last executing test programs: 8m26.198757472s ago: executing program 32 (id=2414): socket$netlink(0x10, 0x3, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfee00}], 0x1, 0x1200, 0x30, 0x3) 7m45.654539995s ago: executing program 33 (id=3651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) 5m58.972841857s ago: executing program 34 (id=7480): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5m49.817774727s ago: executing program 35 (id=7918): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 5m22.438578727s ago: executing program 36 (id=8877): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 3m29.638671241s ago: executing program 37 (id=12592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3m23.429845833s ago: executing program 38 (id=12758): timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 2m45.691033309s ago: executing program 39 (id=14031): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'queue0\x00'}, {0x20, '&^,['}, {0x20, '#! '}], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d4974364d8864ce4"}, 0x45) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(r0, &(0x7f0000002340)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2m43.836439303s ago: executing program 40 (id=14070): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x3}}}}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', r2, 0x7800, 0x8, 0x8, 0x5, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) 2m31.184862839s ago: executing program 41 (id=14515): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x80c00, 0x8) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000133}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m13.824998148s ago: executing program 42 (id=15104): syz_usbip_server_init(0x3) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2m13.314690935s ago: executing program 7 (id=15122): socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000300000008000300", @ANYRES32=r0], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m13.221916076s ago: executing program 7 (id=15124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x5d) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2m13.180276967s ago: executing program 7 (id=15126): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x80000213}, &(0x7f00000004c0), &(0x7f0000000400)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$FIONREAD(r1, 0x8924, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 2m13.116621047s ago: executing program 7 (id=15130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 2m13.071788408s ago: executing program 7 (id=15132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ppoll(&(0x7f0000000140)=[{r0, 0x30}], 0x1, 0x0, 0x0, 0x0) 2m12.887636881s ago: executing program 7 (id=15144): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m12.829978381s ago: executing program 43 (id=15144): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m8.045067644s ago: executing program 5 (id=15264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 2m8.006274325s ago: executing program 5 (id=15266): r0 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) 2m7.974739815s ago: executing program 5 (id=15269): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x94, 0x13, 0x53b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_sample={0x50, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x8, 0x6, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 2m7.924058346s ago: executing program 5 (id=15272): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 2m7.884466106s ago: executing program 5 (id=15274): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendfile(r3, r2, 0x0, 0x17) 2m7.794930978s ago: executing program 5 (id=15279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) 2m7.775586768s ago: executing program 44 (id=15279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) 1m44.951984678s ago: executing program 3 (id=15974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1m44.873810999s ago: executing program 3 (id=15976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x20000000000001c8, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m44.83816778s ago: executing program 3 (id=15977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x2c, r3, 0x6a98047402e98331, 0x70bd21, 0x8000, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) socket$netlink(0x10, 0x3, 0x0) 1m44.78079884s ago: executing program 3 (id=15979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) move_mount(r0, &(0x7f0000000100)='./file0/../file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00', 0x210) 1m44.76363788s ago: executing program 3 (id=15981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m44.164068718s ago: executing program 3 (id=15997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000600)="3bcf5677", 0x4}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f00000003c0)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000280)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 1m44.097930809s ago: executing program 45 (id=15997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000600)="3bcf5677", 0x4}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f00000003c0)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000280)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 1m30.081995414s ago: executing program 4 (id=16456): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 1m30.061508884s ago: executing program 4 (id=16457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 1m30.041902004s ago: executing program 4 (id=16458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf4369000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 1m29.63428355s ago: executing program 4 (id=16475): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 1m29.60366869s ago: executing program 4 (id=16477): unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x6, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m29.394123093s ago: executing program 4 (id=16480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x4000000, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x7ff, 0x91a0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xdd, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x81, 0x6, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x1, 0x1, 0x0, 0x800, 0xfff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x40000, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xfffffffe}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x8080) 1m29.393924503s ago: executing program 46 (id=16480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x4000000, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x7ff, 0x91a0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xdd, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x81, 0x6, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x1, 0x1, 0x0, 0x800, 0xfff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x40000, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xfffffffe}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x8080) 15.650957414s ago: executing program 9 (id=18460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x3d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 15.630470884s ago: executing program 9 (id=18462): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000300)={@empty, @dev={0xac, 0x14, 0x14, 0x28}, @remote}, 0xc) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x3c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0x4, 0x800, 0x0, 0x2, 0x39a, 0x2b6f, 0x1}}, {0x6, 0x2, [0x183]}}, {{0x1c, 0x1, {0x4, 0x2, 0x2, 0x1, 0x2, 0x3572, 0x2, 0x1}}, {0x2, 0x2, [0x0]}}]}]}, 0x94}}, 0x0) 15.586593224s ago: executing program 9 (id=18464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) dup2(r1, r0) 15.568956165s ago: executing program 9 (id=18465): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 15.533286585s ago: executing program 9 (id=18466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) unshare(0x400) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ppoll(&(0x7f0000000300)=[{r0, 0x10800}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) 15.301624208s ago: executing program 9 (id=18474): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 15.301275678s ago: executing program 47 (id=18474): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.895681605s ago: executing program 2 (id=18946): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x200000000003}, 0x18) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) dup3(r3, r0, 0x0) 1.864352355s ago: executing program 2 (id=18948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001140)={@val={0x800e, 0x6002}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x2, 0x11, 0x0, @void}, "8ae276e5e613161e"}}}}}}}, 0x3a) 1.655679958s ago: executing program 1 (id=18954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="10470710797af31b3d0e1e5d6a8a110e205161c15b63824b139de0005a20e847b94c122dc2e7ceb6cbb49a3cd7566f32646afcf8d0cb3d9bfa22e3f3a3b148e4accb61dbd45b1f206df5ef5ecee238f9ad262d5b27bb5f6f2713e32ab61fcdcd949020bd434e6d341036403f2a0b5cc7e9e844d55c10298560ce5d8e3c0e37bef92616615a210f7f7ca721b98c72f7aab70e88c58d58325a1ff932b22d00258d180f70e8ba83721d8ed0020f0bc7dd6e32405f7868e06723b9873060e832da96acd114c36f07649a874991352a6ca8f0924acc4cd614e536c4560f619189b067160a802b90652e801b008c76cda51deb8dba72d7e375fa898c82e53b9ea45afef85aa3c903d6565f0c3b435b3d721de214f9ec539ab6d809c3732701ccf70b329ffab7d433f8e539b415d8691f7ec0a685792600d9908c003e1984328027937f98c3d8ff3ee434c25dec1341fb03f95aaf030d2cd52cdbc2b85586cba51526cd0f3eb6d46195102abe000e6ad1d381ecc3c9d9075009aa12c3bc56e5447add48ceb55f29b91c4cb628e1fae7d1812a43145607db3d23e90bb73ec12d99b7c642327b492d7038032e26804d36edb95b54366a2101e9419b7f98ddf654e2700d40c2f83ae492c15aa62069cdd321df874588ef8ad3b8d79a5d05c6e1785a14277af5ce69e15043b0d8579a7606f469bf6d157163bc09f7d281f295cff4cadce38fe24e2a420bc363c2a68e1d5594923d4285a40bb7aa96e655b10ad67656c2e340da3e8592b780b1950e63c9d600eb8d76e5ac3cd537d93132c57a2a43803dc28e04489a3ea68a71e52811000a6ebc5680cdb98af1e6ddc88562c442bc5c61060aa1b61486a6c84719d0d6b3f155b723471e70001138e4e023c89f00698aba1a3b38d5f69bee1fc076c75df92e3cb3ac41b2cbad30f4f7b746d80bd49e981a65d70f7631db375c445601a69d8f0fd1b174695fd670e8d0a82b420aab0356ba86f0e4572865505676acb5d81d215f3e37f62807ce97f5bc47bb747df70ae1589d806c9e51e5f5c8561605277f6dea51bfdf887d93f63a829ecfd18a4da3071af7d77d86591d407b156052f5a5dbbba74a16d041c6932373e71c4ad7ef06886e29e9139a687abf0f306e9e423f01e2ffb2758ba78b5ba69db675eb1dc55b60b052a48065d8cc3b66594d3351f1f7e99e294f49761f7db3a114fe680e4c9faec8bb4fdb70838dc73d3cd5c1a61f7f2f7a441a048e0aae3c7fd10b8df8d77fe861e9c241d54533091e1e9439a00820e84a609fb55ed6d02c7b1ffe904b907955d03345058bcaec1528b91532eb4dd0a1917514db1ca20607131efcac877242a5359ec0b21f343806f9fb672b51747dd6d8a649b9bd5f796efb6939680cbd619c3c8706ac883087b341726f9c6f64c98b0c9cb2d7737a8e08ded30d55c6541925b194f25ad1aa042f3db1c5501fc03b5d626f2e429e87435fdbfaad3e4949874bc8e70d0e0a2659557e19088617ab10e50fb4b1d99e6d2052596c363480ba99150979a744f489db9f56750e106224b9c4201d6815e322e1c30de74ce20345bbd3cd2d0b9e74b92b411763bb8c8664e031eb0b41f3e6282d23ae92eddf981c764112ba1e598920c12fed15e06e56cfd76a76d7ce6f7dab7c0d3b50e40f63e4895eabd964e74f9c7c5b9d61480f9055ff36ac5000ff8f7cb1", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 1.586415158s ago: executing program 1 (id=18955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.436634771s ago: executing program 2 (id=18959): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(r0, &(0x7f0000000340)=""/117, 0x75) 1.369921632s ago: executing program 2 (id=18963): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 1.228245573s ago: executing program 2 (id=18966): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) unshare(0x68040200) mmap(&(0x7f00006a4000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010427bd7000ffdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 1.147354734s ago: executing program 1 (id=18968): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) rt_tgsigqueueinfo(r0, r0, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f0000000600)={0x32, 0xfff, 0xfffffff7}) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x1, 0x0, 0xff8f}, &(0x7f0000000480)=[{}]) 1.100798655s ago: executing program 1 (id=18970): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 735.32584ms ago: executing program 2 (id=18973): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x4, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c50, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000440)='\x00R', 0x2, 0x2404c885, &(0x7f00000000c0)={0xa, 0x3, 0x27b6a97, @private0={0xfc, 0x0, '\x00', 0x6}, 0x8083}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 549.863092ms ago: executing program 6 (id=18980): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000001240)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 495.810653ms ago: executing program 6 (id=18983): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$eJzs3M9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge97EE8ehN29x/wsrfdy1725mVhDyuL7CyZH5roJO6OZqPr9wMy78zzPOP7khieCc4c/vjvb7WKrVeMlsTTSmIiIkcieYlLIOZv4+44Jd225fOJZw8/Xlxe+a5YKs0uKDVXXPqyoJTKTd39/c+Mn7Y/Lgf5nw+fFp4cvH/w4eHLpV+rtqraqt5oKUOtNh63jFXLVOtVu6YrNW+Zhm2qat02m1684cUrVmNjo62M+vpkdqNp2rYy6m1VM9uq1VCtZlsZvxjVutJ1XU1mJUwq9OhtVd5ZWDCKEYvXrngyiOqF4zgDwk6saCREJHMuUt4Z6rwAAMC1dKb/T7gtfaT+X3Ju/99JPu3/dz+535r4YS/n9//7qbD+/6tH3rl6+v+0iFxp/58OWf35jujG23qT5Ev1/7geps5f08Z69prNopH1/35df/+0O+0O6P8BAAAAAAAAAAAAAAAAAAAAALgJjhxHcxxHC7b+zxenGd6xUc4Rw9Pn9dfG/Tumgv1RzxPDsbi8Imn3xr1kTsT6Z7O8Wfa2fjxInBZNjt33g68zDu48Uh15uWdt+fVbm+WEGylWpCqWmDIjmuTP1jvO3Lel2Rnl6a0fk2x3fUE0eS+8vhBan5LPPu2q10WTB2vSEEvWO+/rY+ek/q8Zpb75vnSmPuPmAQAAAADwLtDVidDrd13vF/fqT66ve78fEOm6Pp8OvT5Pah8lR7t2AAAAAABuC7v9R82wLLM5YJCRi3OiD5LRyscG5SS6VtgTku2+S075Twge3koHDIJ/pKilukJp+d8/HOXMwfqHM+e4RKmaEmfcm9VlfnvwtVG/HJkf9uuV7BP64L87z6OdOeY/tbc79PVe+oKVDm0w9lofHk7ikp8+AAAAAN6moOnP2O5ubNTzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNhrwGLDkVT1ObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LVwEAAP//mxn/6g==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 483.599823ms ago: executing program 0 (id=18984): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7b}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 425.840824ms ago: executing program 8 (id=18985): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000500040001000000050001000700000011000300686173683a69702c706f7274000000000900020073797a3100000000050005000a0000000c000780050014"], 0x58}}, 0x0) 402.290294ms ago: executing program 8 (id=18986): r0 = creat(&(0x7f0000000600)='./file0\x00', 0x1e0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000001880)="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", 0x45c) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) 383.826144ms ago: executing program 0 (id=18987): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 351.256485ms ago: executing program 0 (id=18988): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x0, 0x0, 0x8, 0x8010000}) 345.461835ms ago: executing program 6 (id=18989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) close(r3) 289.518196ms ago: executing program 8 (id=18990): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x6000) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r0) 259.880406ms ago: executing program 1 (id=18991): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa2, 0x8000}, 0x0, 0x0, 0x800110, 0x7, 0x4, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) 238.204136ms ago: executing program 0 (id=19001): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 237.749807ms ago: executing program 8 (id=18992): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 234.807897ms ago: executing program 6 (id=18993): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x5, 0x7de}, 0x100002, 0x7f, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0xfe) 211.318537ms ago: executing program 6 (id=18994): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 179.506327ms ago: executing program 6 (id=18995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="1c0000001a", 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", 0x0}, 0x20) 178.806067ms ago: executing program 8 (id=18996): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = syz_clone3(0x0, 0x0) tgkill(r0, r0, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x80000001}, 0x15084, 0x4, 0x4, 0x8, 0x4, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 86.638649ms ago: executing program 8 (id=18997): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x1090, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x0, 0x400132a}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r4 = dup(r0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) 86.271238ms ago: executing program 0 (id=18998): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09002100000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf4ece4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c7f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f921860c6e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294800323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e824f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd009e9e1cc9eb3d541e407cc2dae5cd628ab84875f2deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c49a0189da9173c62f0ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d8935a9c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e46d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc11680bf9b017c8a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d39a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353026bdc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340103fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedd47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d7346b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb3b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4050000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a2002e5f2f7f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6f62c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2faa2b9e17965b71104f8e311e1e936ce0cf783eb978fcd56f225f782d00e7008c664e34a3cc563e5fc4fa6aeced4bf805f71fc74472c0386aee070339af9fee8b32efad7fd0a0c7b3045d74bcb568a888fc9aa4599b71adad2135acbb600000fd2fd1755764ebfdf13f8633fe6358c8e05a792f0b9f133687041254cdf6cadeadcaa557de5fd2d3da5a75168fc36847cfa9b7c1a51f05bdb9bd36e9b17a75000000000000000000060000000000000074f3f5c25cb1d09b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='fib6_table_lookup\x00', r0}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 85.848139ms ago: executing program 1 (id=18999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x219}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}, 0x0, 0x8000}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=19000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) close(0x3) kernel console output (not intermixed with test programs): 15][T26741] loop1: detected capacity change from 0 to 256 [ 534.699847][T26741] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 534.707916][T26741] FAT-fs (loop1): Filesystem has been set read-only [ 534.925042][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17050'. [ 534.944885][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17050'. [ 535.086011][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17054'. [ 535.233598][T26763] bond1: entered promiscuous mode [ 535.247357][T26763] bond1: entered allmulticast mode [ 535.254182][T26763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.319873][ T37] dummy0: left promiscuous mode [ 535.337061][T26847] loop6: detected capacity change from 0 to 128 [ 535.673633][T26902] loop6: detected capacity change from 0 to 1024 [ 535.689522][T26902] journal_path: Non-blockdev passed as './file0' [ 535.696781][T26902] EXT4-fs: error: could not find journal device path [ 535.728420][T26902] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 535.799095][T26929] dummy0: entered promiscuous mode [ 535.804461][T26929] macsec1: entered allmulticast mode [ 535.810194][T26929] dummy0: entered allmulticast mode [ 535.844375][T26924] pim6reg1: entered promiscuous mode [ 535.849746][T26924] pim6reg1: entered allmulticast mode [ 536.075365][T26979] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 536.109965][T26984] vlan1: entered allmulticast mode [ 536.115561][T26984] bridge0: port 3(vlan1) entered blocking state [ 536.121974][T26984] bridge0: port 3(vlan1) entered disabled state [ 536.129177][T26984] vlan1: entered promiscuous mode [ 536.135347][T26984] bridge0: mtu less than device minimum [ 536.160576][T26989] netlink: 'syz.6.17075': attribute type 1 has an invalid length. [ 536.176321][T26989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.198464][T26989] bond1: (slave veth5): Enslaving as an active interface with a down link [ 536.687670][T27042] loop9: detected capacity change from 0 to 512 [ 536.701882][T27042] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 536.711134][T27042] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 536.728294][T27042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 536.738770][T27042] System zones: 0-2, 18-18, 34-34 [ 536.745832][T27042] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 536.763259][T27042] EXT4-fs (loop9): 1 truncate cleaned up [ 536.770284][T27042] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.906553][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.010862][T27074] __nla_validate_parse: 1 callbacks suppressed [ 537.010883][T27074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17088'. [ 538.335973][T27121] wireguard0: entered promiscuous mode [ 538.341800][T27121] wireguard0: entered allmulticast mode [ 538.349871][T27122] SELinux: failed to load policy [ 538.354170][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 538.354189][ T29] audit: type=1400 audit(1806.081:18172): avc: denied { load_policy } for pid=27120 comm="syz.6.17108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 538.398973][T27128] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 538.469639][T27137] loop1: detected capacity change from 0 to 512 [ 538.481243][T27137] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 538.497522][T27140] binfmt_misc: register: failed to install interpreter file ./file0 [ 538.558066][ T29] audit: type=1326 audit(1806.290:18173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.583922][ T29] audit: type=1326 audit(1806.322:18174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.608007][ T29] audit: type=1326 audit(1806.322:18175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.631292][ T29] audit: type=1326 audit(1806.322:18176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.655680][ T29] audit: type=1326 audit(1806.322:18177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.679067][ T29] audit: type=1326 audit(1806.322:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.703308][ T29] audit: type=1326 audit(1806.322:18179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.726650][ T29] audit: type=1326 audit(1806.353:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.750793][ T29] audit: type=1326 audit(1806.353:18181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.17114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 538.756226][T27150] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.17117'. [ 538.925977][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2e0000: rx timeout, send abort [ 538.982365][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17122'. [ 538.992263][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17122'. [ 539.052171][T27169] bond2: entered promiscuous mode [ 539.057712][T27169] bond2: entered allmulticast mode [ 539.065830][T27169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.269085][T27221] wireguard1: entered promiscuous mode [ 539.274642][T27221] wireguard1: entered allmulticast mode [ 539.402316][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2e0e00: rx timeout, send abort [ 539.410933][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2e0000: abort rx timeout. Force session deactivation [ 539.563302][T27238] openvswitch: netlink: Message has 6 unknown bytes. [ 539.786160][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17135'. [ 539.797935][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17135'. [ 539.887079][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2e0e00: abort rx timeout. Force session deactivation [ 540.047408][T27242] bond2: entered promiscuous mode [ 540.053089][T27242] bond2: entered allmulticast mode [ 540.073823][T27242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.114429][T27290] loop1: detected capacity change from 0 to 128 [ 540.126664][T27290] bio_check_eod: 8 callbacks suppressed [ 540.126684][T27290] syz.1.17139: attempt to access beyond end of device [ 540.126684][T27290] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 540.339332][T27323] loop6: detected capacity change from 0 to 512 [ 540.355472][T27323] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 540.426353][T27337] loop9: detected capacity change from 0 to 1024 [ 540.441994][T27337] EXT4-fs: Ignoring removed oldalloc option [ 540.449188][T27337] EXT4-fs: Ignoring removed orlov option [ 540.461013][T27337] EXT4-fs (loop9): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 540.515622][T27337] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.536706][T27351] openvswitch: netlink: Message has 6 unknown bytes. [ 540.566561][T27360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17153'. [ 540.604796][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.619769][T27363] lo speed is unknown, defaulting to 1000 [ 540.740388][T27383] loop6: detected capacity change from 0 to 2048 [ 540.779223][T27383] loop6: p1 < > p4 [ 540.786867][T27383] loop6: p4 size 8388608 extends beyond EOD, truncated [ 541.037183][T27438] loop2: detected capacity change from 0 to 512 [ 541.055105][T27438] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 541.176717][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17176'. [ 541.186035][T27457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17176'. [ 541.203905][T27459] openvswitch: netlink: Message has 6 unknown bytes. [ 541.212364][T27457] wireguard0: entered promiscuous mode [ 541.218094][T27457] wireguard0: entered allmulticast mode [ 541.376718][T27481] loop1: detected capacity change from 0 to 256 [ 541.425628][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17170'. [ 541.720869][T27486] bond0: entered promiscuous mode [ 541.729120][T27486] bond0: entered allmulticast mode [ 541.741644][T27486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.960667][T27574] loop9: detected capacity change from 0 to 128 [ 541.997444][T27574] syz.9.17185: attempt to access beyond end of device [ 541.997444][T27574] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 542.047746][T27586] loop2: detected capacity change from 0 to 164 [ 542.079437][T27586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 542.090547][T27585] lo speed is unknown, defaulting to 1000 [ 542.109491][T27586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 542.150282][T27586] Symlink component flag not implemented [ 542.156025][T27586] Symlink component flag not implemented [ 542.187282][T27586] Symlink component flag not implemented (7) [ 542.193395][T27586] Symlink component flag not implemented (116) [ 542.271536][T27616] loop2: detected capacity change from 0 to 512 [ 542.318140][T27616] EXT4-fs: Ignoring removed mblk_io_submit option [ 542.356626][T27616] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.365813][T27616] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 542.450178][T27616] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 542.467809][T27636] __nla_validate_parse: 2 callbacks suppressed [ 542.467882][T27636] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17190'. [ 542.495846][T27616] System zones: 0-2, 18-18, 34-34 [ 542.512861][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17191'. [ 542.523944][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17191'. [ 542.537918][T27616] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 542.590235][T27616] EXT4-fs (loop2): 1 truncate cleaned up [ 542.606136][T27616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.694854][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.811267][T27638] bond2: entered promiscuous mode [ 542.817726][T27638] bond2: entered allmulticast mode [ 542.837096][T27638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.876975][T27684] dvmrp0: entered allmulticast mode [ 542.888091][T27681] dvmrp0: left allmulticast mode [ 543.098407][T27705] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 543.121876][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 543.121896][ T29] audit: type=1326 audit(1811.099:18691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa342a05927 code=0x7ffc0000 [ 543.152096][ T29] audit: type=1326 audit(1811.099:18692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3429aab39 code=0x7ffc0000 [ 543.175268][ T29] audit: type=1326 audit(1811.099:18693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 543.196681][T27707] lo speed is unknown, defaulting to 1000 [ 543.202700][ T29] audit: type=1326 audit(1811.109:18694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa342a05927 code=0x7ffc0000 [ 543.228230][ T29] audit: type=1326 audit(1811.109:18695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3429aab39 code=0x7ffc0000 [ 543.251532][ T29] audit: type=1326 audit(1811.109:18696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 543.275466][ T29] audit: type=1326 audit(1811.120:18697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa342a05927 code=0x7ffc0000 [ 543.298619][ T29] audit: type=1326 audit(1811.120:18698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3429aab39 code=0x7ffc0000 [ 543.322492][ T29] audit: type=1326 audit(1811.120:18699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 543.345661][ T29] audit: type=1326 audit(1811.130:18700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27634 comm="syz.6.17192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa342a05927 code=0x7ffc0000 [ 543.581287][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 543.589107][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 543.610426][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.618238][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.625940][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.633735][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.641533][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.649262][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.657056][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.664776][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.672449][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.680271][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.688026][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.695743][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.703526][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.711206][ T3389] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 543.732665][ T3389] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 543.778287][T27754] lo speed is unknown, defaulting to 1000 [ 543.909501][T27768] loop1: detected capacity change from 0 to 2048 [ 543.989286][T27768] loop1: p1 < > p4 [ 543.998247][T27768] loop1: p4 size 8388608 extends beyond EOD, truncated [ 544.061574][T27794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17215'. [ 544.072329][T27794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17215'. [ 544.460619][T27794] bond3: entered promiscuous mode [ 544.468399][T27794] bond3: entered allmulticast mode [ 544.496528][T27794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.771518][T27863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17227'. [ 544.780674][T27863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17227'. [ 544.812441][T27863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17227'. [ 544.850821][T27868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17228'. [ 544.860683][T27868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17228'. [ 544.943974][T27878] pim6reg1: entered promiscuous mode [ 544.949354][T27878] pim6reg1: entered allmulticast mode [ 545.107065][T27896] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 545.194482][T27902] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.205166][T27902] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.216564][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 545.224395][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2 [ 545.266345][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.267154][T27902] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.274091][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.284664][T27902] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.291492][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.309122][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.316872][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.324767][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.332492][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.340290][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.348212][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.356061][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.363790][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.371577][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.379398][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.387180][ T3389] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 545.400823][ T3389] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 545.437291][T27902] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.447950][T27902] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.526050][T27902] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.535972][T27902] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.641795][T27902] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.650865][T27902] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.689027][T27902] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.697342][T27902] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.733446][T27902] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.741816][T27902] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.761578][T27902] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.770654][T27902] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.797238][T27960] pim6reg1: entered promiscuous mode [ 545.802851][T27960] pim6reg1: entered allmulticast mode [ 545.920756][T27977] loop9: detected capacity change from 0 to 128 [ 545.929215][T27977] EXT4-fs: Ignoring removed nobh option [ 545.938651][T27977] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 545.979916][T24314] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.229538][T28016] loop2: detected capacity change from 0 to 512 [ 546.244480][T28001] bond0: (slave dummy0): Releasing active interface [ 546.261447][T28016] EXT4-fs (loop2): 1 orphan inode deleted [ 546.268309][T28016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.268813][T28001] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 546.282207][T11096] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 1 [ 546.301604][T28001] bond_slave_0: left promiscuous mode [ 546.307227][T28001] bond_slave_0: left allmulticast mode [ 546.334439][T28001] team0: Port device team_slave_0 removed [ 546.353144][T28001] team0: Port device team_slave_1 removed [ 546.360929][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.371398][T28001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.378927][T28001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.396985][T28001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.404589][T28001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.438547][T28001] bond0: (slave veth3): Releasing active interface [ 546.451586][T28030] loop1: detected capacity change from 0 to 128 [ 546.459178][T28030] EXT4-fs: Ignoring removed nobh option [ 546.476024][T28030] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.496103][T28034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28034 comm=syz.2.17269 [ 546.544515][ T9580] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.767139][T28075] loop6: detected capacity change from 0 to 512 [ 546.796319][T28057] bond3: entered promiscuous mode [ 546.802327][T28057] bond3: entered allmulticast mode [ 546.805281][T28075] EXT4-fs (loop6): 1 orphan inode deleted [ 546.814321][T28075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.815855][T28057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.835917][T11140] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1 [ 546.899258][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.214394][T28140] loop1: detected capacity change from 0 to 512 [ 547.225980][T28140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 547.262410][T28140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.405830][ T9580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.515187][T28180] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.525518][T28180] bridge0: mtu less than device minimum [ 547.531197][T28180] bridge_slave_1: left allmulticast mode [ 547.536940][T28180] bridge_slave_1: left promiscuous mode [ 547.543449][T28180] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.551687][T28182] loop9: detected capacity change from 0 to 512 [ 547.560397][T28180] bridge0: mtu less than device minimum [ 547.572934][T28180] bond0: (slave bond_slave_0): Releasing backup interface [ 547.582747][T28180] bond0: (slave bond_slave_1): Releasing backup interface [ 547.604344][T28182] EXT4-fs (loop9): 1 orphan inode deleted [ 547.614603][T28182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.617494][T11096] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 1 [ 547.640641][T28180] team0: Port device team_slave_0 removed [ 547.651330][T28182] __nla_validate_parse: 28 callbacks suppressed [ 547.651413][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.666859][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.675533][T28180] team0: Port device team_slave_1 removed [ 547.686816][T28180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.697757][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.712127][T28180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.724174][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.733276][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.742449][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.745218][T28180] vlan1: left promiscuous mode [ 547.757172][T28180] bridge_slave_0: left promiscuous mode [ 547.763041][T28180] bridge0: port 3(vlan1) entered disabled state [ 547.772224][T28180] bond1: (slave veth5): Releasing active interface [ 547.792701][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.801825][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.813477][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17301'. [ 547.849981][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.910303][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 547.910318][ T29] audit: type=1326 audit(1816.117:19337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 547.940567][ T29] audit: type=1326 audit(1816.117:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 547.977241][ T29] audit: type=1326 audit(1816.117:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.001478][ T29] audit: type=1326 audit(1816.117:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.024708][ T29] audit: type=1326 audit(1816.117:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.048398][ T29] audit: type=1326 audit(1816.117:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.071612][ T29] audit: type=1326 audit(1816.117:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.095449][ T29] audit: type=1326 audit(1816.117:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.118675][ T29] audit: type=1326 audit(1816.127:19345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.142371][ T29] audit: type=1326 audit(1816.127:19346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.0.17313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 548.273546][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17322'. [ 548.881447][T28286] loop1: detected capacity change from 0 to 512 [ 548.909726][T28286] EXT4-fs (loop1): 1 orphan inode deleted [ 548.924994][T11092] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 1 [ 548.935465][T28286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.966114][T28293] loop6: detected capacity change from 0 to 512 [ 548.977467][T28293] EXT4-fs: Ignoring removed nobh option [ 548.985962][T28293] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17345: invalid indirect mapped block 256 (level 2) [ 549.011167][T28293] EXT4-fs (loop6): 2 truncates cleaned up [ 549.018420][T28293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.051328][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.078584][ T9580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.109610][T28309] lo speed is unknown, defaulting to 1000 [ 549.194944][T28318] lo speed is unknown, defaulting to 1000 [ 549.489519][T28378] loop6: detected capacity change from 0 to 512 [ 549.530621][T28378] EXT4-fs (loop6): 1 orphan inode deleted [ 549.552144][T11100] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 549.593586][T28378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.715304][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.795577][T28405] futex_wake_op: syz.9.17366 tries to shift op by -1; fix this program [ 549.845423][T28405] netlink: zone id is out of range [ 549.850712][T28405] netlink: zone id is out of range [ 549.856394][T28405] netlink: zone id is out of range [ 549.861527][T28405] netlink: zone id is out of range [ 549.866793][T28405] netlink: zone id is out of range [ 549.871917][T28405] netlink: zone id is out of range [ 549.877071][T28405] netlink: zone id is out of range [ 549.882199][T28405] netlink: zone id is out of range [ 549.963780][T28411] loop6: detected capacity change from 0 to 1024 [ 549.982989][T28411] EXT4-fs: Ignoring removed nobh option [ 549.988672][T28411] ext2: Unknown parameter 'dont_hash' [ 550.022158][T28411] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 550.167811][T28429] netlink: 'syz.1.17377': attribute type 21 has an invalid length. [ 550.184967][T28431] lo speed is unknown, defaulting to 1000 [ 550.225804][T28438] loop9: detected capacity change from 0 to 512 [ 550.256122][T28438] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 550.304305][T28442] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.340474][T28438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.408004][T28442] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.524477][T28442] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.609630][T28442] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.715329][T28442] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.737227][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.800358][T28442] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.856724][T28442] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.930160][T28442] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.974541][T28490] loop9: detected capacity change from 0 to 512 [ 551.011672][T28490] EXT4-fs: Ignoring removed nobh option [ 551.045822][T28490] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.17382: invalid indirect mapped block 256 (level 2) [ 551.068054][T28490] EXT4-fs (loop9): 2 truncates cleaned up [ 551.081612][T28490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.144439][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.423911][T28541] loop6: detected capacity change from 0 to 1024 [ 551.432338][T28541] EXT4-fs: Ignoring removed bh option [ 551.440931][T28541] EXT4-fs: inline encryption not supported [ 551.446910][T28541] EXT4-fs: Ignoring removed i_version option [ 551.453513][T28541] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 551.474677][T28541] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.17397: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.483349][T28548] lo speed is unknown, defaulting to 1000 [ 551.499550][T28541] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.17397: Failed to acquire dquot type 0 [ 551.520173][T28554] loop9: detected capacity change from 0 to 1024 [ 551.528851][T28541] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.17397: Freeing blocks not in datazone - block = 0, count = 4096 [ 551.546580][T28554] EXT4-fs: Ignoring removed nobh option [ 551.554872][T28554] ext2: Unknown parameter 'dont_hash' [ 551.565133][T28541] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.17397: Invalid inode bitmap blk 0 in block_group 0 [ 551.578230][T28554] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 551.579946][T28541] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 551.596394][T11096] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.596553][T11096] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 0 [ 551.625890][T28541] EXT4-fs (loop6): 1 orphan inode deleted [ 551.632227][T28541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.659012][T28541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.711675][T28586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.719283][T28586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.730657][T28586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.738315][T28586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.879152][T28612] all: renamed from bridge_slave_0 (while UP) [ 551.921365][T28616] loop9: detected capacity change from 0 to 1024 [ 551.928842][T28616] EXT4-fs: Ignoring removed bh option [ 551.934978][T28616] EXT4-fs: inline encryption not supported [ 551.940864][T28616] EXT4-fs: Ignoring removed i_version option [ 551.947435][T28616] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 551.959804][T28616] EXT4-fs error (device loop9): ext4_map_blocks:709: inode #3: block 1: comm syz.9.17417: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.976829][T28616] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.17417: Failed to acquire dquot type 0 [ 551.995410][T28616] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.17417: Freeing blocks not in datazone - block = 0, count = 4096 [ 552.014628][T28616] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.17417: Invalid inode bitmap blk 0 in block_group 0 [ 552.031057][T11096] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 552.046420][T28616] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 552.054896][T11096] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 0 [ 552.066845][T28616] EXT4-fs (loop9): 1 orphan inode deleted [ 552.073001][T28616] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.097094][T28616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.675859][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 552.675885][ T29] audit: type=1326 audit(1821.124:19858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.706015][ T29] audit: type=1326 audit(1821.124:19859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.729364][ T29] audit: type=1326 audit(1821.124:19860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.753711][ T3392] page_pool_release_retry() stalled pool shutdown: id 227, 1 inflight 60 sec [ 552.763135][ T29] audit: type=1326 audit(1821.208:19861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.787015][ T29] audit: type=1326 audit(1821.208:19862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.810873][ T29] audit: type=1326 audit(1821.208:19863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.839246][T28689] loop1: detected capacity change from 0 to 512 [ 552.846214][T28689] EXT4-fs: Ignoring removed nobh option [ 552.885419][T28689] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17444: invalid indirect mapped block 256 (level 2) [ 552.909794][T28689] EXT4-fs (loop1): 2 truncates cleaned up [ 552.915727][ T29] audit: type=1326 audit(1821.282:19864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.939687][ T29] audit: type=1326 audit(1821.282:19865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.963699][ T29] audit: type=1326 audit(1821.282:19866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 552.986939][ T29] audit: type=1326 audit(1821.282:19867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.1.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 553.011337][T28689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.046560][ T9580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.467559][T28739] all: renamed from bridge_slave_0 (while UP) [ 553.546696][T28746] loop6: detected capacity change from 0 to 512 [ 553.555000][T28746] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 553.568766][T28746] EXT4-fs (loop6): 1 truncate cleaned up [ 553.577356][T28746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.635174][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.728412][T28775] all: renamed from bridge_slave_0 [ 554.016001][T28799] __nla_validate_parse: 26 callbacks suppressed [ 554.016020][T28799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17487'. [ 554.074249][T28803] syzkaller0: entered promiscuous mode [ 554.079976][T28803] syzkaller0: entered allmulticast mode [ 554.088059][T11100] syzkaller0: tun_net_xmit 48 [ 554.095650][T28803] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 554.101527][T28803] syzkaller0: Linktype set failed because interface is up [ 554.252892][T28827] loop1: detected capacity change from 0 to 1024 [ 554.260160][T28827] EXT4-fs: Ignoring removed bh option [ 554.265597][T28827] EXT4-fs: inline encryption not supported [ 554.271587][T28827] EXT4-fs: Ignoring removed i_version option [ 554.277973][T28827] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 554.291253][T28827] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 1: comm syz.1.17492: lblock 1 mapped to illegal pblock 1 (length 1) [ 554.305862][T28827] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.17492: Failed to acquire dquot type 0 [ 554.318360][T28827] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.17492: Freeing blocks not in datazone - block = 0, count = 4096 [ 554.332001][T28827] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.17492: Invalid inode bitmap blk 0 in block_group 0 [ 554.344927][T11140] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1) [ 554.345086][T11140] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 0 [ 554.372089][T28827] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 554.381003][T28827] EXT4-fs (loop1): 1 orphan inode deleted [ 554.387211][T28827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.424170][T28827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.504300][T28844] loop2: detected capacity change from 0 to 512 [ 554.516604][T28844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 554.538982][T28849] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.17498'. [ 554.545917][T28844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.634488][T28856] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17500'. [ 554.663688][T28856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17500'. [ 554.861521][T28878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17512'. [ 554.878434][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.692321][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17521'. [ 555.749241][T28915] netlink: 'syz.9.17523': attribute type 12 has an invalid length. [ 555.757359][T28915] netlink: 'syz.9.17523': attribute type 29 has an invalid length. [ 555.765896][T28915] netlink: 148 bytes leftover after parsing attributes in process `syz.9.17523'. [ 555.775196][T28915] netlink: 'syz.9.17523': attribute type 2 has an invalid length. [ 555.783654][T28915] netlink: 'syz.9.17523': attribute type 3 has an invalid length. [ 555.791540][T28915] netlink: 35 bytes leftover after parsing attributes in process `syz.9.17523'. [ 555.865010][T28921] loop6: detected capacity change from 0 to 2048 [ 555.895776][T28921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.988152][T28941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17535'. [ 555.990802][T28936] loop2: detected capacity change from 0 to 512 [ 556.011899][T28921] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 556.040266][T28936] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 556.052323][T28921] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1274 with error 28 [ 556.064978][T28921] EXT4-fs (loop6): This should not happen!! Data will be lost [ 556.064978][T28921] [ 556.075074][T28921] EXT4-fs (loop6): Total free blocks count 0 [ 556.081302][T28921] EXT4-fs (loop6): Free/Dirty block details [ 556.087254][T28921] EXT4-fs (loop6): free_blocks=2415919104 [ 556.092996][T28921] EXT4-fs (loop6): dirty_blocks=1280 [ 556.098338][T28921] EXT4-fs (loop6): Block reservation details [ 556.104343][T28921] EXT4-fs (loop6): i_reserved_data_blocks=80 [ 556.120957][T28936] EXT4-fs (loop2): 1 truncate cleaned up [ 556.137218][T28936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.214853][T28968] vlan0: entered allmulticast mode [ 556.363191][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.405850][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.439419][T28989] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17546'. [ 556.530102][T29017] loop2: detected capacity change from 0 to 128 [ 556.549884][T29022] netlink: 'syz.6.17553': attribute type 10 has an invalid length. [ 556.559949][T29022] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.570907][T29022] bond0: (slave team0): Enslaving as an active interface with an up link [ 556.588826][T29019] lo speed is unknown, defaulting to 1000 [ 557.491396][T29104] loop9: detected capacity change from 0 to 128 [ 557.717182][T29118] netlink: 'syz.9.17577': attribute type 10 has an invalid length. [ 557.761062][T29118] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.771214][T29118] bond0: (slave team0): Enslaving as an active interface with an up link [ 557.836415][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 557.836434][ T29] audit: type=1400 audit(1826.531:20564): avc: denied { read } for pid=29130 comm="syz.1.17582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 557.871160][T29131] Invalid ELF header magic: != ELF [ 557.894187][ T29] audit: type=1400 audit(1826.594:20565): avc: denied { create } for pid=29132 comm="syz.9.17583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 557.914539][ T29] audit: type=1400 audit(1826.594:20566): avc: denied { bind } for pid=29132 comm="syz.9.17583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 557.933635][ T29] audit: type=1400 audit(1826.594:20567): avc: denied { name_bind } for pid=29132 comm="syz.9.17583" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 557.954973][ T29] audit: type=1400 audit(1826.594:20568): avc: denied { node_bind } for pid=29132 comm="syz.9.17583" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 557.975661][ T29] audit: type=1400 audit(1826.594:20569): avc: denied { listen } for pid=29132 comm="syz.9.17583" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 557.996837][ T29] audit: type=1400 audit(1826.594:20570): avc: denied { connect } for pid=29132 comm="syz.9.17583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 558.016198][ T29] audit: type=1400 audit(1826.594:20571): avc: denied { name_connect } for pid=29132 comm="syz.9.17583" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 558.037910][ T29] audit: type=1400 audit(1826.594:20572): avc: denied { accept } for pid=29132 comm="syz.9.17583" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 558.101382][T29144] lo speed is unknown, defaulting to 1000 [ 558.297210][T29173] vlan2: entered allmulticast mode [ 558.437307][ T29] audit: type=1326 audit(2000000000.010:20573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.1.17596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 558.661983][T29224] loop6: detected capacity change from 0 to 128 [ 559.025048][T29255] __nla_validate_parse: 4 callbacks suppressed [ 559.025067][T29255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17616'. [ 559.041262][T29255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17616'. [ 559.208161][T29266] loop6: detected capacity change from 0 to 512 [ 559.216883][T29264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17628'. [ 559.226709][T29264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17628'. [ 559.238110][T29266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 559.267957][T29266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.294813][T29266] ext4 filesystem being mounted at /665/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 559.426426][T29282] lo speed is unknown, defaulting to 1000 [ 559.646140][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.767139][T29330] loop2: detected capacity change from 0 to 1024 [ 559.786579][T29330] EXT4-fs: Ignoring removed bh option [ 559.793497][T29330] EXT4-fs: inline encryption not supported [ 559.799405][T29330] EXT4-fs: Ignoring removed i_version option [ 559.806022][T29330] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 559.838716][T29330] EXT4-fs error (device loop2): ext4_map_blocks:709: inode #3: block 1: comm syz.2.17633: lblock 1 mapped to illegal pblock 1 (length 1) [ 559.868077][T29330] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.17633: Failed to acquire dquot type 0 [ 559.880400][T29330] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.17633: Freeing blocks not in datazone - block = 0, count = 4096 [ 559.927454][T29330] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.17633: Invalid inode bitmap blk 0 in block_group 0 [ 559.956176][T11091] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 559.994651][T29330] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 560.012734][T11091] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 0 [ 560.027840][T29330] EXT4-fs (loop2): 1 orphan inode deleted [ 560.042470][T29330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.146954][T29330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.037211][T29366] loop9: detected capacity change from 0 to 128 [ 561.089685][T29376] loop9: detected capacity change from 0 to 512 [ 561.119266][T29376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.145007][T29376] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.169479][T29376] EXT4-fs error (device loop9): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.9.17646: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 561.205165][T29385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17644'. [ 561.221188][T29376] EXT4-fs error (device loop9): ext4_get_first_dir_block:3538: inode #12: comm syz.9.17646: directory missing '.' [ 561.303468][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.339997][T29404] block device autoloading is deprecated and will be removed. [ 561.470239][T29419] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17659'. [ 561.601986][T29428] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17663'. [ 561.914137][T29454] lo speed is unknown, defaulting to 1000 [ 562.087442][T29486] netlink: 'syz.0.17678': attribute type 3 has an invalid length. [ 562.185443][T29498] loop2: detected capacity change from 0 to 512 [ 562.197834][T29498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 562.240368][T29506] loop6: detected capacity change from 0 to 512 [ 562.242219][T29498] EXT4-fs (loop2): 1 truncate cleaned up [ 562.255056][T29498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.267685][T29506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.273141][T29498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17684'. [ 562.296842][T29506] ext4 filesystem being mounted at /673/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.327904][T29506] EXT4-fs error (device loop6): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.6.17686: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 562.358038][T29509] SELinux: Context : is not valid (left unmapped). [ 562.374658][T29506] EXT4-fs error (device loop6): ext4_get_first_dir_block:3538: inode #12: comm syz.6.17686: directory missing '.' [ 562.423751][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.448050][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.593306][T29537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17695'. [ 562.602255][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 562.602300][ T29] audit: type=1326 audit(2000000004.377:20968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fc1f75927 code=0x7ffc0000 [ 562.632328][ T29] audit: type=1326 audit(2000000004.377:20969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fc1f1ab39 code=0x7ffc0000 [ 562.656116][ T29] audit: type=1326 audit(2000000004.377:20970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4fc1f7e969 code=0x7ffc0000 [ 562.680708][ T29] audit: type=1326 audit(2000000004.451:20971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fc1f75927 code=0x7ffc0000 [ 562.704359][ T29] audit: type=1326 audit(2000000004.451:20972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fc1f1ab39 code=0x7ffc0000 [ 562.728048][ T29] audit: type=1326 audit(2000000004.451:20973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4fc1f7e969 code=0x7ffc0000 [ 562.751848][ T29] audit: type=1326 audit(2000000004.451:20974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fc1f75927 code=0x7ffc0000 [ 562.775582][ T29] audit: type=1326 audit(2000000004.451:20975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fc1f1ab39 code=0x7ffc0000 [ 562.799239][ T29] audit: type=1326 audit(2000000004.451:20976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4fc1f7e969 code=0x7ffc0000 [ 562.822968][ T29] audit: type=1326 audit(2000000004.472:20977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29528 comm="syz.2.17692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fc1f75927 code=0x7ffc0000 [ 562.917517][T29546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17698'. [ 563.509726][T29601] netlink: 'syz.9.17720': attribute type 3 has an invalid length. [ 563.648006][T29618] SELinux: ebitmap: truncated map [ 563.654355][T29618] SELinux: failed to load policy [ 563.937479][T29633] netlink: 'syz.1.17735': attribute type 3 has an invalid length. [ 564.031770][T29647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29647 comm=syz.1.17742 [ 564.044618][T29647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29647 comm=syz.1.17742 [ 564.175549][T29657] __nla_validate_parse: 7 callbacks suppressed [ 564.175570][T29657] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 564.281590][ T1044] kernel write not supported for file /2229/attr/exec (pid: 1044 comm: kworker/1:2) [ 564.430897][T29673] netlink: 'syz.2.17750': attribute type 3 has an invalid length. [ 564.557229][T29688] lo speed is unknown, defaulting to 1000 [ 564.598310][T29695] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17758'. [ 564.842537][T29721] SELinux: ebitmap: truncated map [ 564.865892][T29721] SELinux: failed to load policy [ 564.907019][T29735] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17768'. [ 565.105554][T29768] SELinux: ebitmap: truncated map [ 565.118531][T29768] SELinux: failed to load policy [ 565.128663][T29776] loop6: detected capacity change from 0 to 512 [ 565.137353][T29776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 565.154431][T29776] EXT4-fs (loop6): 1 truncate cleaned up [ 565.167408][T29776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.194553][T29776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17783'. [ 565.282305][T29797] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.17788'. [ 565.311358][T29799] block device autoloading is deprecated and will be removed. [ 565.355145][T29803] net_ratelimit: 291 callbacks suppressed [ 565.355161][T29803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 565.369171][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.391416][ T1044] kernel write not supported for file /983/attr/exec (pid: 1044 comm: kworker/1:2) [ 565.639942][T29819] SELinux: ebitmap: truncated map [ 565.646005][T29819] SELinux: failed to load policy [ 565.732929][T29835] loop9: detected capacity change from 0 to 512 [ 565.740220][T29835] EXT4-fs: Ignoring removed i_version option [ 565.747828][T29835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 565.767181][T29835] EXT4-fs (loop9): orphan cleanup on readonly fs [ 565.775067][T29835] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.17801: bg 0: block 248: padding at end of block bitmap is not set [ 565.791145][T29835] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.17801: Failed to acquire dquot type 1 [ 565.812206][T29835] EXT4-fs (loop9): 1 truncate cleaned up [ 565.830316][T29835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.846312][T29835] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.880706][T29847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17804'. [ 565.903989][T29852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17807'. [ 565.963689][T29870] loop9: detected capacity change from 0 to 512 [ 565.979167][T29870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.992644][T29870] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 566.016435][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.142955][T29898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17820'. [ 566.165984][T29901] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.17822'. [ 566.364125][T29944] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 566.398706][T29946] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17836'. [ 567.421867][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 567.421886][ T29] audit: type=1326 audit(2000000009.448:21356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30000 comm="syz.0.17855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 567.452117][ T29] audit: type=1326 audit(2000000009.448:21357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30000 comm="syz.0.17855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 567.588504][ T29] audit: type=1400 audit(2000000009.616:21358): avc: denied { unmount } for pid=30046 comm="syz.6.17868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 567.615284][T30049] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 567.745457][ T29] audit: type=1326 audit(2000000009.784:21359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.769299][ T29] audit: type=1326 audit(2000000009.784:21360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.801898][ T29] audit: type=1326 audit(2000000009.836:21361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.825784][ T29] audit: type=1326 audit(2000000009.836:21362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.849648][ T29] audit: type=1326 audit(2000000009.836:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.873729][ T29] audit: type=1326 audit(2000000009.836:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.898845][ T29] audit: type=1326 audit(2000000009.836:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30063 comm="syz.6.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa342a0e969 code=0x7ffc0000 [ 567.962639][T30081] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 568.270441][T30116] netlink: 'syz.6.17906': attribute type 1 has an invalid length. [ 568.278320][T30116] netlink: 'syz.6.17906': attribute type 2 has an invalid length. [ 569.304279][T30164] loop6: detected capacity change from 0 to 527 [ 569.311554][T30164] EXT4-fs (loop6): failed to parse options in superblock:  [ 569.324403][T30164] EXT4-fs (loop6): Unsupported encryption level 4 [ 569.571363][T30188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.578684][T30188] IPv6: NLM_F_CREATE should be set when creating new route [ 569.806335][T30201] loop9: detected capacity change from 0 to 527 [ 569.815969][T30201] EXT4-fs (loop9): failed to parse options in superblock:  [ 569.828978][T30201] EXT4-fs (loop9): Unsupported encryption level 4 [ 569.991923][T30220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.999276][T30220] IPv6: NLM_F_CREATE should be set when creating new route [ 570.129019][T30234] __nla_validate_parse: 3 callbacks suppressed [ 570.129054][T30234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17941'. [ 570.448068][T30264] loop6: detected capacity change from 0 to 764 [ 570.456152][T30264] iso9660: Unknown parameter '' [ 570.471527][T30278] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 572.121894][T30338] syz.0.17978 (30338) used greatest stack depth: 4968 bytes left [ 572.142118][T30349] loop9: detected capacity change from 0 to 128 [ 572.159974][T30354] loop2: detected capacity change from 0 to 512 [ 572.209582][T30357] lo speed is unknown, defaulting to 1000 [ 572.232254][T30354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.250860][T30354] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.370491][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 572.370511][ T29] audit: type=1400 audit(2000000014.644:21769): avc: denied { ioctl } for pid=30352 comm="syz.2.17992" path="/462/bus/file1" dev="loop2" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 572.482569][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.482569][T11090] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 572.504616][ T29] audit: type=1326 audit(2000000014.781:21770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.506078][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.506078][T11090] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 572.528373][ T29] audit: type=1326 audit(2000000014.781:21771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.528417][ T29] audit: type=1326 audit(2000000014.781:21772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.571743][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.571743][T11090] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 572.589223][ T29] audit: type=1326 audit(2000000014.781:21773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.626335][ T29] audit: type=1326 audit(2000000014.781:21774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.646289][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.646289][T11090] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 572.653037][ T29] audit: type=1326 audit(2000000014.928:21775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.673569][T30392] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.17992: corrupted inode contents [ 572.687142][ T29] audit: type=1326 audit(2000000014.928:21776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.687172][ T29] audit: type=1326 audit(2000000014.928:21777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.699393][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.699393][T11090] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 572.728596][ T29] audit: type=1326 audit(2000000015.012:21778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.1.17989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 572.748853][T30392] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.17992: mark_inode_dirty error [ 572.760432][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.760432][T11090] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 572.816639][T30392] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.17992: corrupted inode contents [ 572.830026][T30392] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.17992: mark_inode_dirty error [ 572.834259][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.834259][T11090] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 572.850465][T30392] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.17992: mark inode dirty (error -117) [ 572.855806][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.855806][T11090] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 572.873005][T30392] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 572.891178][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.891178][T11090] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 572.905065][T11090] kworker/u8:14: attempt to access beyond end of device [ 572.905065][T11090] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 572.996767][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.074006][T30426] loop2: detected capacity change from 0 to 512 [ 573.087403][T30426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.110022][T30426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.133138][T30426] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.182194][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.198988][T30443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18006'. [ 573.315617][T30467] loop6: detected capacity change from 0 to 512 [ 573.345603][T30467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.376699][T30467] ext4 filesystem being mounted at /735/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.443927][T30479] lo speed is unknown, defaulting to 1000 [ 573.608678][T30510] loop9: detected capacity change from 0 to 512 [ 573.616893][T30510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.625266][T30485] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.18008: corrupted inode contents [ 573.643586][T30485] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #19: comm syz.6.18008: mark_inode_dirty error [ 573.656245][T30485] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.18008: corrupted inode contents [ 573.668819][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18015'. [ 573.677954][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18015'. [ 573.701795][T30485] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.18008: mark_inode_dirty error [ 573.717031][T30485] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.18008: mark inode dirty (error -117) [ 573.735632][T30510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.751511][T30510] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.762024][T30485] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 573.816368][T24314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.828725][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.944621][T30545] SELinux: ebitmap: truncated map [ 573.954003][T30545] SELinux: failed to load policy [ 574.062681][T30557] loop6: detected capacity change from 0 to 512 [ 574.069463][T30557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.092915][T30557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.105919][T30557] ext4 filesystem being mounted at /741/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 574.116556][T30558] loop9: detected capacity change from 0 to 764 [ 574.123549][T30558] iso9660: Unknown parameter '' [ 574.139299][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.209358][T30554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.218174][T30554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.272784][T30574] netlink: 9 bytes leftover after parsing attributes in process `syz.6.18036'. [ 574.282131][T30574] gretap0: entered promiscuous mode [ 574.288331][T30574] netlink: 5 bytes leftover after parsing attributes in process `syz.6.18036'. [ 574.297589][T30574] 0ªX¹¦D: renamed from gretap0 [ 574.303954][T30574] 0ªX¹¦D: left promiscuous mode [ 574.308856][T30574] 0ªX¹¦D: entered allmulticast mode [ 574.314681][T30574] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 574.410815][T30583] loop6: detected capacity change from 0 to 512 [ 574.419444][T30583] EXT4-fs: Ignoring removed oldalloc option [ 574.439126][T30583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.18040: Parent and EA inode have the same ino 15 [ 574.453595][T30583] EXT4-fs (loop6): Remounting filesystem read-only [ 574.461726][T30583] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 574.472831][T30583] EXT4-fs (loop6): 1 orphan inode deleted [ 574.482979][T30583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.551058][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.719356][T30602] netlink: 292 bytes leftover after parsing attributes in process `syz.1.18047'. [ 574.792381][T30605] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 575.259304][T30646] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18065'. [ 575.268335][T30646] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18065'. [ 575.348877][T30654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18068'. [ 575.546485][T30660] loop2: detected capacity change from 0 to 512 [ 575.569372][T30660] EXT4-fs: Ignoring removed oldalloc option [ 575.588516][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18079'. [ 575.597707][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18079'. [ 575.635106][T30660] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.18082: Parent and EA inode have the same ino 15 [ 575.655803][T30660] EXT4-fs (loop2): Remounting filesystem read-only [ 575.663482][T30660] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 575.676979][T30660] EXT4-fs (loop2): 1 orphan inode deleted [ 575.685741][T30660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.760602][T19737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.842349][T30704] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18086'. [ 575.852127][T30704] gretap0: entered promiscuous mode [ 575.874009][T30704] netlink: 5 bytes leftover after parsing attributes in process `syz.0.18086'. [ 575.894901][T30704] 0ªX¹¦D: renamed from gretap0 [ 575.911465][T30704] 0ªX¹¦D: left promiscuous mode [ 575.916418][T30704] 0ªX¹¦D: entered allmulticast mode [ 575.923969][T30704] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 576.558703][T30698] syz.1.18085 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 576.573152][T30698] CPU: 0 UID: 0 PID: 30698 Comm: syz.1.18085 Tainted: G W 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(voluntary) [ 576.573208][T30698] Tainted: [W]=WARN [ 576.573216][T30698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.573255][T30698] Call Trace: [ 576.573261][T30698] [ 576.573268][T30698] __dump_stack+0x1d/0x30 [ 576.573291][T30698] dump_stack_lvl+0xe8/0x140 [ 576.573319][T30698] dump_stack+0x15/0x1b [ 576.573400][T30698] dump_header+0x81/0x220 [ 576.573441][T30698] oom_kill_process+0x334/0x3f0 [ 576.573477][T30698] out_of_memory+0x979/0xb80 [ 576.573504][T30698] ? css_next_descendant_pre+0x138/0x160 [ 576.573553][T30698] mem_cgroup_out_of_memory+0x13d/0x190 [ 576.573608][T30698] try_charge_memcg+0x5e2/0x870 [ 576.573685][T30698] obj_cgroup_charge_pages+0xb7/0x1a0 [ 576.573719][T30698] __memcg_kmem_charge_page+0x9f/0x170 [ 576.573793][T30698] __alloc_frozen_pages_noprof+0x188/0x360 [ 576.573928][T30698] alloc_pages_mpol+0xb3/0x250 [ 576.573964][T30698] alloc_pages_noprof+0x90/0x130 [ 576.573989][T30698] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 576.574036][T30698] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 576.574184][T30698] ? ip_set_alloc+0x1f/0x30 [ 576.574223][T30698] ? ip_set_alloc+0x1f/0x30 [ 576.574341][T30698] ? __kmalloc_cache_noprof+0x189/0x320 [ 576.574374][T30698] ip_set_alloc+0x1f/0x30 [ 576.574466][T30698] hash_netiface_create+0x282/0x740 [ 576.574502][T30698] ? __pfx_hash_netiface_create+0x10/0x10 [ 576.574546][T30698] ip_set_create+0x3c9/0x960 [ 576.574665][T30698] ? __nla_parse+0x40/0x60 [ 576.574697][T30698] nfnetlink_rcv_msg+0x4c6/0x590 [ 576.574757][T30698] netlink_rcv_skb+0x123/0x220 [ 576.574877][T30698] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 576.574917][T30698] nfnetlink_rcv+0x16b/0x1690 [ 576.574944][T30698] ? __kfree_skb+0x109/0x150 [ 576.574967][T30698] ? nlmon_xmit+0x4f/0x60 [ 576.574995][T30698] ? consume_skb+0x49/0x150 [ 576.575087][T30698] ? nlmon_xmit+0x4f/0x60 [ 576.575108][T30698] ? dev_hard_start_xmit+0x39e/0x3d0 [ 576.575177][T30698] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 576.575207][T30698] ? __dev_queue_xmit+0x182/0x1fb0 [ 576.575231][T30698] ? ref_tracker_free+0x37d/0x3e0 [ 576.575296][T30698] ? __netlink_deliver_tap+0x4dc/0x500 [ 576.575359][T30698] netlink_unicast+0x5a1/0x670 [ 576.575394][T30698] netlink_sendmsg+0x58b/0x6b0 [ 576.575422][T30698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.575452][T30698] __sock_sendmsg+0x145/0x180 [ 576.575519][T30698] ____sys_sendmsg+0x31e/0x4e0 [ 576.575550][T30698] ___sys_sendmsg+0x17b/0x1d0 [ 576.575595][T30698] __x64_sys_sendmsg+0xd4/0x160 [ 576.575696][T30698] x64_sys_call+0x2999/0x2fb0 [ 576.575732][T30698] do_syscall_64+0xd0/0x1a0 [ 576.575765][T30698] ? clear_bhb_loop+0x40/0x90 [ 576.575813][T30698] ? clear_bhb_loop+0x40/0x90 [ 576.575836][T30698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.575883][T30698] RIP: 0033:0x7f7ef690e969 [ 576.575968][T30698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.576010][T30698] RSP: 002b:00007f7ef4f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.576031][T30698] RAX: ffffffffffffffda RBX: 00007f7ef6b35fa0 RCX: 00007f7ef690e969 [ 576.576047][T30698] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 576.576061][T30698] RBP: 00007f7ef6990ab1 R08: 0000000000000000 R09: 0000000000000000 [ 576.576073][T30698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.576086][T30698] R13: 0000000000000000 R14: 00007f7ef6b35fa0 R15: 00007ffcb67a20e8 [ 576.576110][T30698] [ 576.927211][T30698] memory: usage 307200kB, limit 307200kB, failcnt 144 [ 576.934501][T30698] memory+swap: usage 307624kB, limit 9007199254740988kB, failcnt 0 [ 576.942472][T30698] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 576.949841][T30698] Memory cgroup stats for /syz1: [ 576.957130][T30698] cache 0 [ 576.965051][T30698] rss 4096 [ 576.968264][T30698] shmem 0 [ 576.971217][T30698] mapped_file 0 [ 576.974709][T30698] dirty 0 [ 576.977753][T30698] writeback 0 [ 576.981067][T30698] workingset_refault_anon 1570 [ 576.986131][T30698] workingset_refault_file 0 [ 576.990934][T30698] swap 434176 [ 576.994286][T30698] swapcached 12288 [ 576.998071][T30698] pgpgin 383992 [ 577.001615][T30698] pgpgout 383986 [ 577.005214][T30698] pgfault 465895 [ 577.008785][T30698] pgmajfault 219 [ 577.012343][T30698] inactive_anon 8192 [ 577.016276][T30698] active_anon 4096 [ 577.020011][T30698] inactive_file 12288 [ 577.024024][T30698] active_file 0 [ 577.027574][T30698] unevictable 0 [ 577.031038][T30698] hierarchical_memory_limit 314572800 [ 577.036457][T30698] hierarchical_memsw_limit 9223372036854771712 [ 577.042749][T30698] total_cache 0 [ 577.046509][T30698] total_rss 4096 [ 577.050422][T30698] total_shmem 0 [ 577.054134][T30698] total_mapped_file 0 [ 577.058209][T30698] total_dirty 0 [ 577.061715][T30698] total_writeback 0 [ 577.065535][T30698] total_workingset_refault_anon 1570 [ 577.070869][T30698] total_workingset_refault_file 0 [ 577.075911][T30698] total_swap 434176 [ 577.079906][T30698] total_swapcached 12288 [ 577.084216][T30698] total_pgpgin 384068 [ 577.088348][T30698] total_pgpgout 384062 [ 577.092525][T30698] total_pgfault 465984 [ 577.096627][T30698] total_pgmajfault 219 [ 577.100729][T30698] total_inactive_anon 8192 [ 577.105157][T30698] total_active_anon 4096 [ 577.109505][T30698] total_inactive_file 12288 [ 577.114219][T30698] total_active_file 0 [ 577.118320][T30698] total_unevictable 0 [ 577.122376][T30698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.18085,pid=30697,uid=0 [ 577.137293][T30698] Memory cgroup out of memory: Killed process 30697 (syz.1.18085) total-vm:95664kB, anon-rss:936kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 577.141977][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 577.141994][ T29] audit: type=1326 audit(2000000019.652:22086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30717 comm="syz.9.18093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff43fc65927 code=0x7ffc0000 [ 577.184370][ T29] audit: type=1326 audit(2000000019.652:22087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30717 comm="syz.9.18093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff43fc0ab39 code=0x7ffc0000 [ 577.208057][ T29] audit: type=1326 audit(2000000019.652:22088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30717 comm="syz.9.18093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 577.274943][ T29] audit: type=1326 audit(2000000019.736:22089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30717 comm="syz.9.18093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff43fc65927 code=0x7ffc0000 [ 577.298796][ T29] audit: type=1326 audit(2000000019.736:22090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30717 comm="syz.9.18093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff43fc0ab39 code=0x7ffc0000 [ 577.322434][ T29] audit: type=1326 audit(2000000019.736:22091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30717 comm="syz.9.18093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff43fc6e969 code=0x7ffc0000 [ 577.480198][ T29] audit: type=1326 audit(2000000019.998:22092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30759 comm="syz.0.18110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 577.545813][ T29] audit: type=1326 audit(2000000020.051:22093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30759 comm="syz.0.18110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 577.569671][ T29] audit: type=1326 audit(2000000020.051:22094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30759 comm="syz.0.18110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 577.593494][ T29] audit: type=1326 audit(2000000020.051:22095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30759 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 577.762090][T30773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18116'. [ 578.028939][T30812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18132'. [ 578.578522][T30886] loop2: detected capacity change from 0 to 164 [ 578.596891][T30886] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 579.409425][T30952] loop6: detected capacity change from 0 to 164 [ 579.420543][T30952] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 579.581479][T30973] syzkaller0: entered promiscuous mode [ 579.587047][T30973] syzkaller0: entered allmulticast mode [ 579.619605][T30981] pim6reg1: entered promiscuous mode [ 579.624982][T30981] pim6reg1: entered allmulticast mode [ 579.661296][T30973] syzkaller0: create flow: hash 1562520577 index 0 [ 579.757050][T30971] syzkaller0 (unregistered): delete flow: hash 1562520577 index 0 [ 579.840677][T31001] lo speed is unknown, defaulting to 1000 [ 579.847274][T31004] lo speed is unknown, defaulting to 1000 [ 580.413039][T31089] syzkaller0: entered promiscuous mode [ 580.418641][T31089] syzkaller0: entered allmulticast mode [ 581.273026][T31150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.341400][T31156] sch_fq: defrate 0 ignored. [ 581.842233][T31194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18263'. [ 582.237435][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 582.237454][ T29] audit: type=1400 audit(2000000024.995:22241): avc: denied { create } for pid=31212 comm="syz.9.18271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 582.270322][ T29] audit: type=1400 audit(2000000024.995:22242): avc: denied { connect } for pid=31212 comm="syz.9.18271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 582.290602][ T29] audit: type=1400 audit(2000000024.995:22243): avc: denied { write } for pid=31212 comm="syz.9.18271" path="socket:[154722]" dev="sockfs" ino=154722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 582.383474][ T29] audit: type=1400 audit(2000000025.153:22244): avc: denied { execmem } for pid=31223 comm="syz.0.18276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 582.435427][T31228] lo speed is unknown, defaulting to 1000 [ 582.482321][T31240] loop9: detected capacity change from 0 to 256 [ 582.500554][T31240] FAT-fs (loop9): bogus number of FAT sectors [ 582.506686][T31240] FAT-fs (loop9): Can't find a valid FAT filesystem [ 582.578376][T11090] erspan0 (unregistering): left allmulticast mode [ 582.584954][T11090] erspan0 (unregistering): left promiscuous mode [ 582.686775][ T3392] kernel write not supported for file /828/attr/prev (pid: 3392 comm: kworker/1:4) [ 582.730263][T11090] $Hÿ (unregistering): Released all slaves [ 582.744992][T11090] bond1 (unregistering): Released all slaves [ 582.752940][T31275] netlink: '+}[@': attribute type 10 has an invalid length. [ 582.754707][T11090] bond2 (unregistering): Released all slaves [ 582.760374][T31275] netlink: 2 bytes leftover after parsing attributes in process `+}[@'. [ 582.777993][ T29] audit: type=1400 audit(2000000025.573:22245): avc: denied { mounton } for pid=31276 comm="syz.2.18286" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 582.780284][T11090] bond0 (unregistering): Released all slaves [ 582.808952][T11090] bond3 (unregistering): Released all slaves [ 582.817811][ T29] audit: type=1400 audit(2000000025.615:22246): avc: denied { unmount } for pid=19737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 582.818795][T11090] bond4 (unregistering): Released all slaves [ 582.848219][T11090] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 582.857779][T11090] bond5 (unregistering): Released all slaves [ 582.858093][ T29] audit: type=1400 audit(2000000025.657:22247): avc: denied { write } for pid=31279 comm="syz.2.18287" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 582.887583][T31261] sch_fq: defrate 0 ignored. [ 582.887997][T31280] vhci_hcd: invalid port number 96 [ 582.892797][T31275] team0: entered promiscuous mode [ 582.897379][T31280] vhci_hcd: default hub control req: 0000 vfffe i0060 l0 [ 582.911995][T31275] bridge0: port 1(team0) entered blocking state [ 582.918321][T31275] bridge0: port 1(team0) entered disabled state [ 582.931499][T31275] team0: entered allmulticast mode [ 582.990736][ T29] audit: type=1400 audit(2000000025.793:22248): avc: denied { write } for pid=31287 comm="syz.2.18291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 583.025351][T11090] hsr_slave_0: left promiscuous mode [ 583.039287][ T29] audit: type=1400 audit(2000000025.835:22249): avc: denied { ioctl } for pid=31285 comm="syz.1.18290" path="socket:[154823]" dev="sockfs" ino=154823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.064880][ T29] audit: type=1400 audit(2000000025.835:22250): avc: denied { setopt } for pid=31285 comm="syz.1.18290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.118864][T31286] batadv_slave_1: entered promiscuous mode [ 583.132193][T31289] batadv_slave_1: left promiscuous mode [ 583.141005][T31296] loop6: detected capacity change from 0 to 256 [ 583.152392][T31296] FAT-fs (loop6): bogus number of FAT sectors [ 583.158592][T31296] FAT-fs (loop6): Can't find a valid FAT filesystem [ 583.167772][T31300] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 583.275373][ T3392] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 583.294200][ T3392] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 583.440083][T11090] IPVS: stop unused estimator thread 0... [ 583.599116][T31344] loop6: detected capacity change from 0 to 512 [ 583.613246][T31344] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 583.621574][T31344] EXT4-fs (loop6): Invalid default hash set in the superblock [ 583.637553][T31346] sch_fq: defrate 0 ignored. [ 583.655807][T31353] loop9: detected capacity change from 0 to 512 [ 583.665501][T31353] EXT4-fs (loop9): Invalid log cluster size: 4294967295 [ 583.682924][T31353] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.18302'. [ 583.700289][T31353] netlink: zone id is out of range [ 583.705744][T31353] netlink: zone id is out of range [ 583.711001][T31353] netlink: zone id is out of range [ 583.716172][T31353] netlink: zone id is out of range [ 583.721420][T31353] netlink: zone id is out of range [ 583.726567][T31353] netlink: zone id is out of range [ 583.731791][T31353] netlink: zone id is out of range [ 583.737094][T31353] netlink: zone id is out of range [ 583.742258][T31353] netlink: zone id is out of range [ 583.747425][T31353] netlink: zone id is out of range [ 583.865552][T31374] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 584.420435][T31424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18326'. [ 585.194583][T31482] smc: net device bond0 applied user defined pnetid SYZ2 [ 585.202139][T31482] smc: net device bond0 erased user defined pnetid SYZ2 [ 585.265981][ T3451] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 585.277219][ T3451] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 585.342066][T31496] loop6: detected capacity change from 0 to 512 [ 585.351495][T31496] EXT4-fs (loop6): Invalid log cluster size: 4294967295 [ 585.371880][T31496] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.18344'. [ 585.402803][T31502] loop6: detected capacity change from 0 to 128 [ 585.483378][T31514] netem: incorrect gi model size [ 585.488454][T31514] netem: change failed [ 585.494519][T31512] loop6: detected capacity change from 0 to 2048 [ 585.523382][T31512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.571318][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.696776][T31532] ref_ctr_offset mismatch. inode: 0x7dd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 585.853035][T31566] syzkaller0: entered allmulticast mode [ 585.885560][T31566] syzkaller0 (unregistering): left allmulticast mode [ 586.029551][T31599] SELinux: syz.1.18368 (31599) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 586.142338][T31615] loop6: detected capacity change from 0 to 128 [ 586.160293][T31615] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 586.190549][T31615] ext4 filesystem being mounted at /808/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 586.279588][T16288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 586.585414][T31690] SELinux: syz.6.18384 (31690) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 586.945771][T31717] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 587.042193][T31734] ref_ctr_offset mismatch. inode: 0x177f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 587.282634][T31786] Falling back ldisc for ttyS3. [ 587.313205][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 587.313225][ T29] audit: type=1326 audit(2000000030.328:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31801 comm="syz.1.18416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ef690e969 code=0x0 [ 587.611813][ T29] audit: type=1400 audit(2000000030.643:22292): avc: denied { create } for pid=31822 comm="syz.9.18424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.632428][ T29] audit: type=1400 audit(2000000030.643:22293): avc: denied { connect } for pid=31822 comm="syz.9.18424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.823568][ T29] audit: type=1400 audit(2000000030.864:22294): avc: denied { setopt } for pid=31838 comm="syz.9.18433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.843629][ T29] audit: type=1400 audit(2000000030.864:22295): avc: denied { bind } for pid=31838 comm="syz.9.18433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.863466][ T29] audit: type=1400 audit(2000000030.864:22296): avc: denied { name_bind } for pid=31838 comm="syz.9.18433" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 587.885710][ T29] audit: type=1400 audit(2000000030.864:22297): avc: denied { node_bind } for pid=31838 comm="syz.9.18433" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 587.908061][ T29] audit: type=1400 audit(2000000030.864:22298): avc: denied { write } for pid=31838 comm="syz.9.18433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.927904][ T29] audit: type=1400 audit(2000000030.864:22299): avc: denied { name_connect } for pid=31838 comm="syz.9.18433" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 587.979074][ T29] audit: type=1400 audit(2000000031.032:22300): avc: denied { create } for pid=31841 comm="syz.6.18434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.522076][T31894] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 588.696688][T31908] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18462'. [ 588.751609][T31914] loop9: detected capacity change from 0 to 1764 [ 588.923296][T31925] program syz.2.18469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.935162][T31925] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 589.236209][T31941] chnl_net:caif_netlink_parms(): no params data found [ 589.274709][T32074] tipc: Failed to remove unknown binding: 66,1,1/2886997007:697054767/697054769 [ 589.310643][T32090] atomic_op ffff88814048d528 conn xmit_atomic 0000000000000000 [ 589.321866][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18484'. [ 589.349437][T31941] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.356565][T31941] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.375932][T31941] bridge_slave_0: entered allmulticast mode [ 589.384545][T31941] bridge_slave_0: entered promiscuous mode [ 589.391877][T31941] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.399218][T31941] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.424453][T31941] bridge_slave_1: entered allmulticast mode [ 589.436329][T31941] bridge_slave_1: entered promiscuous mode [ 589.497111][T31941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.510174][T31941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.651674][T31941] team0: Port device team_slave_0 added [ 589.660867][T31941] team0: Port device team_slave_1 added [ 589.715398][T32124] net_ratelimit: 182 callbacks suppressed [ 589.715452][T32124] Set syz1 is full, maxelem 65536 reached [ 589.717840][T31941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.734077][T31941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.760399][T31941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.828257][T31941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.835420][T31941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.861675][T31941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.934750][T31941] hsr_slave_0: entered promiscuous mode [ 589.941519][T31941] hsr_slave_1: entered promiscuous mode [ 589.963385][T31941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.976080][T31941] Cannot create hsr debugfs directory [ 590.113024][T31941] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.150988][T31941] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.198540][T31941] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.274552][T31941] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.388416][T31941] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 590.416906][T31941] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 590.436887][T31941] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 590.458599][T31941] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 590.469196][T32343] netlink: 'syz.0.18504': attribute type 1 has an invalid length. [ 590.557148][T32350] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 590.568441][T32347] IPVS: stopping master sync thread 32350 ... [ 590.583442][T31941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.621926][T31941] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.634514][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.641701][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.667924][T31941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.678472][T31941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.711559][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.718736][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.846350][T31941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.981410][T32389] netlink: 'syz.0.18520': attribute type 4 has an invalid length. [ 591.152111][T31941] veth0_vlan: entered promiscuous mode [ 591.179300][T31941] veth1_vlan: entered promiscuous mode [ 591.203469][T31941] veth0_macvtap: entered promiscuous mode [ 591.229878][T31941] veth1_macvtap: entered promiscuous mode [ 591.256222][T31941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.281732][T31941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.301972][T31941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.310837][T31941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.319603][T31941] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.328365][T31941] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.790859][T32472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18545'. [ 591.812095][T32474] netem: incorrect ge model size [ 591.817145][T32474] netem: change failed [ 591.901686][T32487] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18553'. [ 592.114248][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 592.114268][ T29] audit: type=1326 audit(2000000035.367:22652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.209029][ T29] audit: type=1326 audit(2000000035.399:22653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.233558][ T29] audit: type=1326 audit(2000000035.399:22654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.257387][ T29] audit: type=1326 audit(2000000035.399:22655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.281256][ T29] audit: type=1326 audit(2000000035.399:22656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.305185][ T29] audit: type=1326 audit(2000000035.399:22657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.329124][ T29] audit: type=1326 audit(2000000035.399:22658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.334049][T32522] ALSA: seq fatal error: cannot create timer (-19) [ 592.352861][ T29] audit: type=1326 audit(2000000035.399:22659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.383250][ T29] audit: type=1326 audit(2000000035.399:22660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.407083][ T29] audit: type=1326 audit(2000000035.399:22661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32513 comm="syz.1.18561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 592.497438][T32526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18566'. [ 592.548902][T32531] loop6: detected capacity change from 0 to 512 [ 592.561630][T32529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18568'. [ 592.572367][T32531] EXT4-fs: Ignoring removed nobh option [ 592.578511][T32535] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18571'. [ 592.587662][T32535] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18571'. [ 592.626295][T32531] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.18569: invalid indirect mapped block 256 (level 2) [ 592.643984][T32531] EXT4-fs (loop6): 2 truncates cleaned up [ 592.650946][T32531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.671280][T32548] syzkaller1: entered promiscuous mode [ 592.676865][T32548] syzkaller1: entered allmulticast mode [ 592.761259][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.032761][T32585] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18588'. [ 593.055651][T32585] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18588'. [ 593.132489][T32591] syzkaller1: entered promiscuous mode [ 593.138074][T32591] syzkaller1: entered allmulticast mode [ 593.755783][T32653] syzkaller1: entered promiscuous mode [ 593.761386][T32653] syzkaller1: entered allmulticast mode [ 593.810330][T32663] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 593.917808][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18615'. [ 593.952004][T32679] bond0: (slave team0): Releasing backup interface [ 594.042712][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18618'. [ 594.064250][T32725] ALSA: seq fatal error: cannot create timer (-19) [ 594.108247][T32732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.138305][T32734] ALSA: seq fatal error: cannot create timer (-19) [ 594.164808][T32741] loop6: detected capacity change from 0 to 2048 [ 594.171348][T32732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.218792][T32732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.249919][T32752] loop6: detected capacity change from 0 to 256 [ 594.258431][T32752] FAT-fs (loop6): bogus number of FAT sectors [ 594.264790][T32752] FAT-fs (loop6): Can't find a valid FAT filesystem [ 594.273298][T32732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.361376][T32732] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.386871][T32732] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.403678][T32732] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.416622][T32732] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.557612][ T320] ALSA: seq fatal error: cannot create timer (-19) [ 594.564704][ T325] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 594.592390][ T329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=329 comm=syz.6.18634 [ 594.604965][ T329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=329 comm=syz.6.18634 [ 594.679820][ T333] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 47 [ 594.886924][ T335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.903096][ T335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.039840][ T372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=372 comm=syz.0.18653 [ 595.106685][ T382] bridge0: port 1(30ªX¹¦D) entered blocking state [ 595.113527][ T382] bridge0: port 1(30ªX¹¦D) entered disabled state [ 595.120951][ T382] 0ªX¹¦D: entered promiscuous mode [ 595.126890][ T382] bridge0: port 1(30ªX¹¦D) entered blocking state [ 595.133474][ T382] bridge0: port 1(30ªX¹¦D) entered forwarding state [ 595.145818][ T382] 0ªX¹¦D: left promiscuous mode [ 595.150982][ T382] bridge0: port 1(30ªX¹¦D) entered disabled state [ 595.292529][ T401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=401 comm=syz.8.18666 [ 595.305127][ T401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=401 comm=syz.8.18666 [ 595.449087][ T419] loop6: detected capacity change from 0 to 512 [ 595.470991][ T419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.494124][ T419] ext4 filesystem being mounted at /853/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.567049][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.667010][ T440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=440 comm=syz.2.18679 [ 595.679923][ T440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=440 comm=syz.2.18679 [ 595.816480][ T463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18686'. [ 596.363975][ T517] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 596.395719][ T519] loop6: detected capacity change from 0 to 1024 [ 596.457818][ T519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.521621][ T519] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.18702: bg 0: block 88: padding at end of block bitmap is not set [ 596.631299][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.642235][ T550] Falling back ldisc for ttyS3. [ 596.787559][ T570] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 597.103392][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 597.103463][ T29] audit: type=1326 audit(2000000040.606:23290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.142175][ T29] audit: type=1326 audit(2000000040.637:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.166077][ T29] audit: type=1326 audit(2000000040.637:23292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.189869][ T29] audit: type=1326 audit(2000000040.637:23293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.213404][ T29] audit: type=1326 audit(2000000040.637:23294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.237021][ T29] audit: type=1326 audit(2000000040.637:23295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.260711][ T29] audit: type=1326 audit(2000000040.637:23296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81730e969 code=0x7ffc0000 [ 597.284372][ T29] audit: type=1326 audit(2000000040.637:23297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc817305927 code=0x7ffc0000 [ 597.307903][ T29] audit: type=1326 audit(2000000040.637:23298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8172aab39 code=0x7ffc0000 [ 597.331553][ T29] audit: type=1326 audit(2000000040.637:23299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.0.18719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc817305927 code=0x7ffc0000 [ 597.587420][ T616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.608371][ T616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.715446][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18743'. [ 597.871723][ T661] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 598.058176][ T689] tipc: Enabled bearer , priority 0 [ 598.070031][ T689] tipc: Disabling bearer [ 598.084536][ T674] Falling back ldisc for ttyS3. [ 598.209830][ T708] tipc: Enabling of bearer rejected, already enabled [ 598.545454][ T756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.18781'. [ 598.568490][ T754] SELinux: failed to load policy [ 598.689367][ T771] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18787'. [ 598.735527][ T775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18789'. [ 598.747618][ T771] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 598.870402][ T794] loop6: detected capacity change from 0 to 512 [ 598.920428][ T794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.979692][ T794] ext4 filesystem being mounted at /875/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.170950][ T767] Set syz1 is full, maxelem 65536 reached [ 599.174972][ T794] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 599.269140][T16288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.335409][ T827] siw: device registration error -23 [ 599.387154][ T854] loop6: detected capacity change from 0 to 164 [ 599.394470][ T854] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 599.485661][ T867] netlink: 'syz.2.18814': attribute type 12 has an invalid length. [ 599.624263][ T893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.633955][ T892] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.18825'. [ 599.643751][ T893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.693557][ T906] tipc: Started in network mode [ 599.698622][ T906] tipc: Node identity ac14140f, cluster identity 4711 [ 599.708198][ T906] tipc: New replicast peer: 10.1.1.2 [ 599.713808][ T906] tipc: Enabled bearer , priority 10 [ 600.095327][ T973] netlink: 'syz.0.18856': attribute type 4 has an invalid length. [ 600.154905][ T984] netlink: 'syz.8.18861': attribute type 1 has an invalid length. [ 600.195251][ T989] loop6: detected capacity change from 0 to 164 [ 600.213529][ T989] bio_check_eod: 102 callbacks suppressed [ 600.213547][ T989] syz.6.18863: attempt to access beyond end of device [ 600.213547][ T989] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 600.242276][ T989] syz.6.18863: attempt to access beyond end of device [ 600.242276][ T989] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 600.694411][ T1025] syzkaller0: entered promiscuous mode [ 600.700010][ T1025] syzkaller0: entered allmulticast mode [ 600.810005][ T3451] tipc: Node number set to 2886997007 [ 600.920053][ T1048] loop6: detected capacity change from 0 to 256 [ 600.981138][ T1048] syz.6.18883: attempt to access beyond end of device [ 600.981138][ T1048] loop6: rw=0, sector=256, nr_sectors = 20 limit=256 [ 601.168298][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18890'. [ 601.508484][ T1137] smc: net device bond0 applied user defined pnetid SYZ2 [ 601.533558][ T1137] smc: net device bond0 erased user defined pnetid SYZ2 [ 601.541888][ T1142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18915'. [ 601.593316][ T1142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18915'. [ 601.776055][ T1179] xt_hashlimit: max too large, truncated to 1048576 [ 602.190928][ T1233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18938'. [ 602.209641][ T1233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18938'. [ 602.237655][ T1233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.18938'. [ 602.447571][ T1252] netlink: 'syz.8.18947': attribute type 13 has an invalid length. [ 602.491005][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 602.491025][ T29] audit: type=1400 audit(2000000046.254:23591): avc: denied { ioctl } for pid=1258 comm="syz.0.18949" path="socket:[159841]" dev="sockfs" ino=159841 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.587761][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.595082][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.670627][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.682433][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.739126][ T1252] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.748089][ T1252] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.757184][ T1252] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.766224][ T1252] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.892982][ T29] audit: type=1400 audit(2000000046.674:23592): avc: denied { mount } for pid=1300 comm="syz.8.18960" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 602.917917][ T29] audit: type=1400 audit(2000000046.716:23593): avc: denied { unmount } for pid=31941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 603.015341][ T29] audit: type=1400 audit(2000000046.810:23594): avc: denied { write } for pid=1312 comm="syz.8.18962" name="ipv6_route" dev="proc" ino=4026532832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 603.104577][ T29] audit: type=1326 audit(2000000046.905:23595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 603.128473][ T29] audit: type=1326 audit(2000000046.905:23596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 603.147730][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18966'. [ 603.265864][ T29] audit: type=1326 audit(2000000046.968:23597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 603.276292][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x1 [ 603.289558][ T29] audit: type=1326 audit(2000000046.978:23598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef690e969 code=0x7ffc0000 [ 603.296818][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.296846][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.296915][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.320577][ T29] audit: type=1326 audit(2000000046.978:23599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ef6905927 code=0x7ffc0000 [ 603.327894][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.327960][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.328001][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x4 [ 603.328026][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.335794][ T29] audit: type=1326 audit(2000000046.978:23600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ef68aab39 code=0x7ffc0000 [ 603.343080][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.343175][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.434697][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x2 [ 603.442147][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.449598][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.457032][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x4 [ 603.464552][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.472030][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.479458][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x2 [ 603.486911][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.494562][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.502142][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.509725][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.517243][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.524819][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.532259][ T5493] hid-generic 0006:0000:0000.0029: unknown main item tag 0x0 [ 603.591722][ T5493] hid-generic 0006:0000:0000.0029: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 603.836439][ T1412] loop6: detected capacity change from 0 to 128 [ 603.861910][ T1412] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 603.892832][ T1412] syz.6.18983: attempt to access beyond end of device [ 603.892832][ T1412] loop6: rw=2049, sector=129, nr_sectors = 13 limit=128 [ 603.963854][T11094] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 604.254311][ T1451] ================================================================== [ 604.262450][ T1451] BUG: KCSAN: data-race in __io_queue_proc / io_poll_wake [ 604.262486][ T1451] [ 604.262492][ T1451] write to 0xffff88812f7827e8 of 8 bytes by task 1460 on cpu 1: [ 604.262508][ T1451] io_poll_wake+0x1f9/0x3b0 [ 604.262532][ T1451] __wake_up+0x66/0xb0 [ 604.262549][ T1451] n_tty_receive_buf_standard+0x2011/0x2f10 [ 604.262570][ T1451] n_tty_receive_buf_common+0x805/0xbe0 [ 604.262589][ T1451] n_tty_receive_buf+0x30/0x40 [ 604.262622][ T1451] tiocsti+0x170/0x1d0 [ 604.262645][ T1451] tty_ioctl+0x4a4/0xb80 [ 604.262669][ T1451] __se_sys_ioctl+0xcb/0x140 [ 604.262690][ T1451] __x64_sys_ioctl+0x43/0x50 [ 604.262710][ T1451] x64_sys_call+0x19a8/0x2fb0 [ 604.262732][ T1451] do_syscall_64+0xd0/0x1a0 [ 604.262755][ T1451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.262776][ T1451] [ 604.262781][ T1451] read to 0xffff88812f7827e8 of 8 bytes by task 1451 on cpu 0: [ 604.262796][ T1451] __io_queue_proc+0x10a/0x280 [ 604.262818][ T1451] io_async_queue_proc+0x43/0x50 [ 604.262840][ T1451] n_tty_poll+0x7a/0x450 [ 604.262870][ T1451] tty_poll+0x79/0xf0 [ 604.262898][ T1451] __io_arm_poll_handler+0x1ee/0xb70 [ 604.262920][ T1451] io_arm_poll_handler+0x427/0x5b0 [ 604.262942][ T1451] io_queue_async+0x60/0x3e0 [ 604.262960][ T1451] io_submit_sqes+0xa0c/0x1000 [ 604.262989][ T1451] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 604.263021][ T1451] __x64_sys_io_uring_enter+0x78/0x90 [ 604.263053][ T1451] x64_sys_call+0x28c8/0x2fb0 [ 604.263074][ T1451] do_syscall_64+0xd0/0x1a0 [ 604.263096][ T1451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.263116][ T1451] [ 604.263120][ T1451] value changed: 0xffff88811660ea08 -> 0x0000000000000000 [ 604.263132][ T1451] [ 604.263135][ T1451] Reported by Kernel Concurrency Sanitizer on: [ 604.263150][ T1451] CPU: 0 UID: 0 PID: 1451 Comm: syz.8.18997 Tainted: G W 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(voluntary) [ 604.263183][ T1451] Tainted: [W]=WARN [ 604.263190][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.263203][ T1451] ================================================================== [ 604.320091][ T1465] tipc: Enabling of bearer rejected, failed to enable media