last executing test programs: 2m3.266434529s ago: executing program 32 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe8d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x1, @mcast1, @mcast2, 0x8000, 0x0, 0x2000002}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) 1m51.454269829s ago: executing program 33 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1, 0x0, 0xc6e9}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m3.775564067s ago: executing program 34 (id=2063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) 1m2.877716581s ago: executing program 35 (id=2085): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) fallocate(r0, 0x10, 0x1000001, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0x1}) 1m1.6358071s ago: executing program 36 (id=2102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "e8"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 31.232780774s ago: executing program 37 (id=3020): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 26.951381979s ago: executing program 38 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00121100631177fbac141416e000030a44079f03fe8000000000000000000000000000222f050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000000), 0x1, 0x700}, 0xf) 25.407327342s ago: executing program 39 (id=3156): close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000009000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 22.3031139s ago: executing program 40 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 18.784912624s ago: executing program 0 (id=3355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 18.754574074s ago: executing program 0 (id=3357): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) 18.732837055s ago: executing program 0 (id=3358): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 18.673180306s ago: executing program 0 (id=3359): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.643389856s ago: executing program 0 (id=3360): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0xffffffffffffff5a, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 18.423369219s ago: executing program 0 (id=3365): io_uring_setup(0x7fdb, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x80000001}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) 18.39870405s ago: executing program 41 (id=3365): io_uring_setup(0x7fdb, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x80000001}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) 18.106239464s ago: executing program 4 (id=3387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44854}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 18.018702405s ago: executing program 4 (id=3391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 17.931503306s ago: executing program 4 (id=3396): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@empty, @loopback}, &(0x7f00000001c0)=0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), 0x0, 0x1}, 0x20) 17.849913378s ago: executing program 4 (id=3398): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 17.849338638s ago: executing program 4 (id=3399): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getrusage(0x1, &(0x7f0000000040)) 17.382157845s ago: executing program 4 (id=3403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) 17.381619405s ago: executing program 42 (id=3403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) 8.656362118s ago: executing program 6 (id=3658): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x505, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) 8.52528001s ago: executing program 6 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 8.470478901s ago: executing program 6 (id=3664): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) write$qrtrtun(r0, &(0x7f00000003c0)="00009a4bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 8.339792973s ago: executing program 6 (id=3667): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) 8.107141207s ago: executing program 6 (id=3678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) 7.744011802s ago: executing program 6 (id=3694): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpgid(0x0) syz_clone(0x2480, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="11", 0xff64}], 0x1}}], 0x1, 0x40814) 7.743917522s ago: executing program 43 (id=3694): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpgid(0x0) syz_clone(0x2480, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="11", 0xff64}], 0x1}}], 0x1, 0x40814) 5.480695567s ago: executing program 5 (id=3731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) 5.418168968s ago: executing program 5 (id=3732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 5.332226319s ago: executing program 5 (id=3733): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xdfff, 0x4, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9) 5.331690079s ago: executing program 5 (id=3734): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) 4.926368955s ago: executing program 3 (id=3747): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.913731806s ago: executing program 5 (id=3748): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4.846854177s ago: executing program 3 (id=3753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getitimer(0x1, &(0x7f00000001c0)) 4.786532168s ago: executing program 3 (id=3756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x3c00}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 4.753212578s ago: executing program 3 (id=3759): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) 4.671927929s ago: executing program 5 (id=3763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 4.671731249s ago: executing program 44 (id=3763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 4.477792002s ago: executing program 3 (id=3769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffff9, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3c666e106a17c5b9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20) 3.570629846s ago: executing program 3 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r1, &(0x7f0000001980)=[{&(0x7f0000000000)="884146d75ddabdd3ae361629588b8cc285c698b1b3258faec09b3ee1ce81d5653760eea69cf233a11e9cb4a19d00", 0x2e}, {&(0x7f0000000040)="93a25f9eb66015f2e7d4fc8c3b811304d1bb25007b6651b56b8f8f349f4129b1ef51531c5e4b2fbc4a63d39d965579c6483c59c761cabec0693db457292cd042515b95171da1c6ea0c9cdfa0814e2b48acfd817565d5fd6a9fbc20598b584ca7f1407e7bfa37d7cb7bb97ddf9f82e237c5a1e9f7ef971f", 0x77}, {&(0x7f0000000700)="93a77852a9a55a9e00db4fad7124dbd220af34d3fc89255252dda7443d0ae663c5b40494afd7d8a208d5f16080751ee799819c932938aa9c7ddce03c75dc066cc157cbd0518735bb270b679ce2826912fd5fcbc9e9bd423ff71920b049374c2069bdccc44338f15db9fad5e5605368d7bd780210058f7564d3466505c9a94c2830787baeee999898340b436c8dfb4eb7632692c1f855ff726ef283d4ef6984d7b3d1c2c36cee1b2ce95b0b485ad5e636d976f982509072bccd9c", 0xba}, {&(0x7f0000000800)="7154cb91e231d4c94a379e696ec4707b08709688e8b43649b7535168e658683b62ad504d3b547c61571469673b4852261060095aa37d868df64ca60cbbf350edcf06b034c985d03efaf86e65ed4c9331c9efdb35db44260502fc28411fc56a78ecadacd2bc3f0c45e669c95e2f5bfd531b4390b7f02134c8139949672c2b88e8b5545dfc609a6cf3bac227c27de5", 0x8e}, {&(0x7f00000008c0)="f2bbc5b580a394d6130a5c3f4dd9757249fb5aa0ce9613d29727eebb06a9bbea1952c80ca41d45d4697b6c0e867b6710d801a9a1ed56bfadf16479814eff41b2f93488010d99a9a73823252ac8eb40edec7c3acd34186db7d9d7505cd8617d9bb8080061a9f14bae34f28ac319def691ec0f8e6403bc071629236ff22ca5852ab0", 0x81}, {&(0x7f0000000100)="b8960c2939dd3a5ca1658e17bd1233885aa5", 0x12}, {&(0x7f0000000980)="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", 0x179}], 0x7, 0x8, 0x365) 3.527575817s ago: executing program 45 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r1, &(0x7f0000001980)=[{&(0x7f0000000000)="884146d75ddabdd3ae361629588b8cc285c698b1b3258faec09b3ee1ce81d5653760eea69cf233a11e9cb4a19d00", 0x2e}, {&(0x7f0000000040)="93a25f9eb66015f2e7d4fc8c3b811304d1bb25007b6651b56b8f8f349f4129b1ef51531c5e4b2fbc4a63d39d965579c6483c59c761cabec0693db457292cd042515b95171da1c6ea0c9cdfa0814e2b48acfd817565d5fd6a9fbc20598b584ca7f1407e7bfa37d7cb7bb97ddf9f82e237c5a1e9f7ef971f", 0x77}, {&(0x7f0000000700)="93a77852a9a55a9e00db4fad7124dbd220af34d3fc89255252dda7443d0ae663c5b40494afd7d8a208d5f16080751ee799819c932938aa9c7ddce03c75dc066cc157cbd0518735bb270b679ce2826912fd5fcbc9e9bd423ff71920b049374c2069bdccc44338f15db9fad5e5605368d7bd780210058f7564d3466505c9a94c2830787baeee999898340b436c8dfb4eb7632692c1f855ff726ef283d4ef6984d7b3d1c2c36cee1b2ce95b0b485ad5e636d976f982509072bccd9c", 0xba}, {&(0x7f0000000800)="7154cb91e231d4c94a379e696ec4707b08709688e8b43649b7535168e658683b62ad504d3b547c61571469673b4852261060095aa37d868df64ca60cbbf350edcf06b034c985d03efaf86e65ed4c9331c9efdb35db44260502fc28411fc56a78ecadacd2bc3f0c45e669c95e2f5bfd531b4390b7f02134c8139949672c2b88e8b5545dfc609a6cf3bac227c27de5", 0x8e}, {&(0x7f00000008c0)="f2bbc5b580a394d6130a5c3f4dd9757249fb5aa0ce9613d29727eebb06a9bbea1952c80ca41d45d4697b6c0e867b6710d801a9a1ed56bfadf16479814eff41b2f93488010d99a9a73823252ac8eb40edec7c3acd34186db7d9d7505cd8617d9bb8080061a9f14bae34f28ac319def691ec0f8e6403bc071629236ff22ca5852ab0", 0x81}, {&(0x7f0000000100)="b8960c2939dd3a5ca1658e17bd1233885aa5", 0x12}, {&(0x7f0000000980)="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", 0x179}], 0x7, 0x8, 0x365) 2.331726115s ago: executing program 8 (id=3830): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x45}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.888149681s ago: executing program 2 (id=3803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) close_range(r1, r2, 0x0) 1.838202602s ago: executing program 2 (id=3836): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.756053874s ago: executing program 2 (id=3843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11, 0x0, 0x0, 0x800000}, 0x80) 1.704647175s ago: executing program 7 (id=3845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 1.659006135s ago: executing program 2 (id=3847): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wg0\x00'}}, 0x1e) close(r0) 1.566334777s ago: executing program 2 (id=3848): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") 1.503988948s ago: executing program 7 (id=3858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) 1.503704788s ago: executing program 8 (id=3849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 1.494262108s ago: executing program 7 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x20000b, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) 1.472214698s ago: executing program 8 (id=3851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.412512659s ago: executing program 7 (id=3854): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) lseek(r0, 0x2, 0x4) 1.371108259s ago: executing program 2 (id=3855): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capset(0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 1.32300978s ago: executing program 8 (id=3859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.236819912s ago: executing program 8 (id=3861): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.175265013s ago: executing program 7 (id=3864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffffefb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2fd, 0x4, 0x2, 0x9, 0x4, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 1.169712073s ago: executing program 1 (id=3865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x543f}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 908.975617ms ago: executing program 1 (id=3868): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x8, 0x0, 0x0, 'queue1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x0, 0xc, 0x0, 'queue0\x00'}) 886.697237ms ago: executing program 1 (id=3869): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, 0x0, r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000640)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 869.134497ms ago: executing program 9 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 858.417537ms ago: executing program 1 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 845.525218ms ago: executing program 9 (id=3872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) msgsnd(0x0, 0x0, 0xc56, 0x0) 845.064827ms ago: executing program 7 (id=3873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff2}, {0x0, 0x8}, {0x5, 0x10}}}, 0x24}}, 0x4800) 830.544978ms ago: executing program 1 (id=3874): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) shutdown(r0, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6f) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610042b97c1feaf3a305a5e77300dd104cf80acf61b3e6b41c69fca786a2163431cf2d0b5f8372b1d7dcc12ca0d6eec3444d9545a535e8a48807e77537588fea604addc1c6416c44dc969075c43eb101d1b89a0a7d6b03ca8eac10fd6f54bd46cbbac4fff15b6a098f18fe8e9b18f82abc25be3ed3545e8905fbff776049955bf87a8d2ae05f7e5aaf4f7b000000000000"], 0x0, 0x28, 0x0, 0x8000000, 0x0, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 782.511018ms ago: executing program 9 (id=3875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) 574.889082ms ago: executing program 9 (id=3876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 40.36332ms ago: executing program 9 (id=3877): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 21.24229ms ago: executing program 8 (id=3878): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 419.93µs ago: executing program 1 (id=3879): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=3880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): tag 0x0 [ 122.053346][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.060823][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.068338][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.074067][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 122.074083][ T29] audit: type=1400 audit(1750726800.426:3353): avc: denied { mounton } for pid=11074 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 122.075755][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.111231][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.118708][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.126607][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.134210][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.141739][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.149330][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.156748][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.164369][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.171912][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.176590][ T29] audit: type=1400 audit(1750726800.531:3354): avc: denied { sys_module } for pid=11074 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 122.179543][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.208311][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.215850][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.223320][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.230740][ T3361] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 122.238678][ T3361] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.263653][ T9318] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.303550][ T29] audit: type=1400 audit(1750726800.636:3355): avc: denied { write } for pid=11085 comm="syz.3.3017" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 122.354313][ T9318] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.410548][ T29] audit: type=1400 audit(1750726800.773:3356): avc: denied { setopt } for pid=11100 comm="syz.0.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.419602][T11097] bond3: entered promiscuous mode [ 122.435353][T11097] bond3: entered allmulticast mode [ 122.443152][T11097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.457220][T11097] bond3 (unregistering): Released all slaves [ 122.468425][T11108] netem: change failed [ 122.475966][ T9318] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.549306][ T29] audit: type=1326 audit(1750727056.919:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.8.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 122.573177][ T29] audit: type=1326 audit(1750727056.919:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.8.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 122.656674][ T29] audit: type=1326 audit(1750727056.919:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.8.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 122.681205][ T29] audit: type=1326 audit(1750727056.919:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.8.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 122.705197][ T29] audit: type=1326 audit(1750727056.919:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.8.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 122.729029][ T29] audit: type=1326 audit(1750727056.919:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.8.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 122.783602][T11074] chnl_net:caif_netlink_parms(): no params data found [ 122.814676][ T9318] bridge_slave_1: left allmulticast mode [ 122.820469][ T9318] bridge_slave_1: left promiscuous mode [ 122.826177][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.854290][ T9318] bridge_slave_0: left allmulticast mode [ 122.860008][ T9318] bridge_slave_0: left promiscuous mode [ 122.865871][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.882144][T11140] loop8: detected capacity change from 0 to 128 [ 122.897006][T11140] EXT4-fs: Ignoring removed nobh option [ 122.928507][T11140] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.967295][T11140] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.967812][T11149] loop3: detected capacity change from 0 to 8192 [ 123.066458][T11157] random: crng reseeded on system resumption [ 123.101881][ T8779] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.131341][ T9318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.157140][ T9318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.175082][ T9318] bond0 (unregistering): Released all slaves [ 123.184070][T11170] loop8: detected capacity change from 0 to 512 [ 123.206549][T11170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.236601][T11170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.254033][T11170] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.271306][ T9318] hsr_slave_0: left promiscuous mode [ 123.283599][ T9318] hsr_slave_1: left promiscuous mode [ 123.294948][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.302504][ T9318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.330000][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.341132][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.348619][ T9318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.381276][ T9318] veth1_macvtap: left promiscuous mode [ 123.400309][ T9318] veth0_macvtap: left promiscuous mode [ 123.423863][ T9318] veth1_vlan: left promiscuous mode [ 123.449992][ T9318] veth0_vlan: left promiscuous mode [ 123.608109][ T9318] team0 (unregistering): Port device team_slave_1 removed [ 123.664553][ T9318] team0 (unregistering): Port device team_slave_0 removed [ 123.726489][T11074] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.733795][T11074] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.761238][T11074] bridge_slave_0: entered allmulticast mode [ 123.775711][T11074] bridge_slave_0: entered promiscuous mode [ 123.808231][T11074] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.815576][T11074] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.833174][T11074] bridge_slave_1: entered allmulticast mode [ 123.854612][T11074] bridge_slave_1: entered promiscuous mode [ 123.903783][T11074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.924283][T11074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.951509][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3067'. [ 123.981128][T11209] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 123.993955][T11074] team0: Port device team_slave_0 added [ 124.015542][T11074] team0: Port device team_slave_1 added [ 124.043705][T11214] loop7: detected capacity change from 0 to 128 [ 124.091460][T11074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.098457][T11074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.125007][T11074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.146358][T11218] loop7: detected capacity change from 0 to 8192 [ 124.176514][T11074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.183636][T11074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.210295][T11074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.280027][T11074] hsr_slave_0: entered promiscuous mode [ 124.286447][T11074] hsr_slave_1: entered promiscuous mode [ 124.302407][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3066'. [ 124.385575][T11203] netlink: 'syz.3.3066': attribute type 4 has an invalid length. [ 124.517047][T11241] loop3: detected capacity change from 0 to 512 [ 124.524442][T11241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.541699][T11241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.554979][T11241] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.591515][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.663947][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3086'. [ 124.697384][T11261] netlink: 'syz.0.3088': attribute type 6 has an invalid length. [ 124.727760][T11265] netlink: 'syz.8.3091': attribute type 13 has an invalid length. [ 124.757779][T11271] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3094'. [ 124.800563][T11265] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.807845][T11265] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.879076][T11265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.894209][T11265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.956499][T11265] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.965809][T11265] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.974929][T11265] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.984011][T11265] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.050309][T11074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.061865][T11074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.072815][T11074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.089148][T11074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.149665][T11295] loop3: detected capacity change from 0 to 1024 [ 125.152327][T11074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.169293][T11295] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 125.183089][T11074] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.206621][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.213782][ T9314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.225697][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.232841][ T9314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.320877][T11310] loop3: detected capacity change from 0 to 512 [ 125.346110][T11310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.374953][T11310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 125.375036][T11074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.396300][T11310] System zones: 1-12 [ 125.418439][T11310] EXT4-fs (loop3): 1 orphan inode deleted [ 125.424237][T11310] EXT4-fs (loop3): 1 truncate cleaned up [ 125.441030][T11310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.500777][T11310] loop3: detected capacity change from 512 to 0 [ 125.509976][T11074] veth0_vlan: entered promiscuous mode [ 125.520765][T11310] bio_check_eod: 13228 callbacks suppressed [ 125.520783][T11310] syz.3.3109: attempt to access beyond end of device [ 125.520783][T11310] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 125.545190][T11074] veth1_vlan: entered promiscuous mode [ 125.563190][T11074] veth0_macvtap: entered promiscuous mode [ 125.569679][T11310] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.3.3109: error -5 reading directory block [ 125.587211][T11074] veth1_macvtap: entered promiscuous mode [ 125.598492][T11074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.613472][T11310] syz.3.3109: attempt to access beyond end of device [ 125.613472][T11310] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 125.628545][T11074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.636335][T11310] syz.3.3109: attempt to access beyond end of device [ 125.636335][T11310] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 125.650862][T11074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.659793][T11074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.668604][T11074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.675350][T11310] syz.3.3109: attempt to access beyond end of device [ 125.675350][T11310] loop3: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 125.677469][T11074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.701574][T11310] EXT4-fs error (device loop3): ext4_get_inode_loc:4930: inode #2: block 5: comm syz.3.3109: unable to read itable block [ 125.716536][T11310] syz.3.3109: attempt to access beyond end of device [ 125.716536][T11310] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 125.729961][T11310] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 125.738599][T11310] EXT4-fs (loop3): I/O error while writing superblock [ 125.745465][T11310] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: IO failure [ 125.759826][T11310] syz.3.3109: attempt to access beyond end of device [ 125.759826][T11310] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 125.773240][T11310] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 125.775747][T11333] veth1_to_bond: entered allmulticast mode [ 125.788711][T11310] EXT4-fs (loop3): I/O error while writing superblock [ 125.790316][T11333] veth1_to_bond: entered promiscuous mode [ 125.795507][T11310] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3109: mark_inode_dirty error [ 125.803911][T11333] veth1_to_bond: left promiscuous mode [ 125.815564][T11310] syz.3.3109: attempt to access beyond end of device [ 125.815564][T11310] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 125.818273][T11333] veth1_to_bond: left allmulticast mode [ 125.831464][T11310] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 125.845939][T11310] EXT4-fs (loop3): I/O error while writing superblock [ 125.905192][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3116'. [ 125.912825][ T8583] syz-executor: attempt to access beyond end of device [ 125.912825][ T8583] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 125.940143][ T8583] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 125.989862][ T9347] kworker/u8:58: attempt to access beyond end of device [ 125.989862][ T9347] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 126.004376][ T9347] kworker/u8:58: attempt to access beyond end of device [ 126.004376][ T9347] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 126.019232][ T9347] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4915: inode #2: block 5: comm kworker/u8:58: unable to read itable block [ 126.033452][ T9347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 126.042558][ T9347] EXT4-fs (loop3): I/O error while writing superblock [ 126.050205][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.060021][ T8583] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 126.069521][ T8583] EXT4-fs (loop3): I/O error while writing superblock [ 126.092341][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3122'. [ 126.280103][ T9339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.333679][ T9339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.371097][ T9339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.410926][ T9339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.455365][T11363] chnl_net:caif_netlink_parms(): no params data found [ 126.499309][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.506693][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.514917][T11363] bridge_slave_0: entered allmulticast mode [ 126.521583][T11363] bridge_slave_0: entered promiscuous mode [ 126.532781][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.540015][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.548337][T11363] bridge_slave_1: entered allmulticast mode [ 126.557062][T11363] bridge_slave_1: entered promiscuous mode [ 126.573612][ T9339] dummy0: left allmulticast mode [ 126.578925][ T9339] bridge0: port 3(dummy0) entered disabled state [ 126.585971][ T9339] bridge_slave_1: left allmulticast mode [ 126.591790][ T9339] bridge_slave_1: left promiscuous mode [ 126.597521][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.607995][ T9339] bridge_slave_0: left allmulticast mode [ 126.613767][ T9339] bridge_slave_0: left promiscuous mode [ 126.619695][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.680119][ T9339] bond2 (unregistering): (slave gretap1): Releasing active interface [ 126.712451][ T9339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.724144][ T9339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.734073][ T9339] bond0 (unregistering): Released all slaves [ 126.742863][ T9339] bond1 (unregistering): Released all slaves [ 126.750795][ T9339] bond2 (unregistering): Released all slaves [ 126.764252][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.778532][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.800851][T11363] team0: Port device team_slave_0 added [ 126.808478][T11363] team0: Port device team_slave_1 added [ 126.825810][ T9339] hsr_slave_0: left promiscuous mode [ 126.831566][ T9339] hsr_slave_1: left promiscuous mode [ 126.840506][ T9339] veth1_vlan: left promiscuous mode [ 126.846979][ T9339] veth0_vlan: left promiscuous mode [ 126.918727][ T9339] team0 (unregistering): Port device team_slave_1 removed [ 126.931118][T11397] random: crng reseeded on system resumption [ 126.937927][ T9339] team0 (unregistering): Port device team_slave_0 removed [ 126.956993][T11399] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3138'. [ 126.998809][T11401] loop7: detected capacity change from 0 to 512 [ 127.010903][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 127.010919][ T29] audit: type=1326 audit(1750727061.602:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.8.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 127.053536][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.060553][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.086867][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.093282][ T29] audit: type=1326 audit(1750727061.602:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.8.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 127.100214][T11401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.122234][ T29] audit: type=1326 audit(1750727061.602:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.8.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 127.136311][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.155836][ T29] audit: type=1326 audit(1750727061.602:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.8.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 127.155898][ T29] audit: type=1326 audit(1750727061.602:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.8.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 127.210669][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.236857][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.251541][T11401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 127.259670][T11401] System zones: 1-12 [ 127.264752][T11401] EXT4-fs (loop7): 1 orphan inode deleted [ 127.270538][T11401] EXT4-fs (loop7): 1 truncate cleaned up [ 127.276698][T11401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.346836][T11363] hsr_slave_0: entered promiscuous mode [ 127.355225][T11363] hsr_slave_1: entered promiscuous mode [ 127.362301][T11363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.370623][T11363] Cannot create hsr debugfs directory [ 127.371992][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'. [ 127.386654][T11401] loop7: detected capacity change from 512 to 0 [ 127.399225][T11401] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.7.3139: error -5 reading directory block [ 127.414060][T11401] EXT4-fs error (device loop7): ext4_get_inode_loc:4930: inode #2: block 5: comm syz.7.3139: unable to read itable block [ 127.459266][T11401] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 127.482920][T11401] EXT4-fs (loop7): I/O error while writing superblock [ 127.489800][T11401] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: IO failure [ 127.527077][T11401] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 127.538489][T11363] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.542047][T11401] EXT4-fs (loop7): I/O error while writing superblock [ 127.555667][T11401] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3139: mark_inode_dirty error [ 127.572242][T11401] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 127.582048][T11401] EXT4-fs (loop7): I/O error while writing superblock [ 127.610398][T11363] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.621182][ T8709] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 127.654125][ T9318] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4915: inode #2: block 5: comm kworker/u8:29: unable to read itable block [ 127.676505][ T9318] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 127.692797][ T9318] EXT4-fs (loop7): I/O error while writing superblock [ 127.703646][T11363] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.718045][T10977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.736717][T10977] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 127.749182][T11363] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.778806][T10977] EXT4-fs (loop7): I/O error while writing superblock [ 127.779028][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3146'. [ 127.805996][ T9318] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.850218][T11416] netlink: 'syz.0.3146': attribute type 4 has an invalid length. [ 127.874102][T11363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.894940][ T9318] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.909206][T11363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.915383][T11439] loop2: detected capacity change from 0 to 8192 [ 127.936287][T11363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.956439][T11363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.959276][T11439] loop2: p3 [ 127.966601][T11439] loop2: p3 size 196608 extends beyond EOD, truncated [ 127.976469][ T9318] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.044226][ T29] audit: type=1400 audit(1750727062.683:3446): avc: denied { create } for pid=11459 comm="syz.8.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 128.068951][ T9318] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.085287][ T29] audit: type=1400 audit(1750727062.715:3447): avc: denied { sys_admin } for pid=11459 comm="syz.8.3163" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 128.141226][T11468] lo speed is unknown, defaulting to 1000 [ 128.145807][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.164973][T11468] lo speed is unknown, defaulting to 1000 [ 128.180520][T11468] lo speed is unknown, defaulting to 1000 [ 128.189660][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.198110][T11468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.224200][T11468] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.235770][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.243186][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.278395][T11468] lo speed is unknown, defaulting to 1000 [ 128.285335][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.292416][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.311512][T11468] lo speed is unknown, defaulting to 1000 [ 128.322482][T11468] lo speed is unknown, defaulting to 1000 [ 128.324347][T11363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.338797][T11363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.350433][ T9318] bridge_slave_1: left allmulticast mode [ 128.356132][ T9318] bridge_slave_1: left promiscuous mode [ 128.361937][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.371124][ T29] audit: type=1326 audit(1750727063.030:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11479 comm="syz.2.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc9f1e929 code=0x7ffc0000 [ 128.396279][ T29] audit: type=1326 audit(1750727063.030:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11479 comm="syz.2.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc9f1e929 code=0x7ffc0000 [ 128.420050][ T29] audit: type=1326 audit(1750727063.030:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11479 comm="syz.2.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc9f1e929 code=0x7ffc0000 [ 128.444950][ T9318] bridge_slave_0: left allmulticast mode [ 128.450821][ T9318] bridge_slave_0: left promiscuous mode [ 128.456615][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.588915][ T9318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.598606][ T9318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.608315][ T9318] bond0 (unregistering): Released all slaves [ 128.616421][ T9318] bond1 (unregistering): Released all slaves [ 128.627583][T11445] lo speed is unknown, defaulting to 1000 [ 128.647655][T11468] lo speed is unknown, defaulting to 1000 [ 128.656198][T11468] lo speed is unknown, defaulting to 1000 [ 128.662331][T11468] lo speed is unknown, defaulting to 1000 [ 128.671357][ T9318] IPVS: stopping master sync thread 11209 ... [ 128.675950][T11468] lo speed is unknown, defaulting to 1000 [ 128.701962][T11468] lo speed is unknown, defaulting to 1000 [ 128.722231][T11468] lo speed is unknown, defaulting to 1000 [ 128.735560][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.758845][ T9318] veth1_macvtap: left promiscuous mode [ 128.764481][ T9318] veth0_macvtap: left promiscuous mode [ 128.772911][ T9318] veth1_vlan: left promiscuous mode [ 128.780532][ T9318] veth0_vlan: left promiscuous mode [ 128.852814][T11510] loop2: detected capacity change from 0 to 512 [ 128.867424][ T9318] team0 (unregistering): Port device team_slave_1 removed [ 128.876494][T11510] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 128.889272][ T9318] team0 (unregistering): Port device team_slave_0 removed [ 128.906231][T11510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.929369][T11510] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3177: Block bitmap for bg 0 marked uninitialized [ 128.944183][T11510] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 128.956178][T11445] chnl_net:caif_netlink_parms(): no params data found [ 128.964666][T11510] EXT4-fs (loop2): 1 orphan inode deleted [ 128.975331][T11517] netem: incorrect gi model size [ 128.975816][T11510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.980465][T11517] netem: change failed [ 129.037145][T11510] vxcan0: tx address claim with different name [ 129.087647][T11445] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.095117][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.106037][T11074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.117123][T11535] loop8: detected capacity change from 0 to 1024 [ 129.120593][T11445] bridge_slave_0: entered allmulticast mode [ 129.132408][T11445] bridge_slave_0: entered promiscuous mode [ 129.140797][T11537] siw: device registration error -23 [ 129.146042][T11445] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.153330][T11445] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.160867][T11445] bridge_slave_1: entered allmulticast mode [ 129.167394][T11445] bridge_slave_1: entered promiscuous mode [ 129.175326][T11535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.200035][T11445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.201575][T11535] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.221837][T11445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.264849][T11445] team0: Port device team_slave_0 added [ 129.271047][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.281089][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3188'. [ 129.302314][T11445] team0: Port device team_slave_1 added [ 129.344690][T11445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.351734][T11445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.377848][T11445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.452467][T11445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.459632][T11445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.485729][T11445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.510655][T11363] veth0_vlan: entered promiscuous mode [ 129.569424][T11445] hsr_slave_0: entered promiscuous mode [ 129.577701][T11445] hsr_slave_1: entered promiscuous mode [ 129.591658][T11445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.599452][T11445] Cannot create hsr debugfs directory [ 129.611258][T11363] veth1_vlan: entered promiscuous mode [ 129.625802][T11573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3196'. [ 129.666165][T11363] veth0_macvtap: entered promiscuous mode [ 129.675759][T11575] netlink: 'syz.8.3197': attribute type 21 has an invalid length. [ 129.692267][T11363] veth1_macvtap: entered promiscuous mode [ 129.745659][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.783121][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.791822][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.817888][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.831930][T11363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.840888][T11363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.849838][T11363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.858793][T11363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.979915][T11597] loop2: detected capacity change from 0 to 8192 [ 130.103601][T11445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.130117][T11445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.162779][T11445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.175544][T11445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.236445][T11609] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 130.244055][T11609] FAT-fs (loop2): Filesystem has been set read-only [ 130.253511][T11597] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 130.304159][T11445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.323198][T11445] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.353645][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.360912][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.372259][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.379377][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.399578][T11445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.410025][T11445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.543563][T11652] syzkaller0: entered promiscuous mode [ 130.549234][T11652] syzkaller0: entered allmulticast mode [ 130.636684][T11445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.763677][T11684] loop8: detected capacity change from 0 to 2048 [ 130.807567][T11684] loop8: p1 < > p4 [ 130.817320][T11684] loop8: p4 size 8388608 extends beyond EOD, truncated [ 130.851168][T11445] veth0_vlan: entered promiscuous mode [ 130.860367][T11445] veth1_vlan: entered promiscuous mode [ 130.880315][T11445] veth0_macvtap: entered promiscuous mode [ 130.888339][T11445] veth1_macvtap: entered promiscuous mode [ 130.902566][T11445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.935317][ T9314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.954652][T11445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.969815][T11445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.978743][T11445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.987730][T11445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.996485][T11445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.013669][T11706] ipvlan2: entered promiscuous mode [ 131.021640][T11706] bridge0: port 3(ipvlan2) entered blocking state [ 131.022721][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 131.028177][T11706] bridge0: port 3(ipvlan2) entered disabled state [ 131.037326][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 131.063482][T11706] ipvlan2: entered allmulticast mode [ 131.068908][T11706] bridge0: entered allmulticast mode [ 131.078999][T11706] ipvlan2: left allmulticast mode [ 131.084116][T11706] bridge0: left allmulticast mode [ 131.102967][ T9314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.152591][ T9314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.212133][T11731] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 131.229113][ T9314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.279022][T11736] Â: renamed from pim6reg1 [ 131.289549][T11708] lo speed is unknown, defaulting to 1000 [ 131.356427][ T9314] bridge_slave_1: left allmulticast mode [ 131.362237][ T9314] bridge_slave_1: left promiscuous mode [ 131.367933][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.379189][ T9314] bridge_slave_0: left allmulticast mode [ 131.385133][ T9314] bridge_slave_0: left promiscuous mode [ 131.391041][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.551472][ T9314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.562939][ T9314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.574405][ T9314] bond0 (unregistering): Released all slaves [ 131.588253][T11771] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 131.623473][ T9314] hsr_slave_0: left promiscuous mode [ 131.634396][ T9314] hsr_slave_1: left promiscuous mode [ 131.655560][ T9314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.663154][ T9314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.685399][ T9314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.692984][ T9314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.707163][ T9314] veth1_macvtap: left promiscuous mode [ 131.707188][ T9314] veth0_macvtap: left promiscuous mode [ 131.707232][ T9314] veth1_vlan: left promiscuous mode [ 131.707353][ T9314] veth0_vlan: left promiscuous mode [ 131.866321][ T9314] team0 (unregistering): Port device team_slave_1 removed [ 131.876664][ T9314] team0 (unregistering): Port device team_slave_0 removed [ 131.933215][T11818] loop8: detected capacity change from 0 to 1024 [ 131.933556][T11818] EXT4-fs: Ignoring removed orlov option [ 131.982210][T11818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.051585][T11818] EXT4-fs (loop8): shut down requested (0) [ 132.078793][T11825] sch_tbf: burst 25 is lower than device lo mtu (11337746) ! [ 132.148996][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.174158][T11708] chnl_net:caif_netlink_parms(): no params data found [ 132.178748][T11827] SELinux: failed to load policy [ 132.284367][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.284398][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.284508][T11708] bridge_slave_0: entered allmulticast mode [ 132.285073][T11708] bridge_slave_0: entered promiscuous mode [ 132.285799][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.285847][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.285932][T11708] bridge_slave_1: entered allmulticast mode [ 132.286495][T11708] bridge_slave_1: entered promiscuous mode [ 132.324492][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.325897][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.353524][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 132.353537][ T29] audit: type=1326 audit(1750727067.208:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.0.3295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f819241e929 code=0x0 [ 132.428832][T11708] team0: Port device team_slave_0 added [ 132.487135][T11838] syzkaller0: entered promiscuous mode [ 132.492714][T11838] syzkaller0: entered allmulticast mode [ 132.505202][T11846] Cannot find add_set index 0 as target [ 132.529486][T11708] team0: Port device team_slave_1 added [ 132.535443][T11849] loop5: detected capacity change from 0 to 512 [ 132.546658][T11849] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3298: casefold flag without casefold feature [ 132.560448][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.560977][T11849] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3298: couldn't read orphan inode 15 (err -117) [ 132.567592][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.588409][T11849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.605543][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.641374][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.648564][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.651118][T11853] netlink: 'syz.4.3299': attribute type 2 has an invalid length. [ 132.674971][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.682565][T11853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 132.702242][ T29] audit: type=1400 audit(1750727067.554:3534): avc: denied { setattr } for pid=11847 comm="syz.5.3298" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.730041][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.748116][T11708] hsr_slave_0: entered promiscuous mode [ 132.754411][T11708] hsr_slave_1: entered promiscuous mode [ 132.789499][T11860] vlan2: entered allmulticast mode [ 132.794955][T11862] netlink: 'syz.4.3303': attribute type 1 has an invalid length. [ 132.849891][T11708] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.860407][T11708] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.924144][T11708] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.934719][T11708] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.974130][T11876] netdevsim netdevsim4: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2 [ 132.991994][T11708] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.002571][T11708] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.056840][T11708] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.067211][T11708] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.115465][ T29] audit: type=1326 audit(1750727068.016:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.139206][ T29] audit: type=1326 audit(1750727068.016:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.165620][ T29] audit: type=1326 audit(1750727068.016:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.189313][ T29] audit: type=1326 audit(1750727068.016:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.213027][ T29] audit: type=1326 audit(1750727068.016:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.236696][ T29] audit: type=1326 audit(1750727068.016:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.260304][ T29] audit: type=1326 audit(1750727068.016:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.284034][ T29] audit: type=1326 audit(1750727068.016:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4542e929 code=0x7ffc0000 [ 133.312672][T11898] netlink: 404 bytes leftover after parsing attributes in process `syz.5.3319'. [ 133.350550][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3322'. [ 133.381125][T11708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.398977][T11708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.413578][T11708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.430750][T11708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.538934][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.553698][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3330'. [ 133.599730][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.610925][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.618044][ T9321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.646194][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.653308][ T9321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.687163][T11708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.732799][T11943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3335'. [ 133.741903][T11943] netlink: 'syz.5.3335': attribute type 7 has an invalid length. [ 133.749933][T11943] netlink: 'syz.5.3335': attribute type 8 has an invalid length. [ 133.757815][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3335'. [ 133.851704][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.862459][T11954] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 133.976933][T11974] loop5: detected capacity change from 0 to 1024 [ 133.985314][T11974] EXT4-fs: Ignoring removed orlov option [ 134.002592][T11974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.033673][T11974] EXT4-fs (loop5): shut down requested (0) [ 134.044299][T11708] veth0_vlan: entered promiscuous mode [ 134.055405][T11708] veth1_vlan: entered promiscuous mode [ 134.075539][T11708] veth0_macvtap: entered promiscuous mode [ 134.081966][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.097015][T11708] veth1_macvtap: entered promiscuous mode [ 134.102950][T11986] loop4: detected capacity change from 0 to 8192 [ 134.120557][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.133251][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.143804][T11708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.152855][T11708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.161758][T11708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.171161][T11708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.234324][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 134.336858][T11994] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 134.344582][T11994] FAT-fs (loop4): Filesystem has been set read-only [ 134.357966][T11986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 134.485591][T12014] netlink: 'syz.4.3356': attribute type 10 has an invalid length. [ 134.523807][T12014] team0: Port device dummy0 added [ 134.534554][T12019] netlink: 'syz.4.3356': attribute type 10 has an invalid length. [ 134.547614][T12019] team0: Port device dummy0 removed [ 134.561049][T12019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.688823][T12027] loop4: detected capacity change from 0 to 2048 [ 134.700127][T12027] EXT4-fs: Ignoring removed i_version option [ 134.723906][T12027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.736631][T12027] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.755370][T12027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3363: bg 0: block 345: padding at end of block bitmap is not set [ 134.771095][T12027] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 134.783839][T12027] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.783839][T12027] [ 134.811039][ T9339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.825933][T11445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.864951][ T9339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.947801][ T9339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.000222][ T9339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.112484][ T9339] bridge_slave_1: left allmulticast mode [ 135.118322][ T9339] bridge_slave_1: left promiscuous mode [ 135.124124][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.146956][ T9339] bridge_slave_0: left allmulticast mode [ 135.153000][ T9339] bridge_slave_0: left promiscuous mode [ 135.158756][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.172721][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 135.183868][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 135.278125][T12092] vhci_hcd: invalid port number 96 [ 135.283360][T12092] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 135.307558][T12099] loop6: detected capacity change from 0 to 512 [ 135.335296][T12099] EXT4-fs (loop6): orphan cleanup on readonly fs [ 135.351988][T12099] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3394: bg 0: block 248: padding at end of block bitmap is not set [ 135.375303][T12099] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3394: Failed to acquire dquot type 1 [ 135.389307][ T9339] bond1 (unregistering): (slave gretap2): Releasing active interface [ 135.401014][ T9339] bond2 (unregistering): (slave gretap3): Releasing active interface [ 135.412255][T12099] EXT4-fs (loop6): 1 truncate cleaned up [ 135.419464][T12099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.432263][ T9339] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 135.436821][T12099] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.3394: deleted inode referenced: 12 [ 135.462756][T11708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.609243][ T9339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.621819][ T9339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.632219][ T9339] bond0 (unregistering): (slave team0): Releasing backup interface [ 135.642736][ T9339] bond0 (unregistering): Released all slaves [ 135.651855][ T9339] bond1 (unregistering): Released all slaves [ 135.660945][ T9339] bond2 (unregistering): Released all slaves [ 135.681559][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3400'. [ 135.690838][T12051] lo speed is unknown, defaulting to 1000 [ 135.737999][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.745702][ T9339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.771237][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.778796][ T9339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.793134][ T9339] veth1_macvtap: left promiscuous mode [ 135.798987][ T9339] veth0_macvtap: left promiscuous mode [ 135.804527][ T9339] veth1_vlan: left promiscuous mode [ 135.810006][ T9339] veth0_vlan: left promiscuous mode [ 135.859651][T12119] loop5: detected capacity change from 0 to 164 [ 135.876301][T12119] bio_check_eod: 16 callbacks suppressed [ 135.876319][T12119] syz.5.3404: attempt to access beyond end of device [ 135.876319][T12119] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 135.913970][T12119] syz.5.3404: attempt to access beyond end of device [ 135.913970][T12119] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 135.954534][ T9339] team0 (unregistering): Port device team_slave_1 removed [ 135.968765][ T9339] team0 (unregistering): Port device team_slave_0 removed [ 136.123332][T12051] chnl_net:caif_netlink_parms(): no params data found [ 136.217348][T12121] lo speed is unknown, defaulting to 1000 [ 136.280073][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.287330][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.294882][T12051] bridge_slave_0: entered allmulticast mode [ 136.295477][T12051] bridge_slave_0: entered promiscuous mode [ 136.319595][ T9339] IPVS: stop unused estimator thread 0... [ 136.341961][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.341995][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.342109][T12051] bridge_slave_1: entered allmulticast mode [ 136.342833][T12051] bridge_slave_1: entered promiscuous mode [ 136.409053][ T9339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.425222][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.426627][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.470392][T12051] team0: Port device team_slave_0 added [ 136.470514][T12121] chnl_net:caif_netlink_parms(): no params data found [ 136.476785][T12051] team0: Port device team_slave_1 added [ 136.494091][ T9339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.507620][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.514643][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.514717][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.515617][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.515630][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.515689][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.644213][ T9339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.678505][T12164] SELinux: ebitmap: truncated map [ 136.678842][T12164] SELinux: failed to load policy [ 136.698300][T12051] hsr_slave_0: entered promiscuous mode [ 136.698965][T12051] hsr_slave_1: entered promiscuous mode [ 136.699252][T12051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.699266][T12051] Cannot create hsr debugfs directory [ 136.728937][ T9339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.747774][T12121] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.747806][T12121] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.747973][T12121] bridge_slave_0: entered allmulticast mode [ 136.748546][T12121] bridge_slave_0: entered promiscuous mode [ 136.784305][T12121] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.784361][T12121] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.784446][T12121] bridge_slave_1: entered allmulticast mode [ 136.784946][T12121] bridge_slave_1: entered promiscuous mode [ 136.858455][T12121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.874356][T12174] pim6reg1: entered promiscuous mode [ 136.874432][T12174] pim6reg1: entered allmulticast mode [ 136.912911][T12121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.974281][T12121] team0: Port device team_slave_0 added [ 136.987701][T12182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.021693][T12121] team0: Port device team_slave_1 added [ 137.032049][ T9339] bridge_slave_1: left allmulticast mode [ 137.037761][ T9339] bridge_slave_1: left promiscuous mode [ 137.043446][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.052454][ T9339] bridge_slave_0: left allmulticast mode [ 137.058207][ T9339] bridge_slave_0: left promiscuous mode [ 137.063905][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.142870][ T9339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.152461][ T9339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.162380][ T9339] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 137.171405][ T9339] bond0 (unregistering): Released all slaves [ 137.195199][T12182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.227708][T12121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.234862][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.260904][T12121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.278071][ T9339] hsr_slave_0: left promiscuous mode [ 137.284582][ T9339] hsr_slave_1: left promiscuous mode [ 137.290687][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.298147][ T9339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.305733][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.313259][ T9339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.322935][ T9339] veth1_macvtap: left promiscuous mode [ 137.328524][ T9339] veth0_macvtap: left promiscuous mode [ 137.334285][ T9339] veth1_vlan: left promiscuous mode [ 137.339594][ T9339] veth0_vlan: left promiscuous mode [ 137.411881][ T9339] team0 (unregistering): Port device team_slave_1 removed [ 137.421910][ T9339] team0 (unregistering): Port device team_slave_0 removed [ 137.450986][T12121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.458054][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.484100][T12121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.498148][T12182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.541016][ T29] kauditd_printk_skb: 869 callbacks suppressed [ 137.541032][ T29] audit: type=1326 audit(1750727072.657:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.574877][ T29] audit: type=1326 audit(1750727072.688:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.598642][ T29] audit: type=1326 audit(1750727072.688:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.622450][ T29] audit: type=1326 audit(1750727072.688:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.646049][ T29] audit: type=1326 audit(1750727072.688:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.669671][ T29] audit: type=1326 audit(1750727072.688:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.693664][ T29] audit: type=1326 audit(1750727072.688:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.717239][ T29] audit: type=1326 audit(1750727072.688:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.740846][ T29] audit: type=1326 audit(1750727072.688:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.764422][ T29] audit: type=1326 audit(1750727072.688:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.8.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775785e929 code=0x7ffc0000 [ 137.790843][T12121] hsr_slave_0: entered promiscuous mode [ 137.797123][T12121] hsr_slave_1: entered promiscuous mode [ 137.803103][T12121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.811788][T12121] Cannot create hsr debugfs directory [ 137.820672][T12208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.836420][T12182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.864079][T12211] loop6: detected capacity change from 0 to 764 [ 137.871339][T12211] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 137.899622][T12182] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.919305][T12182] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.932844][T12182] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.955790][T12182] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.069574][T12051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.084895][T12229] Invalid ELF header magic: != ELF [ 138.097140][T12051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.113038][T12235] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12235 comm=syz.5.3449 [ 138.118327][T12051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.136494][T12051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.162467][T12241] netlink: 'syz.5.3450': attribute type 1 has an invalid length. [ 138.199034][T12247] smc: net device bond0 applied user defined pnetid SYZ2 [ 138.206961][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.215263][T12247] smc: net device bond0 erased user defined pnetid SYZ2 [ 138.241761][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.262667][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.269827][ T9352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.288994][T12051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.299535][T12051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.312893][ T9352] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.320001][ T9352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.382685][T12121] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 138.393667][T12121] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 138.408387][T12121] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 138.420332][T12267] loop8: detected capacity change from 0 to 512 [ 138.429685][T12121] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 138.437064][T12267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.453588][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.472489][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.539156][T12121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.564634][T12121] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.579884][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.587056][ T9318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.596115][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.603256][ T9318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.616966][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3466'. [ 138.633593][T12051] veth0_vlan: entered promiscuous mode [ 138.649028][T12051] veth1_vlan: entered promiscuous mode [ 138.668389][T12051] veth0_macvtap: entered promiscuous mode [ 138.679300][T12051] veth1_macvtap: entered promiscuous mode [ 138.703943][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.713978][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.730569][T12051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.739533][T12051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.748341][T12051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.757199][T12051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.779865][T12121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.901101][T12326] lo speed is unknown, defaulting to 1000 [ 139.029676][T12121] veth0_vlan: entered promiscuous mode [ 139.048602][T12121] veth1_vlan: entered promiscuous mode [ 139.096950][T12121] veth0_macvtap: entered promiscuous mode [ 139.117687][T12121] veth1_macvtap: entered promiscuous mode [ 139.134050][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3483'. [ 139.144530][T12121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.163161][T12350] macvtap1: entered promiscuous mode [ 139.168501][T12350] erspan0: entered promiscuous mode [ 139.173935][T12350] macvtap1: entered allmulticast mode [ 139.179386][T12350] erspan0: entered allmulticast mode [ 139.195451][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3483'. [ 139.210849][T12121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.233649][T12121] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.242453][T12121] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.251216][T12121] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.260033][T12121] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.441366][T12373] vhci_hcd: default hub control req: 6031 v09fa i0008 l0 [ 139.457513][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3490'. [ 139.499083][T12376] netlink: 'syz.9.3492': attribute type 1 has an invalid length. [ 139.507153][T12376] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3492'. [ 139.599665][T12388] loop5: detected capacity change from 0 to 1024 [ 139.612046][T12388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.631012][T12388] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 139.631107][T12388] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.631107][T12388] [ 139.631123][T12388] EXT4-fs (loop5): Total free blocks count 0 [ 139.631137][T12388] EXT4-fs (loop5): Free/Dirty block details [ 139.631151][T12388] EXT4-fs (loop5): free_blocks=0 [ 139.631164][T12388] EXT4-fs (loop5): dirty_blocks=0 [ 139.631183][T12388] EXT4-fs (loop5): Block reservation details [ 139.631196][T12388] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 139.645505][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.954820][T12415] loop5: detected capacity change from 0 to 164 [ 139.995829][T12417] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.996044][T12417] smc: net device bond0 erased user defined pnetid SYZ2 [ 140.348017][T12453] netlink: 'syz.1.3527': attribute type 2 has an invalid length. [ 140.495479][T12470] capability: warning: `syz.1.3534' uses 32-bit capabilities (legacy support in use) [ 140.539315][T12481] loop5: detected capacity change from 0 to 512 [ 140.549417][T12481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.569515][T12481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.583287][T12481] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.614817][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.673594][T12498] random: crng reseeded on system resumption [ 141.786843][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3576'. [ 141.796208][T12565] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3576'. [ 141.805479][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3576'. [ 141.829272][T12565] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3576'. [ 142.063648][T12575] loop8: detected capacity change from 0 to 512 [ 142.076037][T12575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.114448][T12575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.180716][T12575] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.251747][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.314072][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 142.314088][ T29] audit: type=1326 audit(1750727077.675:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.381547][ T29] audit: type=1326 audit(1750727077.675:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.405986][ T29] audit: type=1326 audit(1750727077.707:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.429890][ T29] audit: type=1326 audit(1750727077.707:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.454256][ T29] audit: type=1326 audit(1750727077.707:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.478066][ T29] audit: type=1326 audit(1750727077.707:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.501600][ T29] audit: type=1326 audit(1750727077.707:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.525267][ T29] audit: type=1326 audit(1750727077.707:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.548951][ T29] audit: type=1326 audit(1750727077.707:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.550684][T12603] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 142.572890][ T29] audit: type=1326 audit(1750727077.707:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.9.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 142.730047][T12613] loop6: detected capacity change from 0 to 128 [ 142.829602][T12621] syz.6.3595: attempt to access beyond end of device [ 142.829602][T12621] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 142.843774][T12621] syz.6.3595: attempt to access beyond end of device [ 142.843774][T12621] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 142.858000][T12621] syz.6.3595: attempt to access beyond end of device [ 142.858000][T12621] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 142.871914][T12621] syz.6.3595: attempt to access beyond end of device [ 142.871914][T12621] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 142.903103][T12621] syz.6.3595: attempt to access beyond end of device [ 142.903103][T12621] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 142.921040][T12627] loop8: detected capacity change from 0 to 256 [ 142.927803][T12621] syz.6.3595: attempt to access beyond end of device [ 142.927803][T12621] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 142.942026][T12621] syz.6.3595: attempt to access beyond end of device [ 142.942026][T12621] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 142.957221][T12621] syz.6.3595: attempt to access beyond end of device [ 142.957221][T12621] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 142.972076][T12621] syz.6.3595: attempt to access beyond end of device [ 142.972076][T12621] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 142.986368][T12621] syz.6.3595: attempt to access beyond end of device [ 142.986368][T12621] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 143.002111][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.010936][T12627] FAT-fs (loop8): Filesystem has been set read-only [ 143.019212][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.028153][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.045791][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.055116][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.064066][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.076310][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.085203][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.094169][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.102928][T12627] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 143.124125][T12627] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 143.141140][T12627] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 143.424684][T12644] bond0: (slave team0): Releasing backup interface [ 143.432820][T12644] bridge_slave_0: left allmulticast mode [ 143.438579][T12644] bridge_slave_0: left promiscuous mode [ 143.444430][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.452767][T12644] bridge_slave_1: left allmulticast mode [ 143.459111][T12644] bridge_slave_1: left promiscuous mode [ 143.464964][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.475524][T12644] bond0: (slave bond_slave_0): Releasing backup interface [ 143.483460][T12644] bond0: (slave bond_slave_1): Releasing backup interface [ 143.491948][T12644] team0: Port device team_slave_0 removed [ 143.498795][T12644] team0: Port device team_slave_1 removed [ 143.512826][T12644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.520781][T12644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.568733][T12648] loop8: detected capacity change from 0 to 512 [ 143.593128][T12648] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.609489][T12648] EXT4-fs (loop8): mount failed [ 143.708364][T12658] tipc: Started in network mode [ 143.713464][T12658] tipc: Node identity 2, cluster identity 3142 [ 143.719674][T12658] tipc: Node number set to 2 [ 143.726765][T12658] tipc: Cannot configure node identity twice [ 143.740315][T12660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12660 comm=syz.8.3616 [ 143.918673][T12674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3623'. [ 143.952583][T12674] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3623'. [ 144.012612][T12680] loop8: detected capacity change from 0 to 512 [ 144.039558][T12680] EXT4-fs (loop8): 1 orphan inode deleted [ 144.047876][T12680] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.061613][ T9321] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 1 [ 144.085149][T12680] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.107673][T12662] Set syz1 is full, maxelem 65536 reached [ 144.279642][T12701] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 144.466061][T12736] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 144.540530][T12746] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.599555][T12752] loop6: detected capacity change from 0 to 512 [ 144.629764][T12752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.643043][T12752] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.657160][T12758] syzkaller0: entered promiscuous mode [ 144.662703][T12758] syzkaller0: entered allmulticast mode [ 144.703167][T12752] loop6: detected capacity change from 512 to 64 [ 144.722639][T11708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.760093][T12762] syzkaller0: refused to change device tx_queue_len [ 144.785673][T12764] ref_ctr_offset mismatch. inode: 0x1aa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 144.817922][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.919200][T12770] loop6: detected capacity change from 0 to 128 [ 144.970719][T12777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12777 comm=syz.8.3669 [ 144.998642][T12770] loop6: detected capacity change from 128 to 0 [ 145.007055][T12780] FAT-fs (loop6): FAT read failed (blocknr 32) [ 145.023194][T12770] FAT-fs (loop6): Directory bread(block 33) failed [ 145.035960][T12770] FAT-fs (loop6): Directory bread(block 34) failed [ 145.042622][T12770] FAT-fs (loop6): Directory bread(block 35) failed [ 145.056421][T12770] FAT-fs (loop6): Directory bread(block 36) failed [ 145.062986][T12770] FAT-fs (loop6): Directory bread(block 37) failed [ 145.077541][T12770] FAT-fs (loop6): Directory bread(block 38) failed [ 145.084371][T12770] FAT-fs (loop6): Directory bread(block 39) failed [ 145.091233][T12770] FAT-fs (loop6): Directory bread(block 40) failed [ 145.140759][T11708] FAT-fs (loop6): Directory bread(block 33) failed [ 145.158339][T12795] loop5: detected capacity change from 0 to 2048 [ 145.177618][ T9352] FAT-fs (loop6): unable to read inode block for updating (i_pos 531) [ 145.193974][ T9352] FAT-fs (loop6): bread failed in fat_clusters_flush [ 145.204279][T11708] FAT-fs (loop6): unable to read boot sector to mark fs as dirty [ 145.296396][T12808] smc: net device bond0 applied user defined pnetid SYZ2 [ 145.303804][T12808] smc: net device bond0 erased user defined pnetid SYZ2 [ 145.342943][T12814] loop5: detected capacity change from 0 to 1024 [ 145.365416][T12818] loop1: detected capacity change from 0 to 128 [ 145.378809][T12814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.431116][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.465022][ T9321] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.508059][T12828] loop5: detected capacity change from 0 to 512 [ 145.541505][T12828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.552372][ T9321] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.566978][T12828] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.579818][T12828] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3693: bg 0: block 248: padding at end of block bitmap is not set [ 145.600188][T12828] EXT4-fs (loop5): Remounting filesystem read-only [ 145.606855][T12828] EXT4-fs (loop5): 1 truncate cleaned up [ 145.613330][T12828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.628352][ T9321] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.648966][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.697348][ T9321] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.700195][T12845] xt_CT: No such helper "pptp" [ 145.788241][ T9321] bridge_slave_1: left allmulticast mode [ 145.793990][ T9321] bridge_slave_1: left promiscuous mode [ 145.799690][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.812712][ T9321] bridge_slave_0: left allmulticast mode [ 145.818485][ T9321] bridge_slave_0: left promiscuous mode [ 145.824312][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.939188][T12860] netlink: 51 bytes leftover after parsing attributes in process `syz.8.3703'. [ 145.964575][ T9321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.975461][ T9321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.986397][ T9321] bond0 (unregistering): Released all slaves [ 145.994536][T12830] lo speed is unknown, defaulting to 1000 [ 146.025044][T12859] syzkaller0: entered promiscuous mode [ 146.030918][T12859] syzkaller0: entered allmulticast mode [ 146.034481][T12865] loop8: detected capacity change from 0 to 512 [ 146.045503][T12865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.068140][ T9321] hsr_slave_0: left promiscuous mode [ 146.076091][T12865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.090451][T12865] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.101196][ T9321] hsr_slave_1: left promiscuous mode [ 146.108230][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.115731][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.123515][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.125142][T12865] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.131041][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.150959][ T9321] veth1_macvtap: left promiscuous mode [ 146.156514][ T9321] veth0_macvtap: left promiscuous mode [ 146.162116][ T9321] veth1_vlan: left promiscuous mode [ 146.167402][ T9321] veth0_vlan: left promiscuous mode [ 146.181599][T12875] usb usb1: usbfs: process 12875 (+}[@) did not claim interface 0 before use [ 146.329477][ T9321] team0 (unregistering): Port device team_slave_1 removed [ 146.342064][ T9321] team0 (unregistering): Port device team_slave_0 removed [ 146.456729][T12895] loop5: detected capacity change from 0 to 512 [ 146.477953][T12830] chnl_net:caif_netlink_parms(): no params data found [ 146.488571][T12895] EXT4-fs (loop5): 1 orphan inode deleted [ 146.496654][T12895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.509512][ T9349] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 146.512516][T12895] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.539210][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.546417][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.553634][T12830] bridge_slave_0: entered allmulticast mode [ 146.560021][T12830] bridge_slave_0: entered promiscuous mode [ 146.566453][T12830] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.573589][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.580960][T12830] bridge_slave_1: entered allmulticast mode [ 146.587187][T12830] bridge_slave_1: entered promiscuous mode [ 146.603230][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.613451][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.631009][T12830] team0: Port device team_slave_0 added [ 146.637813][T12830] team0: Port device team_slave_1 added [ 146.652542][T12830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.659528][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.685565][T12830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.696580][T12830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.703520][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.729611][T12830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.756967][T12830] hsr_slave_0: entered promiscuous mode [ 146.763057][T12830] hsr_slave_1: entered promiscuous mode [ 146.983036][T12830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.991413][T12830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.000092][T12830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.008535][T12830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.023305][T12830] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.030518][T12830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.037914][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.044993][T12830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.057710][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.069506][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.086203][T12916] syzkaller0: entered promiscuous mode [ 147.091811][T12916] syzkaller0: entered allmulticast mode [ 147.118209][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 147.118227][ T29] audit: type=1400 audit(1750727082.714:4669): avc: denied { read write } for pid=12121 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.158983][T12830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.169769][ T29] audit: type=1400 audit(1750727082.714:4670): avc: denied { open } for pid=12121 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.195677][T12830] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.205301][ T29] audit: type=1400 audit(1750727082.777:4671): avc: denied { read write } for pid=12051 comm="syz-executor" name="loop1" dev="devtmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.211401][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.228799][ T29] audit: type=1400 audit(1750727082.777:4672): avc: denied { open } for pid=12051 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.235736][ T9321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.259102][ T29] audit: type=1400 audit(1750727082.777:4673): avc: denied { ioctl } for pid=12051 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=574 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.291541][ T29] audit: type=1400 audit(1750727082.788:4674): avc: denied { ioctl } for pid=8779 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.321651][ T29] audit: type=1400 audit(1750727082.903:4675): avc: denied { unmount } for pid=11363 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 147.323630][T11363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.351599][ T29] audit: type=1400 audit(1750727082.956:4676): avc: denied { map_create } for pid=12925 comm="syz.8.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.371233][ T29] audit: type=1400 audit(1750727082.956:4677): avc: denied { bpf } for pid=12925 comm="syz.8.3735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.387413][T12830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.392029][ T29] audit: type=1400 audit(1750727082.956:4678): avc: denied { map_read map_write } for pid=12925 comm="syz.8.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.402362][T12830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.448222][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.455411][ T9321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.546062][T12929] bridge_slave_0: left promiscuous mode [ 147.551975][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.562126][T12929] bridge_slave_1: left allmulticast mode [ 147.567961][T12929] bridge_slave_1: left promiscuous mode [ 147.573711][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.585703][T12929] bond0: (slave bond_slave_0): Releasing backup interface [ 147.596081][T12929] bond0: (slave bond_slave_1): Releasing backup interface [ 147.608471][T12929] team0: Port device team_slave_0 removed [ 147.619835][T12929] team0: Port device team_slave_1 removed [ 147.626627][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.634120][T12929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.646505][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.653970][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.678545][T12937] veth0: entered promiscuous mode [ 147.684255][T12937] veth0: left promiscuous mode [ 147.699011][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.810984][T12830] veth0_vlan: entered promiscuous mode [ 147.821581][T12830] veth1_vlan: entered promiscuous mode [ 147.855134][T12830] veth0_macvtap: entered promiscuous mode [ 147.863807][T12830] veth1_macvtap: entered promiscuous mode [ 147.886974][T12830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.907032][T12830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.917919][T12830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.926842][T12830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.935725][T12830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.944633][T12830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.955534][T12957] loop5: detected capacity change from 0 to 128 [ 147.999607][T12957] loop5: detected capacity change from 128 to 0 [ 148.006805][T12957] bio_check_eod: 264 callbacks suppressed [ 148.006890][T12957] syz.5.3734: attempt to access beyond end of device [ 148.006890][T12957] loop5: rw=0, sector=32, nr_sectors = 1 limit=0 [ 148.031018][T12957] FAT-fs (loop5): FAT read failed (blocknr 32) [ 148.038964][T12957] syz.5.3734: attempt to access beyond end of device [ 148.038964][T12957] loop5: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 148.052840][T12957] syz.5.3734: attempt to access beyond end of device [ 148.052840][T12957] loop5: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 148.070966][T12957] syz.5.3734: attempt to access beyond end of device [ 148.070966][T12957] loop5: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 148.086627][T12957] syz.5.3734: attempt to access beyond end of device [ 148.086627][T12957] loop5: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 148.108943][T12957] syz.5.3734: attempt to access beyond end of device [ 148.108943][T12957] loop5: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 148.123261][T12957] syz.5.3734: attempt to access beyond end of device [ 148.123261][T12957] loop5: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 148.138810][T12957] syz.5.3734: attempt to access beyond end of device [ 148.138810][T12957] loop5: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 148.158669][T12957] syz.5.3734: attempt to access beyond end of device [ 148.158669][T12957] loop5: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 148.173805][T12957] syz.5.3734: attempt to access beyond end of device [ 148.173805][T12957] loop5: rw=0, sector=33, nr_sectors = 1 limit=0 [ 148.199657][T12957] FAT-fs (loop5): Directory bread(block 33) failed [ 148.206756][T12957] FAT-fs (loop5): Directory bread(block 34) failed [ 148.218270][T12957] FAT-fs (loop5): Directory bread(block 35) failed [ 148.225171][T12957] FAT-fs (loop5): Directory bread(block 36) failed [ 148.232166][T12957] FAT-fs (loop5): Directory bread(block 37) failed [ 148.259707][T12957] FAT-fs (loop5): Directory bread(block 38) failed [ 148.266506][T12957] FAT-fs (loop5): Directory bread(block 39) failed [ 148.278430][T12957] FAT-fs (loop5): Directory bread(block 40) failed [ 148.334371][T11363] FAT-fs (loop5): Directory bread(block 33) failed [ 148.359160][ T9314] FAT-fs (loop5): unable to read inode block for updating (i_pos 531) [ 148.367960][ T9314] FAT-fs (loop5): bread failed in fat_clusters_flush [ 148.379486][T11363] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 148.510843][T13016] loop3: detected capacity change from 0 to 128 [ 148.538292][T13018] bridge_slave_0: left allmulticast mode [ 148.544114][T13018] bridge_slave_0: left promiscuous mode [ 148.549817][T13018] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.561228][T13016] loop3: detected capacity change from 128 to 0 [ 148.578422][T13016] FAT-fs (loop3): FAT read failed (blocknr 32) [ 148.579228][T13018] bridge_slave_1: left allmulticast mode [ 148.590707][T13018] bridge_slave_1: left promiscuous mode [ 148.591286][T13016] FAT-fs (loop3): Directory bread(block 33) failed [ 148.596481][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.620305][T13016] FAT-fs (loop3): Directory bread(block 34) failed [ 148.627561][T13016] FAT-fs (loop3): Directory bread(block 35) failed [ 148.634364][T13021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13021 comm=syz.8.3762 [ 148.634814][T13016] FAT-fs (loop3): Directory bread(block 36) failed [ 148.647341][T13021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13021 comm=syz.8.3762 [ 148.656132][T13016] FAT-fs (loop3): Directory bread(block 37) failed [ 148.666868][T13018] bond0: (slave bond_slave_0): Releasing backup interface [ 148.674783][T13016] FAT-fs (loop3): Directory bread(block 38) failed [ 148.689213][T13016] FAT-fs (loop3): Directory bread(block 39) failed [ 148.690446][T13018] bond0: (slave bond_slave_1): Releasing backup interface [ 148.696007][T13016] FAT-fs (loop3): Directory bread(block 40) failed [ 148.725908][T13018] team0: Port device team_slave_0 removed [ 148.736206][T13018] team0: Port device team_slave_1 removed [ 148.743576][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.751030][T13018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.763701][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.770390][T12830] FAT-fs (loop3): Directory bread(block 33) failed [ 148.771210][T13018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.794155][ T9314] FAT-fs (loop3): unable to read inode block for updating (i_pos 531) [ 148.804155][ T9314] FAT-fs (loop3): bread failed in fat_clusters_flush [ 148.813448][ T9318] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.827876][T12830] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 148.871481][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3771'. [ 148.886333][ T9318] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.903628][T13023] lo speed is unknown, defaulting to 1000 [ 148.913961][T13040] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 148.962478][ T9318] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.988536][T13047] hub 9-0:1.0: USB hub found [ 148.995087][T13047] hub 9-0:1.0: 8 ports detected [ 149.022899][T13023] chnl_net:caif_netlink_parms(): no params data found [ 149.065195][T13058] loop1: detected capacity change from 0 to 512 [ 149.065780][ T9318] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.098810][T13058] EXT4-fs (loop1): 1 orphan inode deleted [ 149.113750][ T9339] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 1 [ 149.114857][T13058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.139132][T13058] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.175380][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.182640][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.194467][T13023] bridge_slave_0: entered allmulticast mode [ 149.201274][T13023] bridge_slave_0: entered promiscuous mode [ 149.209897][T13023] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.216969][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.224771][T13023] bridge_slave_1: entered allmulticast mode [ 149.232590][T12051] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.233933][T13023] bridge_slave_1: entered promiscuous mode [ 149.382473][T13094] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3791'. [ 149.393509][ T9318] bond0 (unregistering): Released all slaves [ 149.403815][T13023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.413043][T13076] veth0: entered promiscuous mode [ 149.418277][T13076] veth0: left promiscuous mode [ 149.431569][T13023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.465796][T13023] team0: Port device team_slave_0 added [ 149.472793][T13023] team0: Port device team_slave_1 added [ 149.492726][T13023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.499797][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.525872][T13023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.536929][ T9318] tipc: Left network mode [ 149.538258][T13023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.548433][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.566933][T13105] loop8: detected capacity change from 0 to 164 [ 149.574463][T13023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.592968][T13105] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.618371][T13107] No such timeout policy "syz1" [ 149.641243][ T9318] hsr_slave_0: left promiscuous mode [ 149.662791][ T9318] hsr_slave_1: left promiscuous mode [ 149.689311][ T9318] veth1_macvtap: left promiscuous mode [ 149.696923][ T9318] veth0_macvtap: left promiscuous mode [ 149.702559][ T9318] veth1_vlan: left promiscuous mode [ 149.708674][ T9318] veth0_vlan: left promiscuous mode [ 149.741399][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3804'. [ 149.770560][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3804'. [ 149.900607][T13023] hsr_slave_0: entered promiscuous mode [ 149.907761][T13023] hsr_slave_1: entered promiscuous mode [ 149.913613][T13023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.921325][T13023] Cannot create hsr debugfs directory [ 150.058552][T13127] lo speed is unknown, defaulting to 1000 [ 150.104442][T13127] chnl_net:caif_netlink_parms(): no params data found [ 150.141465][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.148792][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.157712][T13127] bridge_slave_0: entered allmulticast mode [ 150.164488][T13127] bridge_slave_0: entered promiscuous mode [ 150.171596][T13127] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.178867][T13127] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.186472][T13127] bridge_slave_1: entered allmulticast mode [ 150.193241][T13127] bridge_slave_1: entered promiscuous mode [ 150.213864][T13127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.225066][T13127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.250641][T13127] team0: Port device team_slave_0 added [ 150.258637][T13127] team0: Port device team_slave_1 added [ 150.285818][T13127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.292891][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.319047][T13127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.334603][T13127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.341582][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.367736][T13127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.399796][T13127] hsr_slave_0: entered promiscuous mode [ 150.405969][T13127] hsr_slave_1: entered promiscuous mode [ 150.412303][T13127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.420009][T13127] Cannot create hsr debugfs directory [ 150.452786][T13023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.463289][T13023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.473953][T13023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.484663][T13023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.535950][T13023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.550973][T13023] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.561892][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.568955][ T9352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.579550][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.586646][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.648764][T13023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.682563][T13127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.695804][T13127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.716221][T13127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.728190][T13127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.806320][T13127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.822971][T13127] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.834486][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.841673][ T9352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.856638][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.863834][ T9318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.896846][T13023] veth0_vlan: entered promiscuous mode [ 150.917058][T13023] veth1_vlan: entered promiscuous mode [ 150.941388][T13023] veth0_macvtap: entered promiscuous mode [ 150.949688][T13023] veth1_macvtap: entered promiscuous mode [ 150.958452][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3830'. [ 150.978116][T13023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.989187][T13023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.998450][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.008222][T13023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.017058][T13023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.025826][T13023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.034643][T13023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.121920][T13232] xt_hashlimit: size too large, truncated to 1048576 [ 151.168349][T13127] veth0_vlan: entered promiscuous mode [ 151.182188][T13127] veth1_vlan: entered promiscuous mode [ 151.204710][T13127] veth0_macvtap: entered promiscuous mode [ 151.205670][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3831'. [ 151.246128][T13127] veth1_macvtap: entered promiscuous mode [ 151.260731][T13127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.274004][T13238] vlan2: entered allmulticast mode [ 151.284945][T13127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.296152][T13127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.304959][T13127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.313753][T13127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.322548][T13127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.370260][T13242] veth0: entered promiscuous mode [ 151.375718][T13242] veth0: left promiscuous mode [ 151.441999][T13254] program syz.9.3838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.503417][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.511041][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.518786][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.527317][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.536166][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.544317][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.551896][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.559343][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.566781][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.574215][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.581803][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.589357][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.596839][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.604914][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.612429][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.620015][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.627435][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.634913][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.642511][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.649944][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.657464][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.664940][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.672381][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.679845][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.685329][T13275] loop2: detected capacity change from 0 to 512 [ 151.687435][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.701087][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.708534][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.716010][ T3392] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.725348][ T3392] hid-generic 0000:0000:0000.000D: hidraw0: HID v54.3f Device [syz0] on syz0 [ 151.745821][T13275] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 151.757523][T13275] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.3848: iget: bad i_size value: 12154757448730 [ 151.786622][T13275] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3848: couldn't read orphan inode 13 (err -117) [ 151.805723][T13287] hub 9-0:1.0: USB hub found [ 151.806026][T13275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.842534][T13287] hub 9-0:1.0: 8 ports detected [ 151.859403][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3853'. [ 151.879948][T13127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.897643][T13295] loop7: detected capacity change from 0 to 4096 [ 151.927901][T13295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.947267][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 151.947284][ T29] audit: type=1400 audit(1750727087.785:4862): avc: denied { append } for pid=13300 comm="syz.8.3859" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 151.976895][T13302] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3857'. [ 151.989414][ T29] audit: type=1400 audit(1750727087.827:4863): avc: denied { write } for pid=13293 comm="syz.7.3854" path="/10/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.026971][ T29] audit: type=1400 audit(1750727087.859:4864): avc: denied { setopt } for pid=13306 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.079654][T13023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.095966][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.103517][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.110954][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.118418][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.125858][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.133410][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.140820][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.148345][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.156066][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.163662][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.171048][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.178579][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.185987][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.193872][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.201375][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.208872][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.216435][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.223949][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.231447][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.238902][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.246314][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.253749][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.261281][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.268715][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.276174][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.283648][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.291092][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.298655][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 152.311562][ T3408] hid-generic 0000:0000:0000.000E: hidraw0: HID v54.3f Device [syz0] on syz0 [ 152.413110][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3873'. [ 152.428316][ T29] audit: type=1326 audit(1750727088.289:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.9.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 152.457841][ T29] audit: type=1326 audit(1750727088.289:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.9.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 152.481511][ T29] audit: type=1326 audit(1750727088.289:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.9.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 152.505382][ T29] audit: type=1326 audit(1750727088.310:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.9.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc6bce929 code=0x7ffc0000 [ 152.577838][ T29] audit: type=1400 audit(1750727088.436:4869): avc: denied { ioctl } for pid=13334 comm="syz.9.3875" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.617770][ T29] audit: type=1400 audit(1750727088.478:4870): avc: denied { create } for pid=13338 comm="syz.9.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.618318][T13339] syz.9.3876: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 152.641305][ T29] audit: type=1400 audit(1750727088.478:4871): avc: denied { setopt } for pid=13338 comm="syz.9.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.653664][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.9.3876 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 152.653703][T13339] Tainted: [W]=WARN [ 152.653711][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.653760][T13339] Call Trace: [ 152.653767][T13339] [ 152.653775][T13339] __dump_stack+0x1d/0x30 [ 152.653798][T13339] dump_stack_lvl+0xe8/0x140 [ 152.653821][T13339] dump_stack+0x15/0x1b [ 152.653838][T13339] warn_alloc+0x12b/0x1a0 [ 152.653876][T13339] ? audit_log_end+0x1d7/0x1f0 [ 152.653898][T13339] ? audit_log_end+0x1d7/0x1f0 [ 152.653964][T13339] __vmalloc_node_range_noprof+0x9c/0xe00 [ 152.654016][T13339] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 152.654047][T13339] ? slow_avc_audit+0x104/0x140 [ 152.654074][T13339] ? should_fail_ex+0x30/0x280 [ 152.654103][T13339] ? xskq_create+0x36/0xe0 [ 152.654170][T13339] vmalloc_user_noprof+0x7d/0xb0 [ 152.654201][T13339] ? xskq_create+0x80/0xe0 [ 152.654222][T13339] xskq_create+0x80/0xe0 [ 152.654243][T13339] xsk_init_queue+0x95/0xf0 [ 152.654272][T13339] xsk_setsockopt+0x35c/0x510 [ 152.654292][T13339] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.654311][T13339] __sys_setsockopt+0x181/0x200 [ 152.654420][T13339] __x64_sys_setsockopt+0x64/0x80 [ 152.654453][T13339] x64_sys_call+0x2bd5/0x2fb0 [ 152.654474][T13339] do_syscall_64+0xd2/0x200 [ 152.654491][T13339] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.654527][T13339] ? clear_bhb_loop+0x40/0x90 [ 152.654547][T13339] ? clear_bhb_loop+0x40/0x90 [ 152.654632][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.654653][T13339] RIP: 0033:0x7f3cc6bce929 [ 152.654669][T13339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.654687][T13339] RSP: 002b:00007f3cc5237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.654708][T13339] RAX: ffffffffffffffda RBX: 00007f3cc6df5fa0 RCX: 00007f3cc6bce929 [ 152.654721][T13339] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 152.654734][T13339] RBP: 00007f3cc6c50b39 R08: 0000000000000004 R09: 0000000000000000 [ 152.654800][T13339] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.654812][T13339] R13: 0000000000000000 R14: 00007f3cc6df5fa0 R15: 00007fffc60fdfc8 [ 152.654842][T13339] [ 152.654849][T13339] Mem-Info: [ 152.910160][T13339] active_anon:20880 inactive_anon:13 isolated_anon:0 [ 152.910160][T13339] active_file:8003 inactive_file:17157 isolated_file:0 [ 152.910160][T13339] unevictable:0 dirty:230 writeback:0 [ 152.910160][T13339] slab_reclaimable:3331 slab_unreclaimable:94060 [ 152.910160][T13339] mapped:28901 shmem:17203 pagetables:992 [ 152.910160][T13339] sec_pagetables:0 bounce:0 [ 152.910160][T13339] kernel_misc_reclaimable:0 [ 152.910160][T13339] free:1787072 free_pcp:10713 free_cma:0 [ 152.955723][T13339] Node 0 active_anon:83520kB inactive_anon:52kB active_file:32012kB inactive_file:68628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115604kB dirty:920kB writeback:0kB shmem:68812kB writeback_tmp:0kB kernel_stack:4928kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.984782][T13339] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.013491][T13339] lowmem_reserve[]: 0 2882 7860 7860 [ 153.018920][T13339] Node 0 DMA32 free:2947832kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951360kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 153.049312][T13339] lowmem_reserve[]: 0 0 4978 4978 [ 153.054341][T13339] Node 0 Normal free:4185096kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83520kB inactive_anon:52kB active_file:32012kB inactive_file:68628kB unevictable:0kB writepending:920kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39324kB local_pcp:15428kB free_cma:0kB [ 153.086659][T13339] lowmem_reserve[]: 0 0 0 0 [ 153.091296][T13339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.104235][T13339] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947832kB [ 153.120637][T13339] Node 0 Normal: 0*4kB 49*8kB (M) 28*16kB (ME) 24*32kB (UM) 17*64kB (UME) 11*128kB (UME) 20*256kB (UME) 8*512kB (UME) 52*1024kB (UME) 37*2048kB (UME) 987*4096kB (UME) = 4185096kB [ 153.138700][T13339] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 153.148163][T13339] 42363 total pagecache pages [ 153.152909][T13339] 16 pages in swap cache [ 153.157250][T13339] Free swap = 124932kB [ 153.161382][T13339] Total swap = 124996kB [ 153.165598][T13339] 2097051 pages RAM [ 153.169513][T13339] 0 pages HighMem/MovableOnly [ 153.174176][T13339] 80811 pages reserved [ 153.268777][T13343] loop8: detected capacity change from 0 to 8192 [ 153.831673][ T9349] ================================================================== [ 153.839778][ T9349] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 153.848004][ T9349] [ 153.850329][ T9349] write to 0xffff88814f0e001a of 2 bytes by task 13343 on cpu 0: [ 153.858025][ T9349] fat16_ent_put+0x28/0x60 [ 153.862428][ T9349] fat_alloc_clusters+0x4d1/0xa80 [ 153.867446][ T9349] fat_get_block+0x258/0x5e0 [ 153.872028][ T9349] __block_write_begin_int+0x400/0xf90 [ 153.877476][ T9349] cont_write_begin+0x5fc/0x970 [ 153.882306][ T9349] fat_write_begin+0x4f/0xe0 [ 153.886884][ T9349] generic_perform_write+0x181/0x490 [ 153.892152][ T9349] __generic_file_write_iter+0x9e/0x120 [ 153.897677][ T9349] generic_file_write_iter+0x8d/0x2f0 [ 153.903117][ T9349] vfs_write+0x49d/0x8e0 [ 153.907362][ T9349] ksys_write+0xda/0x1a0 [ 153.911588][ T9349] __x64_sys_write+0x40/0x50 [ 153.916158][ T9349] x64_sys_call+0x2cdd/0x2fb0 [ 153.920816][ T9349] do_syscall_64+0xd2/0x200 [ 153.925302][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.931174][ T9349] [ 153.933485][ T9349] read to 0xffff88814f0e0000 of 512 bytes by task 9349 on cpu 1: [ 153.941193][ T9349] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 153.947087][ T9349] generic_perform_write+0x2c2/0x490 [ 153.952377][ T9349] shmem_file_write_iter+0xc5/0xf0 [ 153.957652][ T9349] lo_rw_aio+0x6ea/0x7a0 [ 153.962067][ T9349] loop_process_work+0x52d/0xa60 [ 153.967082][ T9349] loop_workfn+0x31/0x40 [ 153.971312][ T9349] process_scheduled_works+0x4ce/0x9d0 [ 153.976758][ T9349] worker_thread+0x582/0x770 [ 153.981359][ T9349] kthread+0x486/0x510 [ 153.985455][ T9349] ret_from_fork+0xda/0x150 [ 153.989938][ T9349] ret_from_fork_asm+0x1a/0x30 [ 153.994683][ T9349] [ 153.996997][ T9349] Reported by Kernel Concurrency Sanitizer on: [ 154.003401][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: kworker/u8:59 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 154.017711][ T9349] Tainted: [W]=WARN [ 154.021496][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.031557][ T9349] Workqueue: loop8 loop_workfn [ 154.036326][ T9349] ================================================================== [ 154.341267][ T9321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.669341][ T9321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.716439][ T9321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.764680][ T9321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.831126][ T9321] bridge_slave_1: left allmulticast mode [ 155.836772][ T9321] bridge_slave_1: left promiscuous mode [ 155.842435][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.850326][ T9321] bridge_slave_0: left allmulticast mode [ 155.856019][ T9321] bridge_slave_0: left promiscuous mode [ 155.861679][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.936250][ T9321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.946248][ T9321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.955554][ T9321] bond0 (unregistering): Released all slaves [ 156.013047][ T9321] hsr_slave_0: left promiscuous mode [ 156.018700][ T9321] hsr_slave_1: left promiscuous mode [ 156.024397][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.031895][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.039853][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.047242][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.057505][ T9321] veth1_macvtap: left promiscuous mode [ 156.062977][ T9321] veth0_macvtap: left promiscuous mode [ 156.068528][ T9321] veth1_vlan: left promiscuous mode [ 156.073785][ T9321] veth0_vlan: left promiscuous mode [ 156.124027][ T9321] team0 (unregistering): Port device team_slave_1 removed [ 156.134623][ T9321] team0 (unregistering): Port device team_slave_0 removed