last executing test programs: 2m48.036695714s ago: executing program 32 (id=3372): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) 2m33.952086592s ago: executing program 33 (id=3924): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 1m51.796683166s ago: executing program 34 (id=5730): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) socket(0x1, 0x803, 0x0) 1m43.14382972s ago: executing program 35 (id=6019): unshare(0x22020600) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) 1m10.10871946s ago: executing program 8 (id=7260): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 1m10.058669241s ago: executing program 8 (id=7263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xf5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m9.4402452s ago: executing program 8 (id=7270): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}]}, &(0x7f0000000180)=0x10) 1m9.386105341s ago: executing program 8 (id=7271): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m9.311995723s ago: executing program 8 (id=7273): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.042105667s ago: executing program 8 (id=7278): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000005c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1, 0x300}, {0x0}, {0x0, 0x0, 0x7}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0xd6f4}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x7fffffff}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x4c0d5}) io_uring_enter(r0, 0x4f65, 0x0, 0x0, 0x0, 0x0) 1m5.680560308s ago: executing program 9 (id=7393): socket$kcm(0x10, 0x2, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m5.479051111s ago: executing program 9 (id=7397): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x1b, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8a5f755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "899c4c35edb172aa66810000000000d31733d602000000feffffff0000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 1m5.299295813s ago: executing program 9 (id=7401): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0x0, 0x1, 0x8, 0x9, 0x2, 0x0, 0x20001, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x8000000c}, 0x70bd28, 0x0, 0xa, 0x4, 0x6, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) 1m3.579105957s ago: executing program 9 (id=7482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) 1m3.578519047s ago: executing program 37 (id=7482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) 43.603642184s ago: executing program 0 (id=8218): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpgid(0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 43.588178205s ago: executing program 6 (id=8220): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) dup3(r1, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 43.534530985s ago: executing program 5 (id=8222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 43.479878876s ago: executing program 6 (id=8223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 43.477817406s ago: executing program 6 (id=8233): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x5858, 0x10000, 0x8, 0x3, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 43.392027418s ago: executing program 0 (id=8224): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 43.390514588s ago: executing program 5 (id=8225): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 43.367111648s ago: executing program 6 (id=8226): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 43.293869739s ago: executing program 0 (id=8230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) memfd_secret(0x80000) 43.25494996s ago: executing program 0 (id=8231): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="1a29686d9fe935c699abfce07ea022f260f7737101274349c2e284b44292298aafdcf9557a902c345d65381eef7661d27e5177dd6d1742007e4649d403ccc73f20b58d21c32d5f61de9df4eaea5fc4b3473d56b9a1ab523e47c84a16b0edefe2c0c6c0358a3a447916c4243917e70ea23c6a65cdb167de17b7a13ea902ed111d3f3760c66c955aa00e7e91ebb25b69ed73d9913532be657258f9d1dc7e2cf065ffc642a0b0d9a14740ad4206bae3661132fd0203d883b21be628cb02d66e6654fe7292576b15035c35996a86a5376f87ded181457b89b631123ba6e96eb836d51e7c7e1b2889709b03f8e08672b4a273a0d7564cbda01f6ecf067738f6364d02c2d61804eac7563e7941e569a15279034c7240369552d42f99bf7840223ffd51330e09436a3297162cf344e243029c2680059d0a027fd14e7674b182f28b3463b4d5eb2cedbd516462ee82c33b5fbe39e424f2b05ae30ca01252c1d6167ab020b0646be0a36efcce490d17b49f5cb4ff39b62407a2619a9459c5365a463dba799bc7bb1a84178f3fb4cc6d3023b0d90f0d19b666a67b0b57440e671ad76313fa19d358a146366b11ee856929cc098988168025a2b3ce2556708408607958a701f0860dbab81e737c06d286dcec360eba7cd20ef9306c88f5b454c03aee2303c4bcf42316508a1151bb62a925770787d230d0107f5d2f7c1cc410a484eeffdbef5b5635168eefc3137ca0700fc3ef929794f5a2b6b379c053f4402c9e25f35e1c77f1c20633628c5e96a22fbeb5c1083d82a51996e0740114b3c7df743aaf881835999c10a30e61a47442c62a86a0991e85524c684e4dc511aee215f3ea275ed9634d91919990a9a64c0f323f76386c101823d66d08e6b8bfb1cdc25947c9e663dc320c9e98cf95f8fa92e325d1a80f39cb12a42832c6180d85fea170fdeaf0fac49a3b7a9306dde9f538f8527a9b165b386f8cfa4c9974b3da399b1a17bcec4a4ed6b6afdcf7483c1b94bd204887fae46c5654be2297362b1d447b89cafe534df1dd987a8f8a0d9773453f72965810769e4e2955d5b6fd6a4b8d3f2852676c86997270c159ff76bdc906165e6855110dec5d590d99410baa3b48a2467d2a439009274c0ecbb7d6f6ec5fc7d1d6947b3cedf8363d8fea949f9a3c8c9e76eb9727ba01c1421f5010040c934e5228dd2228f08be55ab0c27d30aaec7abd61d3a35bf49e56372fa48b3e52944bb646642bab4ba38427e36ebf4366c44f557f748aa01e2166419f9ffce4b2f5af065ce3ef67687a3d0e1d691e0c6cab14d6b0050cc40eb63f92e6842b7bfc08c2dcd0bc24d51eb64b955da0a7f03cb60f0fcc2abcc7c0a3502f694867bdc0f1ee3a76cbbc250173de5811778ba10251ee045d030195ab2771d8d6b1d6ebf88b759f3aa30d6167a7433ff69ae251a5db6017d6aa522a49f6ef6f8b40c7ecefb5b70c32dbef8306be14238f7e55e642d26690b710560294f918122c0dbe117cc2248f7c8be4c06217207d7a54ac8a4aad99b6f5d9593731110f86c8a13b4f01436204a5febec7f8cb801f729c6cd414b1183c5204cc7d7e25a2744a74d5f9d11afb3eacf36b375097550ab0f0f8807f7f3271aaa480a29c0ea9b78a70cc56e69583051687b20d4638b746b6a0b3afac926aeab5e4fc2501058ae01c7f0d924e33d59b764a2492175b1f8ddfab95da5d12fbac042e958723b048e5250746f3ff6ff68547393bd4ea961058152108188b834b35035d2e98580d127627a76f8534e577bfad6d3ccca85050a39fefbf5cea99fb728a2b9ed1fba221d745d484d78a9e2ddab3ed058b9ad6f13c0900f3a2258acfcec81f263e5abc6ef11bd7bb717b00f2ae18b2f4c258e8b83aa96238dc55f84cef8dd0d9d59efb92af0788ec20d08a20300e064ff7865a66e43cc50b86dc416bb46b12845739688cd91ee85a36da2b1081916311b9dbd8333bb6551f114273607868ef83755e9da521c186e6e5df4750080525e16e9bd24b39a11e0f66937333f9f1adaf6c0f077bd797c6a4bf43fae592c7d80cecb0e65f3ba39ab0b77ec9f0366f19a519306d924e326beae86fa9c941102fd9e02ba7d72c53e54aadb74fc475fad2da5af651d8aff81106ba0e3b89a719f3c59712951c30df46b4db3149bc28c5b9324a83e7e33727cb6abc64ac75cc2eae00bc8847377f77ecc5c08e99adf9056fb4c52eeb055b8570bdb49413c54699844527b238158068a679bdc26a0450b21948a0eac9c18fec804e3067cb9886929a31407de23a894aead991fb30a1f6da613199ee76caf22404b1fa3b934d9e905b968b164e8c1c5874ce9c0940bbc791e865a6b3f3ea5f4874669cd46703dd044db0e68d7e1a20756d11319278fd46e25f5d127faa5814dbdd6d11aaf577d9f8b075a7389026ed74049ab9715c36379694558b12535ba9b0799381d27a079c2ada50f6b08678433f2aeb6967a11a73e691d276efd55e629c203c30423a55dbfdace02092ad988e50abc1b24d78253f8c1618c69c9d7639afedd8020f07e43272ea4b49a6a274c3e3bda6c8ce60597afac435236dd12c5d86bedfc52f841ff53340449f5c3f441b7c8d894938df48c8a3c71d9d35c4af3d28d72baea33a29b2beeee6f0f13a6d617eacdd38c9623d22b1306c2de29fb9805dcec16430280b54e4dfeccb70e0b2d3f218a6d6850b6115bdb69af048853fa7f414e54a9cfcefd37986aabe8f6c2d94c18050bc94205690addd224fe21f2e22a8628de1bcb2a90c4c3156e36ce68f95dae6644a5216aae2ec7d08ae0fc46945d6cf3b75e481ddc89ba84e3163458e11ffcf8ad5f532f2708cad50af9356a739ca2510cab0b8aa1f98c7006d483b0e0080ac86d0a376344789ac19ef280e853054f56b05ac320bed179902c9adfbd819d360a557ccff3d534b18047cb738f1a72ecda5157197a269a9d4a561ca45fd8043d06b9715f4fa19c70d9a3af134ef3c2d83489784c28762bb695e303352f48f83dcb35df75f63ef6bf0396ad7d472952ce86841e43f2f6cd0b2edf5741a1e316c228f4ffddd2210c498a51bb7753b3744b0cc3aea4a51fb9a02de4c295e06a74e6ed1a8b4a14da2edc127948750fb1a150fb1b7872da6e92adf1ea0311da8780c81f488125ea9836e7dcb445936d9b3998be1a0dd9fb43a3e82091ffd9ce1c2b9a56b44b6a0486fb0014f01244ea4d685656b5f3df810f7bd3d94dd2dae761ca6db57a343aefe8c7ff6d98018a14fe9deedbe31c61a502cf8fe53517f4ffcfa34efaedc61e36aa2826d24151c08a5889367e177d1d39c672e9c0eb4022f7b30d219360db78b0b88fb7b4a943629a79aa08001aed26acff7c5a72d2de889c23fe7ee359610aa011378d42ffbcda98ba37c5cdfc264dc91d6dab639df0d4c975552d3b136a13db9293006d55ac6a178a4f04be7bfd41cd355500838015bfb91b8c5cdfa051a3212f5c3b79f1411d99c2e7f7a1c75e2de530b90d4b218cff5b179c6f2487a1ac54f5719970c003feb9d0647cee624b01db38d635b493b250c09cccc406266ab3fb571f1d87351a43c44d5d79eef0841a574c2f55bbfde6d52e26657d622ff7f9388bed5e08c76fc5cd01e7e33bd1355ecbb4bbed5d94666a73629d04238104770fd3ca900ad6316e994d2c97064935d3eac054bd09e875baa19a4571d3dd7aac44428157e4ba20aa9684556e2e4e7c662aba34ffbe993cf442a27462650a52506b259a3df96563c6dba173553f3e2c81b9719ad7b9ddcf7a5c35e0421b4abc2a22fddeede33f118fef4c622f8e822ce44a763fed667a0a0c321bc755ce3fcb3ce369b63eb4329364a37be3b0d657ec7a194ce5e22e7d3660568200b33d713d546cdbffcca3e8aed418ade622e332cba4931200a078c811b5d1c0a28d61de302d32e7726087700b160444d7d997a4cb0fc3b4f74cf259db0aae49243a947a3aa8e4762841def472f686cf876088eaa2c267cb39df380bd94a5d4dca072bccf71ff7029c98a1a337c405bd0b5b1e216b0fbab3bbfb21faafff8ab4d7835b51a34a6ad5c069ad1c3d6ff819f0ac27c7acfbabc0265aa5b795081c60e21ae852795c4ee2a9a297b02341f2e0815045816c07533aa57f73116a53867ee07e32f55c632be1986d190b9e59c2e56c5e598867f5e0a5e79fd933520932fc6e05905a0aed9cca2df486a9dca475dc13c770ab56783c6fc4291182bb3f98a1fad71a47628c8b50ca28e1db47df1a9e57deaf53bef661ca87536a94bd78596dcb21365d56a74736227e062522393020d561095f200d5287e805e0ad2fc4219091b779e957fc3f1fe0614e436774dd9630c5f1e2a81fe9ad8363635bf3ce1e233eabe83a96f7c7e964baaf4c0a831ab1baa86976ded258cd38512c53f40860c271018188e56656d9c143304c4e744cd83ec673df6c0a968a3b7c5783f16b966d9752dc2fc0d587891e2f12158d521a04542dec2db145010ad00736fe2aa6b48ff4b4d159f86bdb2ddab055a48ff390b315f6c778d93723809ea2559eb64fe41857402bc424bc48620dcc5a09ede88d986a9c440cc02597d1c9ec8dc39e2f56fa4e88c1c30bc1adc6adbd9e754996d11bf72a1536c91c0e16288406a145a4150ad073196b7dd1f440a86a827c24acb4bb9d59b36331a12d771388f800216444f7869390d49c036708c69c388411d3401541781f5653714925020eee74a3be06de496e473f3704fbd97a274c02301c7bf44611eeb3ef2a19d889dd72c0f1ec53bd4f2c86a99401b9cb3dcfc1377a084d489c08b65c88b91b4e16c3ad0b56fcbd6112c330be885080becc0a70ca7a883b1dde203d7ef228a0c168463afb5feaafd41b8ffae34da857ad9371ba7ec23053bfeb12e64c59a32f97190cbb05a40ab8683661487ac3341cf3ea3bbe92febe59d4c48f17c8cfd07c6ecca383ef01fa597fa352eecd691f18417461acb105911fd85a840a3dca5efc534610cef8c8d015c19a3a2f7199f4fda683418f94fb1889816939fb71516e87dbe0819de475679912c12db3be40ce6b4b6baa32d4b4a74068bef74ee75cc8732b31d82ef3c3aa753afc5bbf71e2dec2135de3da3643ce5c5ebce8c1f635a8cf733cd4cbf97a997a37258c6f456b26604c468002a4fa220d291e588ba6a6f699a1d12e7ce0fb9b98eef015f20e48c7c8fbbf550704703482fe3714a5d8de61fe14223f66749898ab69c9c65ac476ca02057c0792357e7a9c6a8c84f6c9c596758ffebfd5be7722f2d4b16c9bcba2a08ce0ea4958f979e0d2e73eba30a48559ce587041cfbffe852be137a0bee8ae47598a9deeb901411c0eadad9f70a0127a19e858bb5fc757ba11148d3bedf2a9a58cd703abc54efc59932bb851b308a8cd859c48e8d045d4ef30e0c184fe202da9d085a83a8b7bdd02f003af053a73d3e8a03537f96dd1040ba18ee180ca4aa8fa9f10e8d04d788aa4c67c651192889df0f4fa9754952fea58d92cc1c6544fd839f977edbf50e0963f451780d8efa0e6889d83c53e9024193f2993ccaf2d17ba1e0f504e19a28ec43bb0ea671f6c457f91ecdb0a9dd9bac27712cc6c7e43ecddca3b684b6e41a681048cf17ba87a49fe80928be2eec88411d237eb87132e9adb8f61a35fbff74fb6c46b9eed67b92474bdfea3a48754bff62751f5aa6f68b90516189a62e11c4a4839a2fa01651fa1014f08c1d0c8da18ebe0f01a2d9882ce486a27ad5a032a11f7bb6a0c27737837a5c94c95e3bea16949a4c1d98d00cc763cc5b16fc8077bdf0", 0x1000}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) 43.190303441s ago: executing program 5 (id=8234): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/109, 0x6d}, 0x401}], 0x1, 0x40016141, 0x0) 43.154170031s ago: executing program 5 (id=8235): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000380), 0x4) 42.755496028s ago: executing program 5 (id=8236): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x1000, 0x40000000000003]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 42.418283463s ago: executing program 0 (id=8237): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 42.395726853s ago: executing program 6 (id=8238): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x59) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 42.119283307s ago: executing program 0 (id=8244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0xb}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x10000000) 42.119004697s ago: executing program 38 (id=8244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0xb}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x10000000) 42.118859787s ago: executing program 5 (id=8246): mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000300)='./file0\x00') 42.063598048s ago: executing program 39 (id=8246): mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000300)='./file0\x00') 42.040734869s ago: executing program 6 (id=8249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 41.97976245s ago: executing program 40 (id=8249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 946.083045ms ago: executing program 3 (id=9760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 904.691786ms ago: executing program 3 (id=9762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b000000080000002d000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 834.757077ms ago: executing program 3 (id=9766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 833.310997ms ago: executing program 4 (id=9767): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfdffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 737.775759ms ago: executing program 4 (id=9769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000001640)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x0) 653.77815ms ago: executing program 1 (id=9771): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 558.247411ms ago: executing program 4 (id=9772): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x578, &(0x7f0000000dc0)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P3fn/2Pfozs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z1t640fb75747tXb9/89LMjy8X3J5I4F8PtuvXb8Ti19kk+zm1YfrofwQYoGXQDeCS5dp43Uun/MRK5dtZ3Ux/Z1aYBfVbfF1EHMiqR/5BRnd8BjfPfzrSbvz/unG+dgDTirranVs1Qa2wi9jfPTQ7+mjx0ZtI43zy8mw1lT1q+HhFjQ0ObP/9J+/P36MYeRwPpq6/Ptw7U5uOfrvU/0aX/Ge6Mnf5Nnf5vdVP/9yB+bov+72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/Hh0ctXyqWx1mPXGF8dO/LKdtt/cIv4rTHb/c2vmW77v8uwdldffPv5s8vbxH/hue2Pf7f9fyAi3usx/n/vffLaVnV3rid3G78Cdnr8k8jH7R7jv3ju6A89rgoAAAAAAAAAAOxA2ryWLUkLa/NpWii07uH9XxxMy5Vq7fjlyvzsZOuat8ORTztXWo20ykmjPN6+HrdTPrmhfCrXDpg70CwXipXy5IC3HQAAAAAAAAAAAAAAAAAAAJ4Uhzbc//9brnn//8a/qwb2qq3/8hvY6+Q/ZNfD+Z8MrB3A7vP9D5lVl/+QXfIfskv+Q3YNGfODzPL9D9kl/yG75D8AAAAAAAAAAAAAAAAAAAAAAAAAAPTFxQsXGlP9/spSsVGeHFqYn668fWKyVJ0uzMwXC8XK3NXCVKUyVS4VipWZv3q/pFK5Ohaz89dGa6VqbbS6sPjmTGV+tvP/AqV837cIAAAAAAAAAAAAAAAAAAAA/nmGm1OSFiIibc6naaEQ8e+IOJxEcvlKuTQWEf+JiO9z+X2N8vigGw0AAAAAAAAAAAAAAAAAAAB7THVhcXqiXC7NZWRmaCcrR8Ty421G4x13/Kp8+1g9KfvQTBZmBtwxAQAAAAAAAAAAAAAAAABABj246bfXV/zR3wYBAAAAAAAAAAAAAAAAAABAJqU/JxHRmI6NPD+8sfZfyWqu+RwR79y69MG1iVptbryx/O7a8tqH7eUnB9F+oFedPO3kMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBAdWFxeqJcLs31cWbQ2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKP4MAAD//z5x1xA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x147442, 0x3d2) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000340)={0x0, 0x5377, 0x3810, 0x3, 0x25e, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 458.337463ms ago: executing program 3 (id=9776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 441.737803ms ago: executing program 1 (id=9777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 398.293893ms ago: executing program 3 (id=9778): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x4, 0x6, 0x203, 0x40, 0x4]}, &(0x7f0000000000)=0x54) 398.067153ms ago: executing program 2 (id=9779): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48) r1 = fsopen(&(0x7f0000000380)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) 396.866024ms ago: executing program 7 (id=9789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 328.055845ms ago: executing program 2 (id=9780): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 327.748315ms ago: executing program 7 (id=9781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 312.008795ms ago: executing program 4 (id=9782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 244.543166ms ago: executing program 1 (id=9783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 244.033366ms ago: executing program 2 (id=9784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b030a124f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 171.344158ms ago: executing program 7 (id=9785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001540)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc38, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x6, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x4, 0x6, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0x7fffffff, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x226, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4e, 0xa158, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x88000008, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x8, 0x0, 0x2d5, 0x7, 0x3, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0x1001, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x7, 0x2, 0x6, 0xf, 0x5, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x4943, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x6, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0xb2d, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x7, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x3, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x9f3, 0x3, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf4, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4eedcacd, 0x1, 0x4, 0x9df4, 0xffffffff, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0xcf6, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x1401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x81, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x300000, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0xc01, 0x400, 0x436, 0x3, 0x205, 0x0, 0x0, 0x0, 0xbc, 0x5, 0x0, 0x900, 0x7, 0x1, 0x81, 0x3, 0x2, 0x7, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x2, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x10000003]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x7, 0x2, 0x7ff, 0x6, {0x9, 0x1, 0x8, 0xef3, 0x9, 0x1}, {0x2, 0x1, 0x2, 0x827, 0x29a, 0x100}, 0x3, 0x9, 0x7}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 171.147628ms ago: executing program 1 (id=9786): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x5}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x0, @ib={0x1b, 0x1, 0x7ffffffe, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) 170.971368ms ago: executing program 4 (id=9787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 114.065548ms ago: executing program 4 (id=9788): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 113.933908ms ago: executing program 7 (id=9790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x0, 0x200000, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048840}, 0x4001000) 113.793128ms ago: executing program 1 (id=9791): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 111.435028ms ago: executing program 2 (id=9799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0xfffffff4, @empty, 0x50}}, 0x9, 0x4000}, 0x90) 64.831689ms ago: executing program 7 (id=9792): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 57.236169ms ago: executing program 1 (id=9793): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x48c}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x30) 56.834059ms ago: executing program 2 (id=9794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 22.24694ms ago: executing program 2 (id=9795): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) 525.63µs ago: executing program 3 (id=9796): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 0s ago: executing program 7 (id=9807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 220.961195][T16444] veth1_macvtap: left promiscuous mode [ 220.967079][T16444] veth0_macvtap: left promiscuous mode [ 220.973405][T16444] veth1_vlan: left promiscuous mode [ 220.978920][T16444] veth0_vlan: left promiscuous mode [ 221.001988][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7511'. [ 221.042928][T20669] sd 0:0:1:0: device reset [ 221.089895][T16444] team0 (unregistering): Port device team_slave_1 removed [ 221.103077][T16444] team0 (unregistering): Port device team_slave_0 removed [ 221.109394][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119c01400: rx timeout, send abort [ 221.118887][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119c01400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 221.163619][T20599] chnl_net:caif_netlink_parms(): no params data found [ 221.256151][T20599] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.263494][T20599] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.283519][T20599] bridge_slave_0: entered allmulticast mode [ 221.290888][T20599] bridge_slave_0: entered promiscuous mode [ 221.298281][T20599] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.305728][T20599] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.313861][T20599] bridge_slave_1: entered allmulticast mode [ 221.321207][T20599] bridge_slave_1: entered promiscuous mode [ 221.337434][T20688] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 221.359069][T20599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.370035][T20599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.392815][T20599] team0: Port device team_slave_0 added [ 221.399740][T20599] team0: Port device team_slave_1 added [ 221.429364][T20599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.436446][T20599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.464769][T20599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.502722][T20599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.510074][T20599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.537515][T20599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.594523][T20599] hsr_slave_0: entered promiscuous mode [ 221.601923][T20599] hsr_slave_1: entered promiscuous mode [ 221.608878][T20599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.612089][T20697] sd 0:0:1:0: device reset [ 221.618242][T20599] Cannot create hsr debugfs directory [ 221.725448][T20710] loop6: detected capacity change from 0 to 8192 [ 221.753986][T20714] x_tables: duplicate entry at hook 3 [ 221.805535][T20718] xt_bpf: check failed: parse error [ 221.876197][T20724] x_tables: duplicate underflow at hook 3 [ 221.904572][T20599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.915053][T20599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.926586][T20599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.937670][T20599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.987434][T20599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.005094][T20599] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.027535][T16434] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.035031][T16434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.051469][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.058953][T16434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.150670][T20599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.245278][T20599] veth0_vlan: entered promiscuous mode [ 222.254632][T20599] veth1_vlan: entered promiscuous mode [ 222.279545][T20599] veth0_macvtap: entered promiscuous mode [ 222.299434][T20599] veth1_macvtap: entered promiscuous mode [ 222.313693][T20599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.326622][T20599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.338919][T20599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.347834][T20599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.356841][T20599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.365677][T20599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.529336][T20792] ALSA: seq fatal error: cannot create timer (-19) [ 222.726541][T20807] lo speed is unknown, defaulting to 1000 [ 222.862273][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 222.862350][ T29] audit: type=1400 audit(1750994779.996:10918): avc: denied { mount } for pid=20826 comm="syz.5.7573" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 222.916389][ T29] audit: type=1400 audit(1750994780.049:10919): avc: denied { unmount } for pid=10943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 223.021019][ T29] audit: type=1400 audit(1750994780.157:10920): avc: denied { unmount } for pid=12345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 223.096281][ T29] audit: type=1400 audit(1750994780.232:10921): avc: denied { audit_write } for pid=20849 comm="syz.7.7586" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 223.118700][ T29] audit: type=1107 audit(1750994780.232:10922): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 223.263927][ T29] audit: type=1326 audit(1750994780.425:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.7.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 223.290511][ T29] audit: type=1326 audit(1750994780.425:10924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.7.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 223.322922][ T29] audit: type=1326 audit(1750994780.479:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.7.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 223.339142][T20868] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 223.348925][ T29] audit: type=1326 audit(1750994780.479:10926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.7.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 223.380570][ T29] audit: type=1326 audit(1750994780.479:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.7.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 223.641121][T20901] loop5: detected capacity change from 0 to 1024 [ 223.666445][T20901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.684311][T20901] ext4 filesystem being mounted at /800/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.713891][T10943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.735927][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7614'. [ 223.790240][T20922] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7618'. [ 223.824463][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7620'. [ 223.834341][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7620'. [ 223.843721][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7620'. [ 223.853267][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7620'. [ 223.862692][T20927] netlink: 'syz.5.7620': attribute type 6 has an invalid length. [ 223.950647][T20939] loop6: detected capacity change from 0 to 256 [ 224.185657][T20970] netlink: 'syz.3.7638': attribute type 10 has an invalid length. [ 224.193929][T20970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7638'. [ 224.213389][T20970] team0: Port device geneve1 added [ 224.845574][T21022] loop5: detected capacity change from 0 to 164 [ 224.854782][T21022] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 224.887876][T21022] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 224.898073][T21022] Symlink component flag not implemented [ 224.904241][T21022] Symlink component flag not implemented [ 224.933889][T21022] Symlink component flag not implemented (7) [ 224.940577][T21022] Symlink component flag not implemented (116) [ 225.065296][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7673'. [ 225.404168][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7699'. [ 225.413772][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7699'. [ 225.454689][T21123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7701'. [ 225.464038][T21123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7701'. [ 225.473433][T21123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7701'. [ 225.538877][T21125] lo speed is unknown, defaulting to 1000 [ 225.875765][T21185] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 226.022992][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.030934][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.038833][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.048484][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.056269][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.064973][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.073400][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.081165][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.088964][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.097158][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.105126][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.112592][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.120101][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.130265][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.138773][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.146447][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.154376][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.161979][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.169408][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.176965][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.184481][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.192081][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.199547][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.206981][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.214591][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.222154][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.229652][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.237118][T15156] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.253024][T15156] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 226.406752][T21238] xt_hashlimit: max too large, truncated to 1048576 [ 226.523486][T21257] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 227.123318][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7771'. [ 227.133731][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7771'. [ 227.275699][T21322] 9pnet: p9_errstr2errno: server reported unknown error [ 227.573018][T21339] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 227.613660][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 227.613679][ T29] audit: type=1400 audit(1750994785.081:11222): avc: denied { create } for pid=21341 comm="syz.6.7787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.663508][ T29] audit: type=1400 audit(1750994785.124:11223): avc: denied { setopt } for pid=21341 comm="syz.6.7787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.683357][ T29] audit: type=1400 audit(1750994785.124:11224): avc: denied { connect } for pid=21341 comm="syz.6.7787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.692246][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7788'. [ 227.754645][T21350] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 227.852347][T21352] lo speed is unknown, defaulting to 1000 [ 227.888988][ T29] audit: type=1400 audit(1750994785.382:11225): avc: denied { create } for pid=21369 comm="syz.0.7792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.944052][ T29] audit: type=1400 audit(1750994785.414:11226): avc: denied { write } for pid=21369 comm="syz.0.7792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.968977][ T29] audit: type=1400 audit(1750994785.414:11227): avc: denied { read } for pid=21369 comm="syz.0.7792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.043469][T21385] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 228.097172][T21389] xt_connbytes: Forcing CT accounting to be enabled [ 228.098537][ T29] audit: type=1326 audit(1750994785.607:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.6.7796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 228.105716][T21389] Cannot find set identified by id 0 to match [ 228.152720][ T29] audit: type=1326 audit(1750994785.650:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.6.7796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 228.178062][ T29] audit: type=1326 audit(1750994785.650:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.6.7796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 228.205564][ T29] audit: type=1326 audit(1750994785.650:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.6.7796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 228.301139][T21401] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 229.027298][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.038676][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.119501][T21489] x_tables: duplicate underflow at hook 3 [ 229.224479][T21495] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7836'. [ 229.571752][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 229.581459][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 229.589696][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.597561][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.605448][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.615303][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.623177][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.631007][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.640459][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.648612][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.656888][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.664571][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.673676][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.681436][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.689467][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.698512][ T3394] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 229.712556][ T3394] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 229.760929][T21562] netlink: 'syz.0.7852': attribute type 10 has an invalid length. [ 229.779521][T21562] veth0_vlan: entered allmulticast mode [ 229.794918][T21562] veth0_vlan: left promiscuous mode [ 229.801656][T21575] xt_hashlimit: size too large, truncated to 1048576 [ 229.803934][T21562] veth0_vlan: entered promiscuous mode [ 229.821519][T21562] team0: Device veth0_vlan failed to register rx_handler [ 229.892608][T21569] __nla_validate_parse: 2 callbacks suppressed [ 229.892628][T21569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7854'. [ 230.021480][T21582] ALSA: seq fatal error: cannot create timer (-19) [ 230.158756][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7862'. [ 230.182221][T21592] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7862'. [ 230.438631][T21641] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 230.448523][T21643] netlink: 348 bytes leftover after parsing attributes in process `syz.7.7877'. [ 230.595811][T21664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7887'. [ 230.676554][T21671] lo speed is unknown, defaulting to 1000 [ 230.855692][T21702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7891'. [ 230.865576][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7891'. [ 230.978697][T21711] loop5: detected capacity change from 0 to 1024 [ 231.000535][T21711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.015081][T21711] ext4 filesystem being mounted at /836/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.034597][T21711] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.7894: lblock 1 mapped to illegal pblock 1 (length 3) [ 231.050968][T21711] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 231.064797][T21711] EXT4-fs (loop5): This should not happen!! Data will be lost [ 231.064797][T21711] [ 231.089485][T16441] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:36: lblock 4 mapped to illegal pblock 4 (length 5) [ 231.107458][T16441] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 5 with error 117 [ 231.120279][T16441] EXT4-fs (loop5): This should not happen!! Data will be lost [ 231.120279][T16441] [ 231.152578][T10943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.362039][T21730] netlink: 'syz.6.7898': attribute type 10 has an invalid length. [ 231.380714][T21730] veth0_vlan: entered allmulticast mode [ 231.386757][T21730] veth0_vlan: left promiscuous mode [ 231.400469][T21730] veth0_vlan: entered promiscuous mode [ 231.416789][T21730] team0: Device veth0_vlan failed to register rx_handler [ 231.540660][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7905'. [ 231.543807][T21744] lo speed is unknown, defaulting to 1000 [ 231.549836][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7905'. [ 231.572871][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7907'. [ 232.024670][T21803] netlink: 'syz.5.7914': attribute type 10 has an invalid length. [ 232.035001][T21803] veth0_vlan: entered allmulticast mode [ 232.133827][T21803] veth0_vlan: left promiscuous mode [ 232.142300][T21803] veth0_vlan: entered promiscuous mode [ 232.151281][T21803] team0: Device veth0_vlan failed to register rx_handler [ 232.426058][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 232.426073][ T29] audit: type=1400 audit(1750994790.253:11285): avc: denied { getopt } for pid=21827 comm="syz.6.7926" lport=35808 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 232.498332][ T29] audit: type=1326 audit(1750994790.328:11286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.522262][ T29] audit: type=1326 audit(1750994790.328:11287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.592221][ T29] audit: type=1326 audit(1750994790.381:11288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.616037][ T29] audit: type=1326 audit(1750994790.381:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.639874][ T29] audit: type=1326 audit(1750994790.381:11290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.663515][ T29] audit: type=1326 audit(1750994790.392:11291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.687566][ T29] audit: type=1326 audit(1750994790.392:11292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.711514][ T29] audit: type=1326 audit(1750994790.392:11293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.740200][ T29] audit: type=1326 audit(1750994790.392:11294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.6.7928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 232.952477][T21868] loop6: detected capacity change from 0 to 1024 [ 232.979526][T21868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.993381][T21868] ext4 filesystem being mounted at /793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.013160][T21868] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm syz.6.7940: lblock 1 mapped to illegal pblock 1 (length 3) [ 233.031652][T21868] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 233.045815][T21868] EXT4-fs (loop6): This should not happen!! Data will be lost [ 233.045815][T21868] [ 233.068036][T16441] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:36: lblock 4 mapped to illegal pblock 4 (length 5) [ 233.084353][T16441] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 5 with error 117 [ 233.096743][T16441] EXT4-fs (loop6): This should not happen!! Data will be lost [ 233.096743][T16441] [ 233.110081][T12345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.450478][T21920] netlink: 'syz.7.7959': attribute type 10 has an invalid length. [ 233.458792][T21920] veth0_vlan: entered allmulticast mode [ 233.471972][T21920] veth0_vlan: left promiscuous mode [ 233.480302][T21920] veth0_vlan: entered promiscuous mode [ 233.489470][T21920] team0: Device veth0_vlan failed to register rx_handler [ 233.716479][T21954] netlink: 'syz.5.7973': attribute type 10 has an invalid length. [ 233.724745][T21954] veth0_vlan: left promiscuous mode [ 233.730997][T21954] veth0_vlan: entered promiscuous mode [ 233.738133][T21954] team0: Device veth0_vlan failed to register rx_handler [ 233.851965][T21964] SELinux: ebitmap: truncated map [ 233.862268][T21964] SELinux: failed to load policy [ 234.129754][T22010] netlink: 'syz.0.7999': attribute type 6 has an invalid length. [ 234.264752][T22021] lo speed is unknown, defaulting to 1000 [ 234.572558][T22087] xt_hashlimit: size too large, truncated to 1048576 [ 234.673570][T22092] loop6: detected capacity change from 0 to 512 [ 234.726040][T22092] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.777627][T22092] EXT4-fs (loop6): 1 truncate cleaned up [ 234.788854][T22092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.908651][T12345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.981019][T22102] __nla_validate_parse: 8 callbacks suppressed [ 234.981034][T22102] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8023'. [ 235.094537][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8029'. [ 235.317705][T22141] loop6: detected capacity change from 0 to 1024 [ 235.335887][T22141] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 235.345505][T22142] SELinux: failed to load policy [ 235.347016][T22141] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 235.363376][T22141] JBD2: no valid journal superblock found [ 235.369155][T22141] EXT4-fs (loop6): Could not load journal inode [ 235.386687][T22141] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8040'. [ 235.553879][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8045'. [ 235.837069][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8047'. [ 235.846752][T22168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.854057][T22168] IPv6: NLM_F_CREATE should be set when creating new route [ 235.916227][T22179] netlink: 'syz.3.8051': attribute type 13 has an invalid length. [ 235.958306][T22185] loop5: detected capacity change from 0 to 512 [ 235.983273][T22183] SELinux: failed to load policy [ 236.032163][T22179] gretap0: refused to change device tx_queue_len [ 236.052932][T22179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.070512][ T3394] lo speed is unknown, defaulting to 1000 [ 236.076581][ T3394] syz2: Port: 1 Link ACTIVE [ 236.131173][T22198] netem: change failed [ 236.174649][T22185] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.8053: bg 0: block 5: invalid block bitmap [ 236.203044][T22185] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 236.212735][T22205] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8061'. [ 236.239357][T22185] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8053: invalid indirect mapped block 3 (level 2) [ 236.258219][T22185] EXT4-fs (loop5): 1 orphan inode deleted [ 236.264325][T22185] EXT4-fs (loop5): 1 truncate cleaned up [ 236.271109][T22185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.513079][T22218] loop6: detected capacity change from 0 to 512 [ 236.528373][T22218] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.554716][T22218] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8066: bg 0: block 248: padding at end of block bitmap is not set [ 236.573890][T22218] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8066: Failed to acquire dquot type 1 [ 236.588966][T22218] EXT4-fs (loop6): 1 truncate cleaned up [ 236.597909][T22218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.616857][T22218] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.8066: deleted inode referenced: 12 [ 236.652648][T12345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.716046][T10943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.013341][T22273] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8086'. [ 237.233340][T22306] netlink: 'syz.3.8098': attribute type 1 has an invalid length. [ 237.247311][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 237.247326][ T29] audit: type=1326 audit(1750994795.424:11460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.0.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a22fe929 code=0x7ffc0000 [ 237.286335][ T29] audit: type=1326 audit(1750994795.446:11461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.0.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f23a22fe929 code=0x7ffc0000 [ 237.311516][ T29] audit: type=1326 audit(1750994795.446:11462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.0.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a22fe929 code=0x7ffc0000 [ 237.325331][T22306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.335412][ T29] audit: type=1326 audit(1750994795.446:11463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.0.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a22fe929 code=0x7ffc0000 [ 237.375130][ T29] audit: type=1326 audit(1750994795.564:11464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.6.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 237.399276][ T29] audit: type=1326 audit(1750994795.564:11465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.6.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 237.428462][ T29] audit: type=1326 audit(1750994795.564:11466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.6.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 237.457058][ T29] audit: type=1326 audit(1750994795.564:11467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.6.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 237.482419][ T29] audit: type=1326 audit(1750994795.564:11468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.6.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578bcfe929 code=0x7ffc0000 [ 237.566438][T22365] netlink: 'syz.3.8109': attribute type 1 has an invalid length. [ 237.574415][T22365] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8109'. [ 237.618262][ T29] audit: type=1400 audit(1750994795.821:11469): avc: denied { setopt } for pid=22362 comm="syz.7.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.746126][T22390] sd 0:0:1:0: device reset [ 238.505171][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8131'. [ 238.617602][T22433] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 238.624244][T22433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.633596][T22433] vhci_hcd vhci_hcd.0: Device attached [ 238.640934][T22436] vhci_hcd: connection closed [ 238.642032][T16424] vhci_hcd: stop threads [ 238.652830][T16424] vhci_hcd: release socket [ 238.657814][T16424] vhci_hcd: disconnect device [ 238.722243][T22447] netlink: 'syz.6.8140': attribute type 3 has an invalid length. [ 238.737140][T22447] netlink: 'syz.6.8140': attribute type 3 has an invalid length. [ 238.893799][T22469] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 239.166386][T22506] loop6: detected capacity change from 0 to 1024 [ 239.184606][T22506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.222923][T22502] loop5: detected capacity change from 0 to 8192 [ 239.261366][T22506] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8166: Allocating blocks 449-513 which overlap fs metadata [ 239.293152][T22505] EXT4-fs (loop6): pa ffff8881054c3a10: logic 48, phys. 177, len 21 [ 239.302192][T22505] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 239.344928][T12345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.364111][T22524] SELinux: Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped). [ 239.398496][T22531] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8175'. [ 239.475689][T22545] syz_tun: entered allmulticast mode [ 239.483300][T22545] lo: entered allmulticast mode [ 239.783860][T22579] netlink: 'syz.6.8196': attribute type 1 has an invalid length. [ 239.805010][T22579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.905041][T22623] 9pnet: p9_errstr2errno: server reported unknown error @ [ 239.917392][T22625] loop5: detected capacity change from 0 to 1024 [ 239.930973][T22625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.005455][T22625] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.8202: Allocating blocks 449-513 which overlap fs metadata [ 240.027174][T22624] EXT4-fs (loop5): pa ffff8881054c39a0: logic 48, phys. 177, len 21 [ 240.036854][T22624] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 240.057734][T10943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.208543][T22666] netlink: 'syz.6.8216': attribute type 1 has an invalid length. [ 240.747116][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.754855][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.763742][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.782061][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.791316][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.798979][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.806606][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.816193][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.823761][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.831240][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.838807][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.847705][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.855212][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.862725][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.872851][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.880365][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.888022][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.895615][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.904628][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.912109][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.919647][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.928549][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.936039][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.943603][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.951131][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.960045][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.967647][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.975325][T15122] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.991632][T15122] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 241.675814][T16452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.705405][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814e683a00: rx timeout, send abort [ 241.740058][T16452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.830858][T16452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.954952][T16452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.058860][T22752] lo speed is unknown, defaulting to 1000 [ 242.070086][T16452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.125136][T16452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.180159][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814e683a00: abort rx timeout. Force session deactivation [ 242.180232][T16452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.272250][T16452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.355044][T22752] chnl_net:caif_netlink_parms(): no params data found [ 242.409876][T22762] lo speed is unknown, defaulting to 1000 [ 242.503910][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 242.503979][ T29] audit: type=1326 audit(1750994801.068:11768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.535568][ T29] audit: type=1326 audit(1750994801.078:11769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.562090][ T29] audit: type=1326 audit(1750994801.078:11770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.588160][ T29] audit: type=1326 audit(1750994801.078:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.613375][ T29] audit: type=1326 audit(1750994801.078:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.637026][ T29] audit: type=1326 audit(1750994801.078:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.662284][ T29] audit: type=1326 audit(1750994801.078:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.687821][ T29] audit: type=1326 audit(1750994801.164:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 242.711608][ T29] audit: type=1326 audit(1750994801.164:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6c03758e7 code=0x7ffc0000 [ 242.736806][ T29] audit: type=1326 audit(1750994801.164:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.7.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6c031ab19 code=0x7ffc0000 [ 242.772139][T22755] lo speed is unknown, defaulting to 1000 [ 242.772306][T22752] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.785283][T22752] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.793953][T22752] bridge_slave_0: entered allmulticast mode [ 242.803113][T22752] bridge_slave_0: entered promiscuous mode [ 242.812328][T16452] bridge_slave_1: left allmulticast mode [ 242.818070][T16452] bridge_slave_1: left promiscuous mode [ 242.823897][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.833131][T16452] bridge_slave_0: left allmulticast mode [ 242.838947][T16452] bridge_slave_0: left promiscuous mode [ 242.844739][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.854740][T16452] bridge_slave_1: left allmulticast mode [ 242.860498][T16452] bridge_slave_1: left promiscuous mode [ 242.866426][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.876406][T16452] bridge_slave_0: left allmulticast mode [ 242.882199][T16452] bridge_slave_0: left promiscuous mode [ 242.887983][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.006433][T16452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.016432][T16452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.026312][T16452] bond0 (unregistering): Released all slaves [ 243.091068][T16452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.102642][T16452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.113725][T16452] bond0 (unregistering): Released all slaves [ 243.126845][T22762] chnl_net:caif_netlink_parms(): no params data found [ 243.137053][T22752] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.144354][T22752] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.151618][T22752] bridge_slave_1: entered allmulticast mode [ 243.159735][T22752] bridge_slave_1: entered promiscuous mode [ 243.213098][T22752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.226702][T22752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.262946][T16452] hsr_slave_0: left promiscuous mode [ 243.269183][T16452] hsr_slave_1: left promiscuous mode [ 243.277664][T16452] hsr_slave_0: left promiscuous mode [ 243.283665][T16452] hsr_slave_1: left promiscuous mode [ 243.289485][T16452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.297779][T16452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.307457][T16452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.315146][T16452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.331797][T16452] veth1_macvtap: left promiscuous mode [ 243.337436][T16452] veth0_macvtap: left promiscuous mode [ 243.343577][T16452] veth1_vlan: left promiscuous mode [ 243.349608][T16452] veth1_macvtap: left promiscuous mode [ 243.355186][T16452] veth0_macvtap: left promiscuous mode [ 243.361081][T16452] veth1_vlan: left promiscuous mode [ 243.455025][T16452] team0 (unregistering): Port device team_slave_1 removed [ 243.465253][T16452] team0 (unregistering): Port device team_slave_0 removed [ 243.525016][T16452] team0 (unregistering): Port device team_slave_1 removed [ 243.536045][T16452] team0 (unregistering): Port device team_slave_0 removed [ 243.578560][T22752] team0: Port device team_slave_0 added [ 243.622168][T22752] team0: Port device team_slave_1 added [ 243.651987][T22762] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.659993][T22762] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.669439][T22762] bridge_slave_0: entered allmulticast mode [ 243.681382][T22762] bridge_slave_0: entered promiscuous mode [ 243.714430][T22752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.722132][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.748309][T22752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.762650][T23254] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8270'. [ 243.773770][T22752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.780841][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.807923][T22752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.840911][T22762] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.848806][T22762] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.856612][T22762] bridge_slave_1: entered allmulticast mode [ 243.863319][T22762] bridge_slave_1: entered promiscuous mode [ 243.920745][T22755] chnl_net:caif_netlink_parms(): no params data found [ 243.933121][T22762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.002446][T23363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.030811][T23363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.080828][T23363] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.090839][T23363] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.100113][T23363] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.109329][T23363] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.127893][T23363] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.137602][T23363] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.147292][T23363] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.157388][T23363] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.172476][T23363] ipvlan2: left promiscuous mode [ 244.199392][T22752] hsr_slave_0: entered promiscuous mode [ 244.216111][T22752] hsr_slave_1: entered promiscuous mode [ 244.222598][T22752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.233513][T22752] Cannot create hsr debugfs directory [ 244.249378][ T36] lo speed is unknown, defaulting to 1000 [ 244.255393][ T36] syz2: Port: 1 Link DOWN [ 244.266582][T22762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.371818][T22762] team0: Port device team_slave_0 added [ 244.379847][T22762] team0: Port device team_slave_1 added [ 244.395492][T22755] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.404276][T22755] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.415636][T22755] bridge_slave_0: entered allmulticast mode [ 244.422475][T22755] bridge_slave_0: entered promiscuous mode [ 244.430813][T22755] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.438353][T22755] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.446023][T22755] bridge_slave_1: entered allmulticast mode [ 244.449754][T23513] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 244.453080][T22755] bridge_slave_1: entered promiscuous mode [ 244.482278][T22762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.490267][T22762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.517180][T22762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.576821][T22762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.584113][T22762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.610314][T22762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.632090][T22755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.668132][T22755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.711414][T22755] team0: Port device team_slave_0 added [ 244.745611][T22755] team0: Port device team_slave_1 added [ 244.765794][T22762] hsr_slave_0: entered promiscuous mode [ 244.772069][T22762] hsr_slave_1: entered promiscuous mode [ 244.778230][T22762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.786724][T22762] Cannot create hsr debugfs directory [ 244.811218][T22755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.819203][T22755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.846021][T22755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.857530][T22755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.864572][T22755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.891564][T22755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.957566][T22755] hsr_slave_0: entered promiscuous mode [ 244.965470][T22755] hsr_slave_1: entered promiscuous mode [ 244.973537][T22755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.981226][T22755] Cannot create hsr debugfs directory [ 245.131462][T22752] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.150655][T22752] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.175277][T22752] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.190893][T22752] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.201297][T16452] dummy0: left allmulticast mode [ 245.206932][T16452] bridge0: port 3(dummy0) entered disabled state [ 245.214959][T16452] bridge_slave_1: left allmulticast mode [ 245.220806][T16452] bridge_slave_1: left promiscuous mode [ 245.227780][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.238038][T16452] bridge_slave_0: left allmulticast mode [ 245.244555][T16452] bridge_slave_0: left promiscuous mode [ 245.250308][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.327086][T16452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.337448][T16452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.349948][T16452] bond0 (unregistering): Released all slaves [ 245.359187][T16452] bond1 (unregistering): Released all slaves [ 245.402194][T16452] IPVS: stopping backup sync thread 16498 ... [ 245.422596][T23882] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8291'. [ 245.467681][T16452] hsr_slave_0: left promiscuous mode [ 245.474754][T16452] hsr_slave_1: left promiscuous mode [ 245.480475][T16452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.493587][T16452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.550563][T16452] team0 (unregistering): Port device team_slave_1 removed [ 245.563629][T16452] team0 (unregistering): Port device team_slave_0 removed [ 245.646600][T23897] syzkaller1: entered promiscuous mode [ 245.652619][T23897] syzkaller1: entered allmulticast mode [ 245.674633][T22752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.699793][T22752] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.711743][T22762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.725382][T23917] vlan2: entered allmulticast mode [ 245.740713][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.748946][T11976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.760441][T22755] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.771328][T22755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.783822][T22762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.794073][T22762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.804990][T22762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.815727][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.823133][T16460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.856798][T22752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.881173][T22755] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.892153][T22755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.932505][T22755] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.943568][T22755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.015940][T22755] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.026114][T22755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.052595][T22762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.074814][T22752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.094421][T22762] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.121284][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.128621][T11976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.155573][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.162780][T11976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.196321][T22755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.206886][T22755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.218535][T22755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.235816][T22755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.366311][T22762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.384445][T22755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.409894][T22755] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.417904][T24013] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8317'. [ 246.440924][T22752] veth0_vlan: entered promiscuous mode [ 246.456271][T16462] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.463424][T16462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.484530][T22752] veth1_vlan: entered promiscuous mode [ 246.494724][T16462] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.501920][T16462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.525710][T24021] vlan2: entered allmulticast mode [ 246.542850][T22752] veth0_macvtap: entered promiscuous mode [ 246.589808][T22752] veth1_macvtap: entered promiscuous mode [ 246.616918][T22752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.647555][T22762] veth0_vlan: entered promiscuous mode [ 246.660581][T22752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.678879][T24037] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) ! [ 246.691138][T22762] veth1_vlan: entered promiscuous mode [ 246.700823][T22752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.709717][T22752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.718520][T22752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.728872][T22752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.766814][T22762] veth0_macvtap: entered promiscuous mode [ 246.791300][T22762] veth1_macvtap: entered promiscuous mode [ 246.832377][T22755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.867459][T22762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.914728][T22762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.931326][T22762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.941130][T22762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.950123][T22762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.959426][T22762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.052501][T22755] veth0_vlan: entered promiscuous mode [ 247.088492][T22755] veth1_vlan: entered promiscuous mode [ 247.124792][T22755] veth0_macvtap: entered promiscuous mode [ 247.140896][T22755] veth1_macvtap: entered promiscuous mode [ 247.172190][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 247.172205][ T29] audit: type=1326 audit(1750994806.078:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24083 comm="syz.7.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 247.196887][T22755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.231513][T22755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.247244][T22755] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.257581][T22755] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.268219][T22755] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.278813][T22755] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.279304][ T29] audit: type=1400 audit(1750994806.110:12064): avc: denied { listen } for pid=24086 comm="syz.4.8339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.312418][ T29] audit: type=1326 audit(1750994806.110:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24083 comm="syz.7.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 247.341999][ T29] audit: type=1326 audit(1750994806.110:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24083 comm="syz.7.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 247.367912][ T29] audit: type=1326 audit(1750994806.110:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24083 comm="syz.7.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 247.399607][ T29] audit: type=1400 audit(1750994806.314:12068): avc: denied { write } for pid=24095 comm="syz.4.8341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 247.463976][T24102] loop4: detected capacity change from 0 to 512 [ 247.481700][ T29] audit: type=1400 audit(1750994806.400:12069): avc: denied { ioctl } for pid=22755 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=748 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.512132][ T29] audit: type=1400 audit(1750994806.411:12070): avc: denied { mount } for pid=24108 comm="syz.3.8346" name="/" dev="ramfs" ino=67602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 247.539369][T24102] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 247.550201][T24102] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.579623][T24102] EXT4-fs (loop4): mount failed [ 247.607509][ T29] audit: type=1400 audit(1750994806.539:12071): avc: denied { create } for pid=24119 comm="syz.3.8349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 247.735779][T24120] lo speed is unknown, defaulting to 1000 [ 247.885597][T24164] wireguard0: entered promiscuous mode [ 247.894416][T24174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 247.901433][T24174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 247.910035][T24174] vhci_hcd vhci_hcd.0: Device attached [ 247.958119][T24175] vhci_hcd: connection closed [ 247.958406][T11976] vhci_hcd: stop threads [ 247.967692][T11976] vhci_hcd: release socket [ 247.972861][T11976] vhci_hcd: disconnect device [ 248.103386][T24194] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 248.109375][T24194] syzkaller0: owner set to 6 [ 248.174974][T24209] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8371'. [ 248.241002][T24216] vlan2: entered allmulticast mode [ 248.484568][T24246] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8384'. [ 248.514130][T24250] netlink: 'syz.3.8385': attribute type 1 has an invalid length. [ 248.522889][T24250] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8385'. [ 248.617508][T24260] vlan0: entered allmulticast mode [ 248.801530][T24286] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8400'. [ 248.966744][T24292] lo speed is unknown, defaulting to 1000 [ 249.274367][T24341] random: crng reseeded on system resumption [ 249.773535][T24366] loop2: detected capacity change from 0 to 2048 [ 249.773647][T24360] loop4: detected capacity change from 0 to 8192 [ 249.819994][T24366] Alternate GPT is invalid, using primary GPT. [ 249.827083][T24366] loop2: p1 p2 p3 [ 249.890661][T24386] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 249.897793][T24386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 249.907003][T24386] vhci_hcd vhci_hcd.0: Device attached [ 249.937873][T24387] vhci_hcd: connection closed [ 249.947180][T16452] vhci_hcd: stop threads [ 249.956361][T16452] vhci_hcd: release socket [ 249.960814][T16452] vhci_hcd: disconnect device [ 249.965773][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8423'. [ 249.975671][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8423'. [ 249.994589][T24397] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 250.716590][T24483] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 250.723280][T24483] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.732937][T24483] vhci_hcd vhci_hcd.0: Device attached [ 250.763477][T24484] vhci_hcd: connection closed [ 250.765730][T16452] vhci_hcd: stop threads [ 250.776613][T16452] vhci_hcd: release socket [ 250.781364][T16452] vhci_hcd: disconnect device [ 250.806617][T24476] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.816299][T24476] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.938628][T24476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.949506][T24476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.980061][T24476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.990344][T24476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.001116][T24476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.013005][T24476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.072299][T24503] loop2: detected capacity change from 0 to 512 [ 251.083546][T24495] lo speed is unknown, defaulting to 1000 [ 251.115942][T24503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.142544][T24503] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.256431][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.295651][T24537] vlan2: entered allmulticast mode [ 251.344999][T24552] wireguard0: entered promiscuous mode [ 251.578328][T24572] lo speed is unknown, defaulting to 1000 [ 251.708214][T24605] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 251.715771][T24605] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.725925][T24605] vhci_hcd vhci_hcd.0: Device attached [ 251.763115][T24608] vhci_hcd: connection closed [ 251.763329][T16464] vhci_hcd: stop threads [ 251.773070][T16464] vhci_hcd: release socket [ 251.778290][T16464] vhci_hcd: disconnect device [ 251.845294][T24617] SELinux: ebitmap: truncated map [ 251.860334][T24617] SELinux: failed to load policy [ 251.925713][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 251.925732][ T29] audit: type=1326 audit(1750994811.174:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 251.983938][ T29] audit: type=1326 audit(1750994811.174:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.008472][ T29] audit: type=1326 audit(1750994811.174:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.033877][ T29] audit: type=1326 audit(1750994811.174:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.057727][ T29] audit: type=1326 audit(1750994811.174:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.083620][ T29] audit: type=1326 audit(1750994811.174:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.108251][ T29] audit: type=1326 audit(1750994811.174:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.133064][ T29] audit: type=1326 audit(1750994811.174:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.158046][ T29] audit: type=1326 audit(1750994811.174:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.186371][ T29] audit: type=1326 audit(1750994811.174:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.4.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 252.390557][T24642] lo speed is unknown, defaulting to 1000 [ 252.546388][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8512'. [ 252.556611][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8512'. [ 252.704181][T24717] netlink: 'syz.4.8523': attribute type 10 has an invalid length. [ 252.712168][T24717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8523'. [ 252.731838][T24718] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 252.752483][T24717] dummy0: entered promiscuous mode [ 252.783383][T24717] bridge0: port 3(dummy0) entered blocking state [ 252.790002][T24717] bridge0: port 3(dummy0) entered disabled state [ 252.826840][T24717] dummy0: entered allmulticast mode [ 252.833489][T24717] bridge0: port 3(dummy0) entered blocking state [ 252.840148][T24717] bridge0: port 3(dummy0) entered forwarding state [ 252.875266][T24730] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 253.036756][T24738] SELinux: ebitmap: truncated map [ 253.071122][T24738] SELinux: failed to load policy [ 253.233233][T24760] loop2: detected capacity change from 0 to 128 [ 253.345534][T24769] random: crng reseeded on system resumption [ 253.462977][T24786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8552'. [ 253.813726][T24829] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.821144][T24829] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.899637][T24829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.919107][T24829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.966991][T24829] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.976181][T24829] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.985992][T24829] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.995444][T24829] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.115131][T24844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8571'. [ 254.339869][T24876] SELinux: failed to load policy [ 254.492139][T24883] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.499767][T24883] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.629591][T24883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.679696][T24883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.734015][T24883] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.742334][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8589'. [ 254.743105][T24883] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.762079][T24883] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.771426][T24883] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.907747][T24917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8598'. [ 254.930814][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8601'. [ 254.955238][T24923] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8600'. [ 254.976765][T24920] dummy0: left allmulticast mode [ 254.990141][T24920] bridge0: port 3(dummy0) entered disabled state [ 255.004365][T24920] bridge_slave_1: left allmulticast mode [ 255.011146][T24920] bridge_slave_1: left promiscuous mode [ 255.016999][T24920] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.028085][T24920] bridge_slave_0: left promiscuous mode [ 255.033924][T24920] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.234857][T24952] dummy0: left promiscuous mode [ 255.283447][T24952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.308323][T24952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.354024][T24952] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.363582][T24952] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.374621][T24952] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.384719][T24952] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.597350][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8629'. [ 256.064297][T25069] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8654'. [ 256.090040][T25072] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8655'. [ 256.117265][T25063] SELinux: failed to load policy [ 256.149210][T25078] netlink: 'syz.7.8657': attribute type 1 has an invalid length. [ 256.165030][T25081] random: crng reseeded on system resumption [ 256.237369][T25094] sd 0:0:1:0: device reset [ 256.238578][T25092] block device autoloading is deprecated and will be removed. [ 256.326608][T25105] loop2: detected capacity change from 0 to 128 [ 256.333943][T25105] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.351259][T25105] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.373479][T25114] netlink: 'syz.3.8673': attribute type 1 has an invalid length. [ 256.401297][T25118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8676'. [ 256.412391][T25118] bridge_slave_1: left allmulticast mode [ 256.418607][T25118] bridge_slave_1: left promiscuous mode [ 256.425361][T25118] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.437192][T25118] bridge_slave_0: left promiscuous mode [ 256.443089][T25118] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.451976][T16452] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.482542][T25129] loop2: detected capacity change from 0 to 128 [ 256.491284][T25129] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.505397][T25129] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 256.578339][T22755] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.598061][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 256.598076][ T29] audit: type=1400 audit(1750994816.185:12321): avc: denied { setopt } for pid=25139 comm="syz.2.8681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.626479][ T29] audit: type=1400 audit(1750994816.195:12322): avc: denied { read } for pid=25139 comm="syz.2.8681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.657105][T25143] netlink: 'syz.2.8681': attribute type 13 has an invalid length. [ 256.665783][T25143] netlink: 'syz.2.8681': attribute type 17 has an invalid length. [ 256.703488][T25143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.714763][T25149] xt_hashlimit: max too large, truncated to 1048576 [ 256.727301][T25143] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.752478][T25143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.797513][ T29] audit: type=1400 audit(1750994816.399:12323): avc: denied { execmem } for pid=25154 comm="syz.1.8688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 256.853334][ T29] audit: type=1326 audit(1750994816.453:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 256.878907][ T29] audit: type=1326 audit(1750994816.453:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 256.920884][ T29] audit: type=1326 audit(1750994816.517:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 256.947675][ T29] audit: type=1326 audit(1750994816.517:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 256.974165][ T29] audit: type=1326 audit(1750994816.517:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 256.987522][T25163] batadv1: entered promiscuous mode [ 257.001400][ T29] audit: type=1326 audit(1750994816.528:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 257.005962][T25163] batadv1: entered allmulticast mode [ 257.038449][ T29] audit: type=1326 audit(1750994816.528:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25160 comm="syz.7.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 257.075392][T25169] batadv1: entered promiscuous mode [ 257.081432][T25169] batadv1: entered allmulticast mode [ 257.202499][T25190] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 257.254895][T25202] netlink: 'syz.1.8705': attribute type 21 has an invalid length. [ 257.263239][T25202] netlink: 'syz.1.8705': attribute type 1 has an invalid length. [ 257.361066][T25221] rdma_op ffff888102367180 conn xmit_rdma 0000000000000000 [ 257.456370][T25242] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 257.464965][T25242] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 257.513871][T25246] binfmt_misc: register: failed to install interpreter file ./file2 [ 257.554430][T25250] loop3: detected capacity change from 0 to 1024 [ 257.589049][T25250] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.602015][T25250] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8726: Failed to acquire dquot type 0 [ 257.629165][T25250] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 257.648883][T25250] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.8726: corrupted inode contents [ 257.663875][T25250] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.8726: mark_inode_dirty error [ 257.675715][T25250] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.8726: corrupted inode contents [ 257.697353][T25250] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.8726: mark_inode_dirty error [ 257.712293][T25250] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.8726: corrupted inode contents [ 257.730859][T25277] syz_tun (unregistering): left allmulticast mode [ 257.738838][T25250] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 257.756766][T25250] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.8726: corrupted inode contents [ 257.771443][T25250] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.8726: mark_inode_dirty error [ 257.783121][T25250] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 257.795356][T25250] EXT4-fs (loop3): 1 truncate cleaned up [ 257.801537][T25250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.831401][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.881419][T25288] 9pnet: Could not find request transport: f [ 257.974743][T25300] bridge_slave_1: left allmulticast mode [ 257.980707][T25300] bridge_slave_1: left promiscuous mode [ 257.986857][T25300] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.004056][T25300] bridge_slave_0: left allmulticast mode [ 258.010220][T25300] bridge_slave_0: left promiscuous mode [ 258.016472][T25300] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.052044][T25305] xt_hashlimit: max too large, truncated to 1048576 [ 258.072318][T25302] 0: renamed from hsr0 [ 258.085045][T25302] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.096634][T25302] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.109641][T25302] 0: entered allmulticast mode [ 258.115068][T25302] hsr_slave_0: entered allmulticast mode [ 258.120980][T25302] hsr_slave_1: entered allmulticast mode [ 258.133038][T25302] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 258.183115][T25323] loop2: detected capacity change from 0 to 164 [ 258.192203][T25323] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 258.318962][T25350] __nla_validate_parse: 9 callbacks suppressed [ 258.318983][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8764'. [ 258.337128][T25350] bridge_slave_1: left allmulticast mode [ 258.345306][T25350] bridge_slave_1: left promiscuous mode [ 258.352111][T25350] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.361104][T25350] bridge_slave_0: left promiscuous mode [ 258.369411][T25350] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.396532][T25350] bridge0 (unregistering): left promiscuous mode [ 259.145705][T25382] xt_hashlimit: max too large, truncated to 1048576 [ 259.364560][T25399] loop3: detected capacity change from 0 to 512 [ 259.373608][T25401] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 259.478400][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8787'. [ 259.490784][T25413] bridge_slave_1: left allmulticast mode [ 259.496853][T25413] bridge_slave_1: left promiscuous mode [ 259.502676][T25413] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.514048][T25413] bridge_slave_0: left promiscuous mode [ 259.520189][T25413] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.739753][T25450] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8806'. [ 259.848432][T25462] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 259.869372][T25464] netlink: 'syz.7.8812': attribute type 10 has an invalid length. [ 259.892566][T25464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.002219][T25478] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8813'. [ 260.176516][T25498] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 260.224825][T25505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8829'. [ 260.257888][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8833'. [ 260.349218][T25525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=7764 sclass=netlink_audit_socket pid=25525 comm=ext4 [ 260.370797][T25530] loop2: detected capacity change from 0 to 1024 [ 260.381829][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8839'. [ 260.391903][T25527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8839'. [ 260.401786][T25530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.426876][T25530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.506435][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8847'. [ 260.545648][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.649539][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8856'. [ 260.682612][T25588] netlink: 'syz.2.8858': attribute type 10 has an invalid length. [ 260.705949][T25588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.155520][T25663] netlink: 'syz.4.8891': attribute type 10 has an invalid length. [ 261.164321][T25664] netlink: 'syz.3.8887': attribute type 18 has an invalid length. [ 261.166286][T25663] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.353168][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 261.353191][ T29] audit: type=1326 audit(1750994821.281:12528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.383459][ T29] audit: type=1326 audit(1750994821.281:12529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.409371][ T29] audit: type=1326 audit(1750994821.281:12530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.433932][ T29] audit: type=1326 audit(1750994821.281:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.457819][ T29] audit: type=1326 audit(1750994821.281:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.482323][ T29] audit: type=1326 audit(1750994821.281:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.506692][ T29] audit: type=1326 audit(1750994821.281:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.530473][ T29] audit: type=1326 audit(1750994821.281:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c037e929 code=0x7ffc0000 [ 261.560732][ T29] audit: type=1400 audit(1750994821.506:12536): avc: denied { setopt } for pid=25693 comm="syz.7.8905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.653031][ T29] audit: type=1400 audit(1750994821.603:12537): avc: denied { bind } for pid=25721 comm="syz.4.8912" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.676262][T25722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.684935][T25722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.916403][T25762] loop3: detected capacity change from 0 to 256 [ 261.928639][T25762] FAT-fs (loop3): bogus number of FAT sectors [ 261.934892][T25762] FAT-fs (loop3): Can't find a valid FAT filesystem [ 261.970632][T25771] loop2: detected capacity change from 0 to 512 [ 262.013976][T25771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.027214][T25771] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.044185][T25771] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 262.071190][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.250481][T25833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25833 comm=syz.3.8945 [ 262.263839][T25833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25833 comm=syz.3.8945 [ 262.284797][T25837] veth1_to_bond: entered allmulticast mode [ 262.292545][T25837] veth1_to_bond: left allmulticast mode [ 262.696741][T25920] 0XD: renamed from gretap0 (while UP) [ 262.718396][T25920] 0XD: entered allmulticast mode [ 262.724008][T25920] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 262.796785][T25934] batadv_slave_1: entered promiscuous mode [ 262.806179][T25934] batadv_slave_1: left promiscuous mode [ 263.014597][T25953] __nla_validate_parse: 12 callbacks suppressed [ 263.014620][T25953] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.8995'. [ 263.104387][T25969] netlink: 'syz.1.8997': attribute type 13 has an invalid length. [ 263.112382][T25969] netlink: 'syz.1.8997': attribute type 17 has an invalid length. [ 263.140193][T25969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.149088][T25969] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.159925][T25969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.965641][T25999] loop3: detected capacity change from 0 to 1024 [ 263.972565][T25999] EXT4-fs: Ignoring removed orlov option [ 263.979133][T25999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.995101][T26001] SELinux: ebitmap: truncated map [ 264.001984][T26001] SELinux: failed to load policy [ 264.018166][T26004] loop4: detected capacity change from 0 to 1024 [ 264.044591][T25999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.062343][T26004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.085143][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9012'. [ 264.096461][T26004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.121558][T25999] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 264.187708][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.260707][T26029] loop3: detected capacity change from 0 to 764 [ 264.298806][T26029] rock: directory entry would overflow storage [ 264.305459][T26029] rock: sig=0x4654, size=5, remaining=4 [ 264.380540][T26048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26048 comm=syz.7.9025 [ 264.473442][T26073] vlan2: entered allmulticast mode [ 264.491158][T26073] dummy0: entered allmulticast mode [ 264.612033][T26102] netlink: 'syz.7.9044': attribute type 4 has an invalid length. [ 264.612052][T26102] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.9044'. [ 264.649940][T26104] veth7: entered promiscuous mode [ 264.664262][T16424] bridge_slave_1: left allmulticast mode [ 264.670168][T16424] bridge_slave_1: left promiscuous mode [ 264.675960][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.753187][T16424] bridge_slave_0: left allmulticast mode [ 264.753210][T16424] bridge_slave_0: left promiscuous mode [ 264.753346][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.811883][T16424] bridge0 (unregistering): left promiscuous mode [ 264.852750][T16424] bond0 (unregistering): left promiscuous mode [ 264.852773][T16424] bond_slave_0: left promiscuous mode [ 264.865268][T16424] bond_slave_1: left promiscuous mode [ 264.882047][T16424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.892479][T16424] bond_slave_0: left allmulticast mode [ 264.893940][T16424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.911836][T16424] bond_slave_1: left allmulticast mode [ 264.912042][T16424] bond0 (unregistering): Released all slaves [ 264.922191][T16424] bond1 (unregistering): Released all slaves [ 264.931740][T26124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9048'. [ 264.931849][T26124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9048'. [ 265.041519][T16424] hsr_slave_0: left promiscuous mode [ 265.041756][T16424] hsr_slave_1: left promiscuous mode [ 265.117077][T16424] team0 (unregistering): Port device team_slave_1 removed [ 265.128629][T16424] team0 (unregistering): Port device team_slave_0 removed [ 265.129113][T16462] smc: removing ib device syz! [ 265.192709][T26169] netlink: 'syz.7.9066': attribute type 13 has an invalid length. [ 265.192727][T26169] netlink: 'syz.7.9066': attribute type 17 has an invalid length. [ 265.227925][T26169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.238460][T26169] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.252212][T26169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.509779][T26188] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9073'. [ 265.557562][T26194] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 265.568059][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9077'. [ 265.589086][T26198] syzkaller1: entered promiscuous mode [ 265.594627][T26198] syzkaller1: entered allmulticast mode [ 265.736005][T26216] lo speed is unknown, defaulting to 1000 [ 265.742290][T26216] lo speed is unknown, defaulting to 1000 [ 265.748673][T26216] lo speed is unknown, defaulting to 1000 [ 265.755387][T26216] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 265.765664][T26216] lo speed is unknown, defaulting to 1000 [ 265.771914][T26216] lo speed is unknown, defaulting to 1000 [ 265.778019][T26216] lo speed is unknown, defaulting to 1000 [ 265.784154][T26216] lo speed is unknown, defaulting to 1000 [ 265.790178][T26216] lo speed is unknown, defaulting to 1000 [ 265.796293][T26216] lo speed is unknown, defaulting to 1000 [ 265.802416][T26216] lo speed is unknown, defaulting to 1000 [ 265.973589][T26238] vlan2: entered allmulticast mode [ 265.980599][T26238] dummy0: entered allmulticast mode [ 266.071634][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 266.071652][ T29] audit: type=1326 audit(1750994826.356:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 266.102412][ T29] audit: type=1326 audit(1750994826.356:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 266.103738][T26262] loop2: detected capacity change from 0 to 2048 [ 266.127053][ T29] audit: type=1326 audit(1750994826.356:12734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 266.158013][ T29] audit: type=1326 audit(1750994826.356:12735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb8d68e963 code=0x7ffc0000 [ 266.182863][ T29] audit: type=1326 audit(1750994826.366:12736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb8d68d3df code=0x7ffc0000 [ 266.208475][ T29] audit: type=1326 audit(1750994826.377:12737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcb8d68e9b7 code=0x7ffc0000 [ 266.233838][ T29] audit: type=1326 audit(1750994826.388:12738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb8d68d290 code=0x7ffc0000 [ 266.259615][ T29] audit: type=1326 audit(1750994826.388:12739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb8d68e52b code=0x7ffc0000 [ 266.283849][ T29] audit: type=1326 audit(1750994826.431:12740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcb8d68d58a code=0x7ffc0000 [ 266.286818][T26262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.309693][ T29] audit: type=1326 audit(1750994826.431:12741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26261 comm="syz.2.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcb8d68d58a code=0x7ffc0000 [ 266.410426][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.726239][T26290] netlink: 'syz.4.9102': attribute type 13 has an invalid length. [ 266.734503][T26290] netlink: 'syz.4.9102': attribute type 17 has an invalid length. [ 266.796068][T26297] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9109'. [ 266.853082][T26290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.867854][T26290] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.880711][T26290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.902981][T26307] xt_hashlimit: max too large, truncated to 1048576 [ 266.914101][T26305] vlan2: entered allmulticast mode [ 266.919490][T26305] dummy0: entered allmulticast mode [ 266.939260][T26311] x_tables: duplicate underflow at hook 4 [ 266.997548][T26318] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 267.006612][T26323] loop3: detected capacity change from 0 to 1024 [ 267.024109][T26323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.053088][T26328] futex_wake_op: syz.1.9123 tries to shift op by -1; fix this program [ 267.121267][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.289433][T26370] loop2: detected capacity change from 0 to 512 [ 267.305563][T26370] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 267.317271][T26370] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 267.328613][T26370] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.9141: Corrupt directory, running e2fsck is recommended [ 267.344047][T26370] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 267.354864][T26370] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.9141: corrupted in-inode xattr: invalid ea_ino [ 267.382792][T26370] EXT4-fs (loop2): Remounting filesystem read-only [ 267.391854][T26370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.409324][T26370] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 267.473198][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.592831][T26401] netlink: 'syz.1.9153': attribute type 4 has an invalid length. [ 267.600966][T26401] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9153'. [ 267.731015][T26412] netlink: 'syz.3.9157': attribute type 13 has an invalid length. [ 267.738933][T26412] netlink: 'syz.3.9157': attribute type 17 has an invalid length. [ 267.796275][T26412] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.818725][T26412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.834477][T15139] lo speed is unknown, defaulting to 1000 [ 267.840346][T15139] syz2: Port: 1 Link ACTIVE [ 268.009432][T26434] usb usb1: usbfs: process 26434 (syz.1.9169) did not claim interface 0 before use [ 269.673510][T26461] veth5: entered promiscuous mode [ 269.704731][T26474] hub 9-0:1.0: USB hub found [ 269.714645][T26474] hub 9-0:1.0: 8 ports detected [ 269.778812][T26493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9189'. [ 269.788120][T26493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9189'. [ 269.798054][T26493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9189'. [ 269.943143][T26513] bridge0: entered promiscuous mode [ 269.948435][T26513] bridge0: entered allmulticast mode [ 270.049899][T26525] vhci_hcd: invalid port number 96 [ 270.055352][T26525] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 270.300403][T26565] Invalid ELF header magic: != ELF [ 270.313241][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9221'. [ 270.342682][T26569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9221'. [ 270.387806][T26581] netlink: 'syz.1.9224': attribute type 13 has an invalid length. [ 270.408674][T26581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.481160][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9231'. [ 270.511968][T26598] vhci_hcd: invalid port number 96 [ 270.517166][T26598] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 270.686758][T26634] x_tables: duplicate underflow at hook 1 [ 270.719228][T26636] loop4: detected capacity change from 0 to 256 [ 270.773630][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 270.773648][ T29] audit: type=1400 audit(1750994831.398:12886): avc: denied { mount } for pid=26635 comm="syz.4.9240" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 270.810691][T26636] syz.4.9240: attempt to access beyond end of device [ 270.810691][T26636] loop4: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 270.840793][ T29] audit: type=1400 audit(1750994831.463:12887): avc: denied { unmount } for pid=22752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 270.915215][T26652] vhci_hcd: invalid port number 96 [ 270.920462][T26652] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 270.957702][T26663] syzkaller1: entered promiscuous mode [ 270.963698][T26663] syzkaller1: entered allmulticast mode [ 270.989932][T26671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26671 comm=syz.4.9250 [ 271.005450][T26671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26671 comm=syz.4.9250 [ 271.024346][ T29] audit: type=1400 audit(1750994831.667:12888): avc: denied { connect } for pid=26674 comm="syz.2.9253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.123865][ T29] audit: type=1400 audit(1750994831.763:12889): avc: denied { ioctl } for pid=26680 comm="syz.2.9255" path="socket:[73465]" dev="sockfs" ino=73465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.251165][ T29] audit: type=1326 audit(1750994831.892:12890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26684 comm="syz.2.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 271.277650][ T29] audit: type=1326 audit(1750994831.892:12891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26684 comm="syz.2.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 271.304387][ T29] audit: type=1326 audit(1750994831.903:12892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26684 comm="syz.2.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 271.330960][ T29] audit: type=1326 audit(1750994831.903:12893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26684 comm="syz.2.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 271.355044][ T29] audit: type=1326 audit(1750994831.903:12894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26684 comm="syz.2.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 271.380175][ T29] audit: type=1326 audit(1750994831.903:12895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26684 comm="syz.2.9257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8d68e929 code=0x7ffc0000 [ 271.565695][T26709] netem: change failed [ 271.620170][T26715] loop3: detected capacity change from 0 to 512 [ 271.644742][T26721] sd 0:0:1:0: device reset [ 271.649932][T26715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.9268: bg 0: block 5: invalid block bitmap [ 271.688378][T26715] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 271.709598][T26715] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9268: invalid indirect mapped block 3 (level 2) [ 271.746682][T26715] EXT4-fs (loop3): 1 orphan inode deleted [ 271.752654][T26715] EXT4-fs (loop3): 1 truncate cleaned up [ 271.808361][T26715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.907515][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.996139][T26757] netlink: 'syz.2.9281': attribute type 13 has an invalid length. [ 272.005375][T26757] netlink: 'syz.2.9281': attribute type 17 has an invalid length. [ 272.018641][T26756] loop3: detected capacity change from 0 to 512 [ 272.018921][T26753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9283'. [ 272.038271][T26757] 0XD: left allmulticast mode [ 272.052196][T26757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.069676][T15122] lo speed is unknown, defaulting to 1000 [ 272.079737][T26756] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9284: Failed to acquire dquot type 1 [ 272.104399][T26756] EXT4-fs (loop3): 1 truncate cleaned up [ 272.117950][T26756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.139876][T26762] syzkaller0: tun_chr_ioctl cmd 35108 [ 272.147926][T26756] ext4 filesystem being mounted at /1920/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.162114][T26756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.330968][T26784] loop4: detected capacity change from 0 to 128 [ 272.480348][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9302'. [ 272.490928][T26808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9302'. [ 272.500541][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9302'. [ 272.511572][T26808] netlink: 'syz.1.9302': attribute type 6 has an invalid length. [ 272.636949][T26835] pimreg: entered allmulticast mode [ 272.657853][T26835] pimreg: left allmulticast mode [ 272.735492][T26856] netlink: 'syz.2.9315': attribute type 13 has an invalid length. [ 272.747734][T26856] netlink: 'syz.2.9315': attribute type 17 has an invalid length. [ 272.787122][T26856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.130160][T26905] netlink: 'syz.1.9344': attribute type 1 has an invalid length. [ 273.156382][T26905] bond1: entered promiscuous mode [ 273.164050][T26905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.184887][T26905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 273.195683][T26905] bond1: (slave batadv1): making interface the new active one [ 273.204387][T26905] batadv1: entered promiscuous mode [ 273.211644][T26905] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 273.516211][T26994] random: crng reseeded on system resumption [ 273.640574][T27007] ipvlan2: entered promiscuous mode [ 273.649642][T27007] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 273.667009][T27007] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.695771][T27002] lo speed is unknown, defaulting to 1000 [ 273.718170][T27002] lo speed is unknown, defaulting to 1000 [ 273.735821][T27020] netlink: 'syz.4.9371': attribute type 298 has an invalid length. [ 274.026885][T27086] loop2: detected capacity change from 0 to 512 [ 274.054562][T27086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.070148][T27086] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.096262][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.170223][T27113] netlink: 'syz.2.9393': attribute type 280 has an invalid length. [ 274.415809][T27135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27135 comm=syz.1.9404 [ 274.603798][T27152] __nla_validate_parse: 7 callbacks suppressed [ 274.603814][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 274.619663][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 274.637770][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 274.648443][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 274.677949][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 274.688300][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 274.768703][T27167] loop4: detected capacity change from 0 to 512 [ 274.778591][T27167] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 274.794480][T27167] EXT4-fs (loop4): mount failed [ 275.160488][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9420'. [ 275.285392][T27196] random: crng reseeded on system resumption [ 275.351370][T27204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.360293][T27204] bond0: (slave bond2): Enslaving as an active interface with an up link [ 275.415135][T27248] binfmt_misc: register: failed to install interpreter file ./file2 [ 275.584002][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 275.584019][ T29] audit: type=1326 audit(1750994842.551:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27265 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0268dfe929 code=0x7ffc0000 [ 275.615057][ T29] audit: type=1326 audit(1750994842.551:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27265 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0268dfe929 code=0x7ffc0000 [ 275.624489][T27268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27268 comm=syz.4.9432 [ 275.639255][ T29] audit: type=1326 audit(1750994842.551:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27265 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f0268dfe929 code=0x7ffc0000 [ 275.679776][ T29] audit: type=1326 audit(1750994842.658:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27265 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0268dfe929 code=0x7ffc0000 [ 275.703717][ T29] audit: type=1326 audit(1750994842.658:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27265 comm="syz.1.9433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0268dfe929 code=0x7ffc0000 [ 275.843615][T27283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9440'. [ 275.978881][ T29] audit: type=1400 audit(1750994842.980:13112): avc: denied { remount } for pid=27290 comm="syz.7.9443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 276.061952][ T29] audit: type=1400 audit(1750994843.066:13113): avc: denied { mount } for pid=27300 comm="syz.7.9448" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.201251][ T29] audit: type=1326 audit(1750994843.216:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.3.9454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0711f1e929 code=0x7ffc0000 [ 276.229023][ T29] audit: type=1326 audit(1750994843.216:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.3.9454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0711f1e929 code=0x7ffc0000 [ 276.257658][ T29] audit: type=1326 audit(1750994843.216:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.3.9454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0711f1e929 code=0x7ffc0000 [ 276.339135][T27320] xt_HMARK: spi-set and port-set can't be combined [ 276.397971][T27330] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9462'. [ 276.544583][T27351] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 276.600663][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9472'. [ 276.657528][T27360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27360 comm=syz.1.9474 [ 276.780507][T27378] netlink: 'syz.2.9481': attribute type 13 has an invalid length. [ 276.808802][T27378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.044367][T27407] netem: change failed [ 277.068843][T27409] random: crng reseeded on system resumption [ 277.414824][T27438] netem: change failed [ 277.652600][T27472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27472 comm=syz.7.9527 [ 277.668860][T27472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27472 comm=syz.7.9527 [ 277.795952][T27476] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.807090][ T36] IPVS: starting estimator thread 0... [ 277.909427][T27484] IPVS: using max 2112 ests per chain, 105600 per kthread [ 278.026857][T27519] netlink: 'syz.3.9545': attribute type 13 has an invalid length. [ 278.074539][T27519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.095186][T27524] xt_NFQUEUE: number of total queues is 0 [ 278.233242][T27537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.252293][T27537] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 278.295384][T27583] netlink: 'syz.1.9560': attribute type 1 has an invalid length. [ 278.447162][T27601] loop3: detected capacity change from 0 to 128 [ 278.515942][T27601] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.576650][T27601] ext4 filesystem being mounted at /1970/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.635971][T27593] Set syz1 is full, maxelem 65536 reached [ 278.740853][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.958067][ T3394] IPVS: starting estimator thread 0... [ 278.967362][T27642] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 279.047125][T27647] IPVS: using max 1920 ests per chain, 96000 per kthread [ 279.174079][T27663] loop4: detected capacity change from 0 to 2048 [ 279.184796][T27663] EXT4-fs: Ignoring removed nobh option [ 279.198380][T27663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.300810][T22752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.324592][T27681] __nla_validate_parse: 6 callbacks suppressed [ 279.324611][T27681] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9599'. [ 279.366177][T27688] macvlan1: entered promiscuous mode [ 279.372384][T27688] ipvlan0: entered promiscuous mode [ 279.378342][T27688] ipvlan0: left promiscuous mode [ 279.385035][T27688] macvlan1: left promiscuous mode [ 279.638326][T27721] loop3: detected capacity change from 0 to 512 [ 279.682767][T27721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.701369][T27721] ext4 filesystem being mounted at /1973/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.744060][T27738] loop2: detected capacity change from 0 to 512 [ 279.776375][T27738] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.9621: iget: bad extra_isize 50264 (inode size 256) [ 279.824988][T27738] EXT4-fs (loop2): Remounting filesystem read-only [ 279.868690][T27738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.912274][T27754] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 279.912274][T27754] program syz.1.9627 not setting count and/or reply_len properly [ 279.944783][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.973117][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.122376][T27785] netlink: 'syz.3.9635': attribute type 3 has an invalid length. [ 280.165263][T27793] program syz.4.9638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.205099][T27797] loop3: detected capacity change from 0 to 512 [ 280.229953][T27797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.9640: Parent and EA inode have the same ino 15 [ 280.245025][T27797] EXT4-fs (loop3): Remounting filesystem read-only [ 280.264581][T27797] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 280.291025][T27809] netlink: 304 bytes leftover after parsing attributes in process `syz.4.9643'. [ 280.306718][T27797] EXT4-fs (loop3): 1 orphan inode deleted [ 280.322102][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 280.322120][ T29] audit: type=1326 audit(1750994847.637:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.327712][T27797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.333501][ T29] audit: type=1326 audit(1750994847.637:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.388560][ T29] audit: type=1326 audit(1750994847.637:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.412601][ T29] audit: type=1326 audit(1750994847.637:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.436713][ T29] audit: type=1326 audit(1750994847.637:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.460433][ T29] audit: type=1326 audit(1750994847.637:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.484472][ T29] audit: type=1326 audit(1750994847.637:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.508698][ T29] audit: type=1326 audit(1750994847.637:13295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.532791][ T29] audit: type=1326 audit(1750994847.637:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.556655][ T29] audit: type=1326 audit(1750994847.637:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27812 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9fa0e929 code=0x7ffc0000 [ 280.582378][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.711416][T27830] pimreg: entered allmulticast mode [ 280.737476][T27830] pimreg: left allmulticast mode [ 280.756038][T27830] lo: left allmulticast mode [ 281.065061][T27902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9680'. [ 281.074638][T27902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9680'. [ 281.115354][T27907] lo speed is unknown, defaulting to 1000 [ 281.121523][T27907] lo speed is unknown, defaulting to 1000 [ 281.337135][T27934] loop2: detected capacity change from 0 to 2048 [ 281.345470][T27934] EXT4-fs: Ignoring removed nobh option [ 281.361655][T27934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.438666][T27941] loop3: detected capacity change from 0 to 164 [ 281.460847][T27941] syz.3.9686: attempt to access beyond end of device [ 281.460847][T27941] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 281.486179][T27941] syz.3.9686: attempt to access beyond end of device [ 281.486179][T27941] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 281.569441][T27951] rdma_op ffff888103046d80 conn xmit_rdma 0000000000000000 [ 281.606201][T22755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.806872][T27977] bond1: (slave veth0_to_bond): Releasing backup interface [ 281.824656][T27977] team0: Port device team_slave_0 removed [ 281.837142][T27982] netlink: 'syz.3.9700': attribute type 10 has an invalid length. [ 281.847329][T27977] team0: Port device team_slave_1 removed [ 281.854998][T27977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.864927][T27977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.876832][T27977] team0: Port device geneve1 removed [ 281.890595][T27978] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9699'. [ 282.190998][T28024] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 282.190998][T28024] program syz.4.9718 not setting count and/or reply_len properly [ 282.271646][T28026] lo speed is unknown, defaulting to 1000 [ 282.299272][T28026] lo speed is unknown, defaulting to 1000 [ 282.535490][T28087] veth7: left promiscuous mode [ 282.561197][ T3394] lo speed is unknown, defaulting to 1000 [ 282.567545][ T3394] syz2: Port: 1 Link DOWN [ 282.749507][T28117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9752'. [ 283.276613][T28165] loop4: detected capacity change from 0 to 1024 [ 283.285701][T28154] Set syz1 is full, maxelem 65536 reached [ 283.308755][T28165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.331054][T28165] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.407462][T28180] lo speed is unknown, defaulting to 1000 [ 283.414559][T28180] lo speed is unknown, defaulting to 1000 [ 283.520691][T22752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.679699][T28237] ALSA: seq fatal error: cannot create timer (-22) [ 283.833904][T28258] ================================================================== [ 283.842764][T28258] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 283.851750][T28258] [ 283.854304][T28258] read to 0xffff888119845520 of 4 bytes by task 28245 on cpu 1: [ 283.862765][T28258] selinux_inode_permission+0x2a7/0x620 [ 283.868693][T28258] security_inode_permission+0x6d/0xb0 [ 283.874200][T28258] inode_permission+0x106/0x310 [ 283.879361][T28258] link_path_walk+0x162/0x900 [ 283.884451][T28258] path_openat+0x1de/0x2170 [ 283.889010][T28258] do_filp_open+0x109/0x230 [ 283.893559][T28258] io_openat2+0x272/0x390 [ 283.898064][T28258] io_openat+0x1b/0x30 [ 283.902347][T28258] __io_issue_sqe+0xfe/0x2e0 [ 283.906973][T28258] io_issue_sqe+0x53/0x970 [ 283.911599][T28258] io_submit_sqes+0x667/0xfd0 [ 283.916502][T28258] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 283.922605][T28258] __x64_sys_io_uring_enter+0x78/0x90 [ 283.928007][T28258] x64_sys_call+0x28c8/0x2fb0 [ 283.932708][T28258] do_syscall_64+0xd2/0x200 [ 283.937407][T28258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.943408][T28258] [ 283.945745][T28258] write to 0xffff888119845520 of 4 bytes by task 28258 on cpu 0: [ 283.953739][T28258] selinux_inode_permission+0x31b/0x620 [ 283.959528][T28258] security_inode_permission+0x6d/0xb0 [ 283.965116][T28258] inode_permission+0x106/0x310 [ 283.970041][T28258] link_path_walk+0x162/0x900 [ 283.974737][T28258] path_openat+0x1de/0x2170 [ 283.979281][T28258] do_filp_open+0x109/0x230 [ 283.984008][T28258] io_openat2+0x272/0x390 [ 283.988647][T28258] io_openat+0x1b/0x30 [ 283.992764][T28258] __io_issue_sqe+0xfe/0x2e0 [ 283.997484][T28258] io_issue_sqe+0x53/0x970 [ 284.001931][T28258] io_wq_submit_work+0x3f7/0x5f0 [ 284.006899][T28258] io_worker_handle_work+0x44e/0x9b0 [ 284.012261][T28258] io_wq_worker+0x22e/0x870 [ 284.016897][T28258] ret_from_fork+0xda/0x150 [ 284.021430][T28258] ret_from_fork_asm+0x1a/0x30 [ 284.026215][T28258] [ 284.028548][T28258] value changed: 0x00000000 -> 0x00000001 [ 284.034752][T28258] [ 284.037428][T28258] Reported by Kernel Concurrency Sanitizer on: [ 284.043630][T28258] CPU: 0 UID: 0 PID: 28258 Comm: iou-wrk-28245 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 284.056513][T28258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.067034][T28258] ==================================================================