=14876 comm="syz.9.4204" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 154.909877][ T29] audit: type=1400 audit(154.891:3827): avc: denied { unmount } for pid=9538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 154.949323][T14887] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 155.008541][ T29] audit: type=1400 audit(154.991:3828): avc: denied { connect } for pid=14899 comm="syz.5.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.030434][ T29] audit: type=1400 audit(155.021:3829): avc: denied { setopt } for pid=14899 comm="syz.5.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.049547][ T29] audit: type=1400 audit(155.021:3830): avc: denied { getopt } for pid=14899 comm="syz.5.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.597471][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4228'. [ 155.960392][T14978] netlink: 'syz.9.4243': attribute type 1 has an invalid length. [ 155.984214][T14962] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.014786][T14978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.070617][T15015] bond1: (slave vlan0): making interface the new active one [ 156.104816][T15015] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 156.151993][ T9790] dummy0: left allmulticast mode [ 156.160804][ T9790] bridge0: port 3(dummy0) entered disabled state [ 156.181015][ T9790] bridge_slave_1: left allmulticast mode [ 156.186917][ T9790] bridge_slave_1: left promiscuous mode [ 156.192728][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.214471][ T9790] bridge_slave_0: left allmulticast mode [ 156.220166][ T9790] bridge_slave_0: left promiscuous mode [ 156.225915][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.278698][ T9790] bridge0 (unregistering): left allmulticast mode [ 156.320221][ T9790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.331952][ T9790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.341120][ T9790] bond0 (unregistering): Released all slaves [ 156.396351][ T9790] tipc: Disabling bearer [ 156.401359][ T9790] tipc: Disabling bearer [ 156.406548][ T9790] tipc: Left network mode [ 156.490185][T14962] chnl_net:caif_netlink_parms(): no params data found [ 156.556535][ T9790] hsr_slave_0: left promiscuous mode [ 156.566343][ T9790] hsr_slave_1: left promiscuous mode [ 156.572075][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.579588][T15148] loop1: detected capacity change from 0 to 1024 [ 156.596588][T15148] EXT4-fs: Ignoring removed orlov option [ 156.596832][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.612116][T15148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.628978][ T9790] pim6reg (unregistering): left allmulticast mode [ 156.697322][ T9790] team0 (unregistering): Port device team_slave_1 removed [ 156.711451][ T9790] team0 (unregistering): Port device team_slave_0 removed [ 156.811066][T14962] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.818286][T14962] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.826184][T14962] bridge_slave_0: entered allmulticast mode [ 156.833138][T14962] bridge_slave_0: entered promiscuous mode [ 156.840473][T14962] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.847651][T14962] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.855146][T14962] bridge_slave_1: entered allmulticast mode [ 156.861720][T14962] bridge_slave_1: entered promiscuous mode [ 156.903380][T14962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.914138][T14962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.955258][T14962] team0: Port device team_slave_0 added [ 156.961742][T14962] team0: Port device team_slave_1 added [ 157.010744][T14962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.017764][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.043929][T14962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.069385][ T9790] IPVS: stop unused estimator thread 0... [ 157.083673][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.096328][T15154] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.111526][T14962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.118653][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.144665][T14962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.195551][ T9790] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.205452][ T9790] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.257412][ T9790] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.267311][ T9790] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.280245][T15358] atomic_op ffff88810e84dd28 conn xmit_atomic 0000000000000000 [ 157.308911][T14962] hsr_slave_0: entered promiscuous mode [ 157.315363][T14962] hsr_slave_1: entered promiscuous mode [ 157.321854][T14962] debugfs: 'hsr0' already exists in 'hsr' [ 157.327701][T14962] Cannot create hsr debugfs directory [ 157.375927][ T9790] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.385722][ T9790] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.479083][ T9790] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.489048][ T9790] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.536000][T15154] chnl_net:caif_netlink_parms(): no params data found [ 157.619527][ T9790] bridge_slave_1: left allmulticast mode [ 157.625281][ T9790] bridge_slave_1: left promiscuous mode [ 157.631052][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.658984][ T9790] bridge_slave_0: left allmulticast mode [ 157.664835][ T9790] bridge_slave_0: left promiscuous mode [ 157.670530][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.815557][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4278'. [ 157.845911][ T9790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.864448][ T9790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.878956][ T9790] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 157.888114][ T9790] bond0 (unregistering): Released all slaves [ 157.900648][ T9790] bond1 (unregistering): (slave batadv1): Releasing active interface [ 157.916580][ T9790] bond1 (unregistering): Released all slaves [ 157.947546][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.954698][T15154] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.972697][T15154] bridge_slave_0: entered allmulticast mode [ 157.980139][T15154] bridge_slave_0: entered promiscuous mode [ 157.989094][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.996485][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.004284][T15154] bridge_slave_1: entered allmulticast mode [ 158.012044][T15154] bridge_slave_1: entered promiscuous mode [ 158.019078][ T9790] tipc: Disabling bearer [ 158.024238][ T9790] tipc: Left network mode [ 158.044495][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.055214][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.124980][T15154] team0: Port device team_slave_0 added [ 158.151453][T15154] team0: Port device team_slave_1 added [ 158.158079][ T9790] hsr_slave_0: left promiscuous mode [ 158.166526][T15648] SELinux: failed to load policy [ 158.177355][ T9790] hsr_slave_1: left promiscuous mode [ 158.195389][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.216675][T15674] loop1: detected capacity change from 0 to 1024 [ 158.233526][T15674] EXT4-fs: inline encryption not supported [ 158.258083][T15674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.271166][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.301839][T15679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15679 comm=syz.9.4287 [ 158.335530][ T9790] team0 (unregistering): Port device team_slave_1 removed [ 158.345556][ T9790] team0 (unregistering): Port device team_slave_0 removed [ 158.361966][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.415281][T14962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.426084][T14962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.435329][T15154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.442291][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.468447][T15154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.487931][T14962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.497668][T14962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.525010][T15154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.532255][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.558481][T15154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.666629][T15154] hsr_slave_0: entered promiscuous mode [ 158.666744][T15757] loop0: detected capacity change from 0 to 512 [ 158.673906][T15154] hsr_slave_1: entered promiscuous mode [ 158.686792][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4300'. [ 158.698385][T14962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.705212][T15772] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 158.706791][T15757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.730095][T14962] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.745608][T15757] EXT4-fs (loop0): 1 truncate cleaned up [ 158.751744][T15757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.771093][ T9765] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.778206][ T9765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.806826][ T9765] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.814005][ T9765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.930101][T14962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.026235][T14962] veth0_vlan: entered promiscuous mode [ 159.051879][T14962] veth1_vlan: entered promiscuous mode [ 159.070859][T14962] veth0_macvtap: entered promiscuous mode [ 159.078786][T14962] veth1_macvtap: entered promiscuous mode [ 159.090513][T14962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.105453][T14962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.118035][ T9765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.135299][ T9765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.168805][ T9765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.196618][ T9766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.210204][T15154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.242175][T15154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.251931][T15154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.252677][T10254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.270193][T15154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.338167][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.349977][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.365348][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.372443][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.387247][T15921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4321'. [ 159.392672][T15154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.406684][T15154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.422709][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.429913][ T9793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.489464][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 159.489479][ T29] audit: type=1326 audit(159.471:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.535651][T15938] loop2: detected capacity change from 0 to 4096 [ 159.552571][T15941] loop0: detected capacity change from 0 to 1024 [ 159.562972][ T29] audit: type=1326 audit(159.511:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.564405][T15938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.585980][ T29] audit: type=1326 audit(159.511:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.586015][ T29] audit: type=1326 audit(159.511:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.586046][ T29] audit: type=1326 audit(159.511:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.586076][ T29] audit: type=1326 audit(159.511:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.607315][T15946] loop1: detected capacity change from 0 to 1024 [ 159.621611][ T29] audit: type=1326 audit(159.511:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.621640][ T29] audit: type=1326 audit(159.511:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.646431][T15941] EXT4-fs: inline encryption not supported [ 159.667404][ T29] audit: type=1326 audit(159.511:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.667461][ T29] audit: type=1326 audit(159.511:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2f78f749 code=0x7ffc0000 [ 159.765931][T15946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.786322][T15154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.818508][T15941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.854766][T15946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.911768][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.923070][T14962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.981166][T10254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.014273][T15154] veth0_vlan: entered promiscuous mode [ 160.026650][T15154] veth1_vlan: entered promiscuous mode [ 160.054362][T15154] veth0_macvtap: entered promiscuous mode [ 160.061890][T15154] veth1_macvtap: entered promiscuous mode [ 160.091319][T15154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.114434][T15154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.128534][ T9779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.144085][ T9779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.157092][ T9766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.184553][ T9766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.246387][T16005] SELinux: failed to load policy [ 160.456222][T16040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4356'. [ 160.611359][T16056] loop1: detected capacity change from 0 to 512 [ 160.665948][T16056] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 160.735883][T16079] loop9: detected capacity change from 0 to 1024 [ 160.742678][T16079] EXT4-fs: inline encryption not supported [ 160.755315][T16079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.773261][T16086] loop0: detected capacity change from 0 to 512 [ 160.779976][T16086] EXT4-fs: Ignoring removed oldalloc option [ 160.790495][T16086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.820087][T10254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.880182][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.959313][T16103] loop9: detected capacity change from 0 to 512 [ 160.969442][T16103] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 161.003882][T16103] EXT4-fs (loop9): 1 truncate cleaned up [ 161.009986][T16103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.343471][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.456595][T16136] loop2: detected capacity change from 0 to 1024 [ 161.463554][T16136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.496750][T16136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.530188][T14962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.556349][T16151] loop2: detected capacity change from 0 to 2048 [ 161.604515][T16151] loop2: p1 < > p4 [ 161.609209][T16151] loop2: p4 size 8388608 extends beyond EOD, truncated [ 161.911866][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4411'. [ 162.065566][T16212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16212 comm=syz.2.4416 [ 162.078255][T16212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16212 comm=syz.2.4416 [ 162.102546][T16213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4415'. [ 162.137019][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4419'. [ 162.168341][ T9766] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.177524][ T9766] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.200881][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4419'. [ 162.215682][ T9766] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.225372][ T9766] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.568608][T16259] loop1: detected capacity change from 0 to 8192 [ 162.619101][T16267] loop0: detected capacity change from 0 to 512 [ 162.639239][T16267] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 162.686811][T16269] loop9: detected capacity change from 0 to 4096 [ 162.715601][T16269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.810165][ T9538] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.908889][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4447'. [ 162.947020][T16304] xt_hashlimit: max too large, truncated to 1048576 [ 163.047758][T16334] loop9: detected capacity change from 0 to 164 [ 163.057475][T16334] rock: directory entry would overflow storage [ 163.063746][T16334] rock: sig=0x4543, size=28, remaining=18 [ 163.071475][T16334] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4456'. [ 163.092534][ T9793] ================================================================== [ 163.100735][ T9793] BUG: KCSAN: data-race in alloc_pid / copy_process [ 163.107349][ T9793] [ 163.109668][ T9793] read-write to 0xffffffff86860008 of 4 bytes by task 9766 on cpu 1: [ 163.117732][ T9793] alloc_pid+0x54c/0x760 [ 163.121974][ T9793] copy_process+0xe25/0x2000 [ 163.126567][ T9793] kernel_clone+0x16c/0x5c0 [ 163.131077][ T9793] user_mode_thread+0x7d/0xb0 [ 163.135762][ T9793] call_usermodehelper_exec_work+0x41/0x160 [ 163.141653][ T9793] process_scheduled_works+0x4ce/0x9d0 [ 163.147123][ T9793] worker_thread+0x582/0x770 [ 163.151711][ T9793] kthread+0x489/0x510 [ 163.155799][ T9793] ret_from_fork+0x122/0x1b0 [ 163.160392][ T9793] ret_from_fork_asm+0x1a/0x30 [ 163.165154][ T9793] [ 163.167472][ T9793] read to 0xffffffff86860008 of 4 bytes by task 9793 on cpu 0: [ 163.175009][ T9793] copy_process+0x1804/0x2000 [ 163.179709][ T9793] kernel_clone+0x16c/0x5c0 [ 163.184220][ T9793] user_mode_thread+0x7d/0xb0 [ 163.188903][ T9793] call_usermodehelper_exec_work+0x41/0x160 [ 163.194792][ T9793] process_scheduled_works+0x4ce/0x9d0 [ 163.200258][ T9793] worker_thread+0x582/0x770 [ 163.204847][ T9793] kthread+0x489/0x510 [ 163.208916][ T9793] ret_from_fork+0x122/0x1b0 [ 163.213509][ T9793] ret_from_fork_asm+0x1a/0x30 [ 163.218271][ T9793] [ 163.220588][ T9793] value changed: 0x80000129 -> 0x8000012a [ 163.226294][ T9793] [ 163.228609][ T9793] Reported by Kernel Concurrency Sanitizer on: [ 163.234751][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: kworker/u8:53 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.246294][ T9793] Tainted: [W]=WARN [ 163.250086][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.260146][ T9793] Workqueue: events_unbound call_usermodehelper_exec_work [ 163.267255][ T9793] ================================================================== [ 163.387051][T16345] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4457'.