last executing test programs: 5m24.509591195s ago: executing program 32 (id=71): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r0) 4m45.377708772s ago: executing program 33 (id=1302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=@newlink={0x64, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2242}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x7f}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'veth0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 4m33.857257963s ago: executing program 34 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000700000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$netlink(0x10, 0x3, 0x8000000004) 4m27.778109996s ago: executing program 35 (id=1757): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000640)="02", 0x1}], 0x1, 0xd) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 4m23.679426837s ago: executing program 36 (id=1889): setxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) 4m21.923374629s ago: executing program 37 (id=1933): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000bfc1000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 4m18.979913847s ago: executing program 38 (id=1975): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b003031"], 0x15) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 4m14.285704466s ago: executing program 8 (id=2079): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) listxattr(0x0, 0x0, 0x0) 4m14.266063938s ago: executing program 39 (id=2079): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) listxattr(0x0, 0x0, 0x0) 2m45.13247439s ago: executing program 40 (id=4249): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 2m30.087563497s ago: executing program 41 (id=4640): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) 2m10.943475966s ago: executing program 42 (id=5097): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 44.504537169s ago: executing program 43 (id=7483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000000004}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r3, r2) 33.839227572s ago: executing program 7 (id=7722): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') 33.804529575s ago: executing program 7 (id=7724): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r0, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x401, @empty, 0x4}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x84, 0x2, 0x1b}, 0x9c) 33.800653705s ago: executing program 7 (id=7725): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 33.782814227s ago: executing program 7 (id=7726): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) pwritev2(r1, &(0x7f0000000940)=[{&(0x7f0000000340)="be85809842d43cbb78329613b3aa8b78f87e932d0db6f110e00ef09327f497b6c6bc81aa4e792dc9c48a1b9a75cf44ce8ce1b856b626a7e4777204471d63392de989c63d", 0x44}], 0x1, 0x9, 0x10000, 0x0) 33.605082801s ago: executing program 7 (id=7727): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) get_mempolicy(0x0, 0x0, 0xffff, &(0x7f0000ffb000/0x3000)=nil, 0x5) 33.155987748s ago: executing program 7 (id=7732): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 33.147544678s ago: executing program 44 (id=7732): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 29.78827789s ago: executing program 8 (id=7733): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) connect$x25(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) 29.704522057s ago: executing program 8 (id=7810): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 29.453539447s ago: executing program 8 (id=7818): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) pwritev2(r1, &(0x7f0000000940)=[{&(0x7f0000000340)="be85809842d43cbb78329613b3aa8b78f87e932d0db6f110e00ef09327f497b6c6bc81aa4e792dc9c48a1b9a75cf44ce8ce1b856b626a7e4777204471d63392de989c63d", 0x44}], 0x1, 0x9, 0x10000, 0x0) 29.154358581s ago: executing program 8 (id=7819): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 26.976908338s ago: executing program 8 (id=7876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 26.976734678s ago: executing program 45 (id=7876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17.884842183s ago: executing program 5 (id=8098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x58fc, 0x0, 0x3, 0xbd7f7fff}, &(0x7f0000000440)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x5535, 0x3acd, 0x22, 0x0, 0x0) 17.860770585s ago: executing program 5 (id=8099): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x20040000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close(r2) 17.840547597s ago: executing program 5 (id=8101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 17.768012082s ago: executing program 5 (id=8102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 17.767440712s ago: executing program 5 (id=8103): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) 17.507778643s ago: executing program 5 (id=8106): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 17.507611904s ago: executing program 46 (id=8106): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 17.17735636s ago: executing program 2 (id=8121): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c96cae8b33b3e0d11e1bede3f06bd5e78ab39f58d542a60a7c688a151f9f77d722e174a40b2bbcaaf5524fdd36f95ef4957424bc3fce6d8b820e59a3052739e66a5679d916cd747d09ab6adbc1c58fcb5c9a3aafa1dc4c03f3ef49776197f0aacbb0ff51cbefae63b85907072e87e654131227c76a0e0cdca22d52116d788f88ce676fc975d50bb9e94d2dbbd09246734ff47bdff63593d5f777ed36c317914601a4156b2aba10cd962d75659cc05653c884", 0xb2}, {&(0x7f0000000ac0)="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", 0xecb}], 0x2}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 16.285158982s ago: executing program 2 (id=8134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 16.19794469s ago: executing program 2 (id=8139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setresgid(0xee00, 0xee01, 0x0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000021c0)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='stack\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 16.154880653s ago: executing program 2 (id=8144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 16.133393495s ago: executing program 2 (id=8145): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16.053790201s ago: executing program 6 (id=8148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31830000000000000000190000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x40010) 16.022185104s ago: executing program 6 (id=8150): r0 = socket$unix(0x1, 0x5, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) 15.955520439s ago: executing program 6 (id=8153): syz_open_dev$usbfs(0x0, 0x76, 0x103381) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r3, 0x14) 15.934015331s ago: executing program 6 (id=8155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 15.897991534s ago: executing program 2 (id=8156): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) fchdir(r2) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 15.897810174s ago: executing program 47 (id=8156): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) fchdir(r2) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 15.897338234s ago: executing program 6 (id=8158): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 15.162213393s ago: executing program 6 (id=8164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 15.161958083s ago: executing program 48 (id=8164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.824304623s ago: executing program 0 (id=8506): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) 1.796077325s ago: executing program 0 (id=8507): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.714306971s ago: executing program 0 (id=8508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1.386497978s ago: executing program 3 (id=8515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1.320501423s ago: executing program 4 (id=8517): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) r0 = socket(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.319518873s ago: executing program 1 (id=8518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.283738166s ago: executing program 1 (id=8519): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1.23806951s ago: executing program 9 (id=8520): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 1.214547052s ago: executing program 4 (id=8521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.167653695s ago: executing program 4 (id=8522): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 1.153270747s ago: executing program 1 (id=8523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) unshare(0x2040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) 1.063424134s ago: executing program 3 (id=8524): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x1045, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) 1.063232154s ago: executing program 9 (id=8525): syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.063109834s ago: executing program 1 (id=8526): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 906.546757ms ago: executing program 3 (id=8527): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 791.286116ms ago: executing program 0 (id=8528): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 788.670597ms ago: executing program 3 (id=8538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x6}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r3) ioprio_get$pid(0x2, r3) 734.561631ms ago: executing program 0 (id=8529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 728.102151ms ago: executing program 9 (id=8530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 649.565988ms ago: executing program 9 (id=8531): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) r0 = socket(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 626.06389ms ago: executing program 3 (id=8532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 570.440604ms ago: executing program 9 (id=8533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 554.181275ms ago: executing program 3 (id=8534): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 433.163175ms ago: executing program 0 (id=8535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5f}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 322.868824ms ago: executing program 1 (id=8536): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r1, r2) 251.32927ms ago: executing program 1 (id=8537): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 128.74383ms ago: executing program 4 (id=8539): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) 81.683653ms ago: executing program 9 (id=8540): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "0813f3", 0x9, 0xff, 0x0, @mcast1, @mcast2, [@fragment={0x84, 0x0, 0xc, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) 81.366914ms ago: executing program 4 (id=8541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 4 (id=8542): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) unlink(&(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): -000000000000. [ 304.107402][T22229] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 304.186183][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.241893][T22255] program syz.0.7103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.258240][T22256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 304.264865][T22256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.272554][T22256] vhci_hcd vhci_hcd.0: Device attached [ 304.298747][T22262] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 304.305401][T22262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.313125][T22262] vhci_hcd vhci_hcd.0: Device attached [ 304.354506][T22256] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 304.361071][T22256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.368653][T22256] vhci_hcd vhci_hcd.0: Device attached [ 304.376643][T22256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.419368][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.425156][T22256] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 304.435066][T22256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.442825][T22256] vhci_hcd vhci_hcd.0: Device attached [ 304.458387][T22262] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 304.465132][T22262] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.472670][T22262] vhci_hcd vhci_hcd.0: Device attached [ 304.497601][T22280] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7108'. [ 304.509570][T22256] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(13) [ 304.515290][T22280] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 304.516217][T22256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.516318][T22256] vhci_hcd vhci_hcd.0: Device attached [ 304.536194][ T1045] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 304.549032][T22280] 0ªî{X¹¦: entered allmulticast mode [ 304.549398][T22256] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 304.561188][T22256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.568957][T22256] vhci_hcd vhci_hcd.0: Device attached [ 304.574200][T22280] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 304.582582][T22283] vhci_hcd: connection closed [ 304.592197][T22263] vhci_hcd: connection closed [ 304.596000][T22269] vhci_hcd: connection closed [ 304.597164][T22258] vhci_hcd: connection reset by peer [ 304.597286][T22278] vhci_hcd: connection closed [ 304.597417][T22271] vhci_hcd: connection closed [ 304.602475][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7109'. [ 304.607773][T22275] vhci_hcd: connection closed [ 304.630297][ T7897] vhci_hcd: stop threads [ 304.640048][ T7897] vhci_hcd: release socket [ 304.644517][ T7897] vhci_hcd: disconnect device [ 304.652153][ T7897] vhci_hcd: stop threads [ 304.657224][ T7897] vhci_hcd: release socket [ 304.661681][ T7897] vhci_hcd: disconnect device [ 304.688611][ T7897] vhci_hcd: stop threads [ 304.693131][ T7897] vhci_hcd: release socket [ 304.697719][ T7897] vhci_hcd: disconnect device [ 304.704188][ T7897] vhci_hcd: stop threads [ 304.708578][ T7897] vhci_hcd: release socket [ 304.713033][ T7897] vhci_hcd: disconnect device [ 304.719110][ T7897] vhci_hcd: stop threads [ 304.723425][ T7897] vhci_hcd: release socket [ 304.728904][ T7897] vhci_hcd: disconnect device [ 304.734653][ T7897] vhci_hcd: stop threads [ 304.739020][ T7897] vhci_hcd: release socket [ 304.743565][ T7897] vhci_hcd: disconnect device [ 304.753996][ T7897] vhci_hcd: stop threads [ 304.759008][ T7897] vhci_hcd: release socket [ 304.763534][ T7897] vhci_hcd: disconnect device [ 304.791612][T22295] loop7: detected capacity change from 0 to 128 [ 304.800999][T22295] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.829616][T15082] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.925230][T22310] loop7: detected capacity change from 0 to 512 [ 304.940402][T22310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.016260][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.073741][T22326] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7125'. [ 305.083059][T22326] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 305.090585][T22326] 1ªî{X¹¦: entered allmulticast mode [ 305.098363][T22326] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 305.148363][T22334] loop3: detected capacity change from 0 to 2048 [ 305.167542][T22336] loop5: detected capacity change from 0 to 1024 [ 305.176923][T22334] loop3: p1 < > p4 [ 305.179438][T22336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.181128][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7131'. [ 305.194022][T22334] loop3: p4 size 8388608 extends beyond EOD, truncated [ 305.212960][T22336] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7130: bg 0: block 494: padding at end of block bitmap is not set [ 305.228386][T22336] EXT4-fs (loop5): Remounting filesystem read-only [ 305.235047][T22336] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 305.330255][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.421062][T22353] IPv4: Oversized IP packet from 127.202.26.0 [ 305.947816][T22372] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7143'. [ 305.976233][T22372] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 305.995030][T22372] 0ªî{X¹¦: entered allmulticast mode [ 306.025439][T22372] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 306.170026][T22396] loop3: detected capacity change from 0 to 2048 [ 306.180650][T22399] netlink: 'syz.5.7159': attribute type 30 has an invalid length. [ 306.199022][T22396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.251050][T22396] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.7156: bit already cleared for inode 15 [ 306.289268][T22412] loop7: detected capacity change from 0 to 512 [ 306.311720][T16048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.342372][T22419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.352621][T22412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.368609][T22419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.376678][T22422] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7169'. [ 306.390786][T22422] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7169'. [ 306.420143][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.860278][T22465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7188'. [ 306.900589][T22482] loop7: detected capacity change from 0 to 512 [ 306.915668][T22482] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.7190: casefold flag without casefold feature [ 306.931114][T22482] EXT4-fs (loop7): Remounting filesystem read-only [ 306.939257][T22482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.972279][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.127036][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7200'. [ 307.172758][T22535] ip6gre1: entered allmulticast mode [ 307.181280][T22546] netlink: 'syz.3.7202': attribute type 7 has an invalid length. [ 307.322580][T22564] loop5: detected capacity change from 0 to 512 [ 307.332729][T22564] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.345830][T22564] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 307.441401][T22564] EXT4-fs (loop5): 1 truncate cleaned up [ 307.460365][T22564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.571154][T22581] netlink: 'syz.4.7214': attribute type 27 has an invalid length. [ 307.597897][T22581] 1ªî{X¹¦: left allmulticast mode [ 308.368405][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.455242][T22630] __nla_validate_parse: 1 callbacks suppressed [ 308.455262][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7226'. [ 308.523581][T22637] rdma_op ffff88814af76d80 conn xmit_rdma 0000000000000000 [ 308.698700][T22651] loop5: detected capacity change from 0 to 2048 [ 308.728880][T22651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.744982][T22656] pim6reg: entered allmulticast mode [ 308.752547][T22656] pim6reg: left allmulticast mode [ 308.794340][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 308.794357][ T29] audit: type=1400 audit(308.779:10421): avc: denied { bind } for pid=22666 comm="syz.4.7239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 308.819612][ T29] audit: type=1400 audit(308.779:10422): avc: denied { name_bind } for pid=22666 comm="syz.4.7239" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 308.840286][ T29] audit: type=1400 audit(308.779:10423): avc: denied { node_bind } for pid=22666 comm="syz.4.7239" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 309.003301][T22679] netlink: 376 bytes leftover after parsing attributes in process `syz.0.7245'. [ 309.027279][T22687] loop4: detected capacity change from 0 to 128 [ 309.082046][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.173273][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7256'. [ 309.249583][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7259'. [ 309.258693][T22719] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7259'. [ 309.258844][T22716] loop5: detected capacity change from 0 to 8192 [ 309.267759][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7259'. [ 309.268672][T22719] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7259'. [ 309.292687][T22719] netlink: 'syz.7.7259': attribute type 6 has an invalid length. [ 309.385111][ T29] audit: type=1400 audit(309.369:10424): avc: denied { read write } for pid=22728 comm="syz.7.7263" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 309.408260][ T29] audit: type=1400 audit(309.369:10425): avc: denied { open } for pid=22728 comm="syz.7.7263" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 309.427293][T22730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7261'. [ 309.462017][T22736] loop4: detected capacity change from 0 to 512 [ 309.476951][T22736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 309.495583][T22736] System zones: 1-12 [ 309.505693][ T29] audit: type=1326 audit(309.489:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22754 comm="syz.7.7267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 309.533560][ T29] audit: type=1326 audit(309.489:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22754 comm="syz.7.7267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 309.556670][ T29] audit: type=1326 audit(309.489:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22754 comm="syz.7.7267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 309.556704][ T29] audit: type=1326 audit(309.489:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22754 comm="syz.7.7267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 309.588580][T22736] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.7266: error while reading EA inode 32 err=-116 [ 309.603039][ T29] audit: type=1326 audit(309.489:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22754 comm="syz.7.7267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 309.647439][ T1045] usb 7-1: enqueue for inactive port 0 [ 309.662301][ T1045] usb 7-1: enqueue for inactive port 0 [ 309.704065][T22736] EXT4-fs (loop4): Remounting filesystem read-only [ 309.711552][T22736] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 309.735098][T22736] EXT4-fs (loop4): 1 orphan inode deleted [ 309.743066][T22736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.755283][ T1045] vhci_hcd: vhci_device speed not set [ 309.837801][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7273'. [ 309.867560][T22769] team0: entered promiscuous mode [ 309.872779][T22769] team0: entered allmulticast mode [ 310.032458][T22812] netem: incorrect ge model size [ 310.038594][T22812] netem: change failed [ 310.300840][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.317087][T22821] loop3: detected capacity change from 0 to 512 [ 310.334878][T22821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.439449][T22832] $Hÿ: renamed from bond0 [ 310.455234][T22832] $Hÿ: entered promiscuous mode [ 310.460378][T22832] bond_slave_0: entered promiscuous mode [ 310.466827][T22832] bond_slave_1: entered promiscuous mode [ 310.495593][T16048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.620407][T22845] SELinux: failed to load policy [ 310.672203][T22859] loop4: detected capacity change from 0 to 1024 [ 310.679746][T22859] EXT4-fs: Ignoring removed orlov option [ 310.685541][T22859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.707498][T22859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.778576][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.882333][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7310'. [ 310.963126][T22927] vlan2: entered allmulticast mode [ 310.968459][T22927] macvtap0: entered allmulticast mode [ 310.973919][T22927] veth0_macvtap: entered allmulticast mode [ 310.984818][T22882] loop3: detected capacity change from 0 to 1024 [ 311.029870][T22929] bond0: entered promiscuous mode [ 311.034969][T22929] bond0: entered allmulticast mode [ 311.087968][T22882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.133829][T16048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.314785][T22992] loop4: detected capacity change from 0 to 8192 [ 311.324614][T22992] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.726916][T23035] loop3: detected capacity change from 0 to 128 [ 311.943382][T23055] loop7: detected capacity change from 0 to 1024 [ 311.950747][T23055] EXT4-fs: Ignoring removed orlov option [ 311.956535][T23055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.980713][T23055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.027047][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.209044][T23092] loop5: detected capacity change from 0 to 1024 [ 312.216211][T23092] EXT4-fs: Ignoring removed orlov option [ 312.222004][T23092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.258649][T23092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.348536][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.492424][T23090] loop7: detected capacity change from 0 to 1024 [ 312.610783][T23120] loop4: detected capacity change from 0 to 1024 [ 312.894059][T23161] cgroup: Unknown subsys name 'cpuset' [ 313.076206][T23174] loop7: detected capacity change from 0 to 512 [ 313.085314][T23174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 313.125430][T23174] System zones: 1-12 [ 313.139975][T23174] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.7392: error while reading EA inode 32 err=-116 [ 313.163484][T23174] EXT4-fs (loop7): Remounting filesystem read-only [ 313.170175][T23174] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 313.180668][T23174] EXT4-fs (loop7): 1 orphan inode deleted [ 313.216725][T23187] wg2: entered promiscuous mode [ 313.221723][T23187] wg2: entered allmulticast mode [ 313.399683][T23219] loop3: detected capacity change from 0 to 164 [ 313.407563][T23219] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 313.418581][T23219] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 313.428037][T23219] Symlink component flag not implemented [ 313.433781][T23219] Symlink component flag not implemented [ 313.441226][T23219] Symlink component flag not implemented (7) [ 313.447302][T23219] Symlink component flag not implemented (116) [ 313.467994][T23219] bond4: entered promiscuous mode [ 313.473073][T23219] bond4: entered allmulticast mode [ 313.480166][T23219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.498537][T23219] bond4 (unregistering): Released all slaves [ 313.533130][T23291] loop5: detected capacity change from 0 to 1024 [ 313.562399][T23291] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 313.639395][T23307] serio: Serial port ptm0 [ 313.819341][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 313.819358][ T29] audit: type=1400 audit(313.799:10513): avc: denied { map } for pid=23330 comm="syz.5.7424" path="socket:[78153]" dev="sockfs" ino=78153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 313.870939][T23339] __nla_validate_parse: 3 callbacks suppressed [ 313.871033][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7427'. [ 313.887907][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7427'. [ 313.933170][T23343] loop5: detected capacity change from 0 to 512 [ 313.942634][ T29] audit: type=1326 audit(313.929:10514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 313.966991][ T29] audit: type=1326 audit(313.929:10515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 313.990527][ T29] audit: type=1326 audit(313.929:10516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.013838][ T29] audit: type=1326 audit(313.929:10517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.038353][ T29] audit: type=1326 audit(313.939:10518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.062974][ T29] audit: type=1326 audit(313.949:10519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.086913][ T29] audit: type=1326 audit(313.949:10520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.109977][ T29] audit: type=1326 audit(313.949:10521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.133776][ T29] audit: type=1326 audit(313.949:10522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.7.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 314.161706][T23343] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.7430: corrupted inode contents [ 314.173893][T23343] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.7430: mark_inode_dirty error [ 314.194312][T23343] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.7430: corrupted inode contents [ 314.216017][T23343] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.7430: mark_inode_dirty error [ 314.237123][T23343] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7430: Failed to acquire dquot type 1 [ 314.281537][T23362] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.7430: corrupted inode contents [ 314.305142][T23362] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.7430: mark_inode_dirty error [ 314.317535][T23362] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.7430: corrupted inode contents [ 314.359672][T23362] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.7430: mark_inode_dirty error [ 314.385264][T23362] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7430: Failed to acquire dquot type 1 [ 314.423958][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7454'. [ 314.434920][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7454'. [ 314.908153][T23467] geneve2: entered promiscuous mode [ 314.913694][T23467] geneve2: entered allmulticast mode [ 315.135397][T23486] loop7: detected capacity change from 0 to 512 [ 315.338839][T23497] wg2: entered promiscuous mode [ 315.343790][T23497] wg2: entered allmulticast mode [ 315.397984][T23506] loop4: detected capacity change from 0 to 164 [ 315.412106][T23506] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 315.424554][T23506] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 315.434236][T23506] Symlink component flag not implemented [ 315.440025][T23506] Symlink component flag not implemented [ 315.471654][T23512] loop3: detected capacity change from 0 to 128 [ 315.478704][T23506] Symlink component flag not implemented (7) [ 315.484730][T23506] Symlink component flag not implemented (116) [ 315.528481][T23513] bond9: entered promiscuous mode [ 315.533644][T23513] bond9: entered allmulticast mode [ 315.560236][T23513] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.565485][T23512] loop3: detected capacity change from 128 to 64 [ 315.577654][T23512] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory [ 315.603983][T23513] bond9 (unregistering): Released all slaves [ 315.781790][T23598] loop4: detected capacity change from 0 to 512 [ 315.890940][T23609] loop4: detected capacity change from 0 to 1024 [ 315.943070][T23609] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 316.027101][T23618] wg2: entered promiscuous mode [ 316.032027][T23618] wg2: entered allmulticast mode [ 316.342167][T23671] loop5: detected capacity change from 0 to 512 [ 316.365630][T23621] chnl_net:caif_netlink_parms(): no params data found [ 316.379905][T23671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 316.395948][T23671] System zones: 1-12 [ 316.408599][T23671] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.7507: error while reading EA inode 32 err=-116 [ 316.441775][T23671] EXT4-fs (loop5): Remounting filesystem read-only [ 316.448585][T23671] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 316.461389][T23621] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.468607][T23621] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.477176][T23671] EXT4-fs (loop5): 1 orphan inode deleted [ 316.481627][T23621] bridge_slave_0: entered allmulticast mode [ 316.492623][T23621] bridge_slave_0: entered promiscuous mode [ 316.501145][T23621] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.508420][T23621] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.517349][T23621] bridge_slave_1: entered allmulticast mode [ 316.524095][T23621] bridge_slave_1: entered promiscuous mode [ 316.560458][T23621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.571486][T23621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.599512][T23621] team0: Port device team_slave_0 added [ 316.608635][T23621] team0: Port device team_slave_1 added [ 316.634513][T23621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.641613][T23621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.667555][T23621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.679194][T23621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.686456][T23621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.712404][T23621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.754823][T23621] hsr_slave_0: entered promiscuous mode [ 316.761175][T23621] hsr_slave_1: entered promiscuous mode [ 316.929927][ T7889] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.007246][ T7889] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.062592][T23621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 317.072441][T23621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 317.081307][T23621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 317.091983][ T7889] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.103271][T23621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 317.145702][T23621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.155253][ T7889] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.171363][T23621] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.180816][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.188046][ T7861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.199828][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.206978][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.343176][T24026] serio: Serial port ptm0 [ 317.450351][ T7889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.466779][ T7889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.498290][ T7889] bond0 (unregistering): Released all slaves [ 317.513974][ T7889] bond1 (unregistering): (slave veth7): Releasing active interface [ 317.527050][ T7889] bond1 (unregistering): Released all slaves [ 317.541763][ T7889] bond2 (unregistering): Released all slaves [ 317.558632][ T7889] bond3 (unregistering): Released all slaves [ 317.570571][T24055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7517'. [ 317.622615][ T7889] tipc: Disabling bearer [ 317.627700][ T7889] tipc: Left network mode [ 317.700504][T23621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.763801][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.771524][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.799953][ T7889] veth1_macvtap: left promiscuous mode [ 317.805650][ T7889] veth0_macvtap: left promiscuous mode [ 317.811307][ T7889] veth1_vlan: left promiscuous mode [ 318.049828][T23621] veth0_vlan: entered promiscuous mode [ 318.059387][T23621] veth1_vlan: entered promiscuous mode [ 318.074043][T23621] veth0_macvtap: entered promiscuous mode [ 318.082014][T23621] veth1_macvtap: entered promiscuous mode [ 318.093375][T23621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.105241][T23621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.116388][ T7873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.125245][ T7873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.137258][ T7873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.153235][ T7873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.217194][T24119] loop7: detected capacity change from 0 to 2048 [ 318.230244][T24119] EXT4-fs error (device loop7): ext4_free_inode:354: comm syz.7.7537: bit already cleared for inode 15 [ 318.376626][T24146] serio: Serial port ptm0 [ 318.385102][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7528'. [ 318.718813][T24187] netlink: 'syz.4.7551': attribute type 30 has an invalid length. [ 318.828413][T24172] Set syz1 is full, maxelem 65536 reached [ 318.981107][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7562'. [ 319.070365][T24234] serio: Serial port ptm0 [ 319.264673][T24251] netlink: 'syz.0.7568': attribute type 30 has an invalid length. [ 319.428319][T24265] loop7: detected capacity change from 0 to 4096 [ 319.456660][T24279] loop4: detected capacity change from 0 to 128 [ 320.420548][T24312] serio: Serial port ptm0 [ 320.658157][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 320.658175][ T29] audit: type=1326 audit(320.640:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.6.7597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f136899ebe9 code=0x0 [ 321.517378][T24359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7607'. [ 321.528589][T24359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.536280][T24359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.547138][T24359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.554649][T24359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.610617][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7609'. [ 321.668415][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7612'. [ 321.699616][T24375] serio: Serial port ptm0 [ 321.723356][T24371] ip6gre1: entered allmulticast mode [ 321.800683][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7616'. [ 321.848632][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7616'. [ 321.864095][ T29] audit: type=1400 audit(321.840:10596): avc: denied { setattr } for pid=24403 comm="syz.4.7619" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 321.917084][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7623'. [ 321.968491][ T29] audit: type=1326 audit(321.950:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 321.991735][ T29] audit: type=1326 audit(321.950:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.022599][T24417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.031353][T24417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.040616][ T29] audit: type=1326 audit(322.000:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.063943][ T29] audit: type=1326 audit(322.000:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.087160][ T29] audit: type=1326 audit(322.000:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.110268][ T29] audit: type=1326 audit(322.000:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.133438][ T29] audit: type=1326 audit(322.000:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.156676][ T29] audit: type=1326 audit(322.000:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.7.7625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469bf1ebe9 code=0x7ffc0000 [ 322.433342][T24423] Set syz1 is full, maxelem 65536 reached [ 322.500121][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7628'. [ 322.509460][T24425] bridge_slave_1: left allmulticast mode [ 322.515356][T24425] bridge_slave_1: left promiscuous mode [ 322.521136][T24425] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.536507][T24425] bridge_slave_0: left allmulticast mode [ 322.542272][T24425] bridge_slave_0: left promiscuous mode [ 322.548141][T24425] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.862428][T24450] serio: Serial port ptm0 [ 322.962721][T24461] loop7: detected capacity change from 0 to 512 [ 323.003221][T24461] EXT4-fs mount: 24 callbacks suppressed [ 323.003241][T24461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.137924][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.669606][T24482] pim6reg: entered allmulticast mode [ 323.677312][T24482] pim6reg: left allmulticast mode [ 323.756281][T24502] loop7: detected capacity change from 0 to 128 [ 323.794811][T24510] $Hÿ: renamed from bond0 (while UP) [ 323.805359][T24510] $Hÿ: left allmulticast mode [ 323.909265][T24529] loop4: detected capacity change from 0 to 128 [ 323.921654][T24529] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 323.929758][T24529] FAT-fs (loop4): Filesystem has been set read-only [ 323.937581][T24529] syz.4.7654: attempt to access beyond end of device [ 323.937581][T24529] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 323.952047][T24529] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 323.960106][T24529] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 323.970066][T24529] syz.4.7654: attempt to access beyond end of device [ 323.970066][T24529] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 323.993695][T24529] syz.4.7654: attempt to access beyond end of device [ 323.993695][T24529] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 324.042617][T24538] loop4: detected capacity change from 0 to 2048 [ 324.067843][T24538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.264463][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.316093][T24574] loop5: detected capacity change from 0 to 512 [ 324.324807][T24574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.420674][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.443774][T24594] loop5: detected capacity change from 0 to 128 [ 324.464071][T24597] pim6reg1: entered promiscuous mode [ 324.469563][T24597] pim6reg1: entered allmulticast mode [ 324.509585][T24603] vlan2: entered allmulticast mode [ 324.514864][T24603] macvtap0: entered allmulticast mode [ 324.520432][T24603] veth0_macvtap: entered allmulticast mode [ 324.664263][T24614] loop6: detected capacity change from 0 to 512 [ 324.684040][T24614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.729671][T23621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.763711][T24624] $Hÿ: renamed from bond0 (while UP) [ 324.781071][T24631] loop4: detected capacity change from 0 to 512 [ 324.796202][T24631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.809069][T24624] $Hÿ: entered promiscuous mode [ 324.929989][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.961465][T24652] loop6: detected capacity change from 0 to 128 [ 325.119322][T24672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.128670][T24672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.271684][T24684] loop6: detected capacity change from 0 to 2048 [ 325.286601][T24684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.467335][T23621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.664922][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 325.664940][ T29] audit: type=1326 audit(325.640:10693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24693 comm="syz.6.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136899ebe9 code=0x7ffc0000 [ 325.926392][T24714] loop6: detected capacity change from 0 to 1024 [ 325.959456][T24714] EXT4-fs: Ignoring removed nobh option [ 325.964145][T24716] tipc: New replicast peer: 255.255.255.255 [ 325.971157][T24716] tipc: Enabled bearer , priority 10 [ 325.971265][T24714] EXT4-fs: Ignoring removed bh option [ 325.979902][T24716] netlink: 340 bytes leftover after parsing attributes in process `syz.0.7709'. [ 326.003082][T24714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.030789][ T29] audit: type=1400 audit(326.010:10694): avc: denied { setattr } for pid=24720 comm="syz.7.7720" name="secretmem" dev="secretmem" ino=80976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.060670][ T29] audit: type=1326 audit(326.040:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.083947][ T29] audit: type=1326 audit(326.040:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.129754][ T29] audit: type=1326 audit(326.090:10697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.153113][T24714] loop6: detected capacity change from 1024 to 64 [ 326.160406][ T29] audit: type=1326 audit(326.090:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.184193][ T29] audit: type=1326 audit(326.090:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.208068][ T29] audit: type=1326 audit(326.090:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.231079][ T29] audit: type=1326 audit(326.090:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.254844][ T29] audit: type=1326 audit(326.090:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.0.7711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 326.299681][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.314062][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.327613][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.341923][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.355748][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.371952][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.385835][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.400357][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.414006][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.428458][T23621] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.482204][T24754] loop7: detected capacity change from 0 to 512 [ 326.498088][T24754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.533581][T15082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.654024][T24778] loop7: detected capacity change from 0 to 1024 [ 326.661237][T24778] EXT4-fs: Ignoring removed nobh option [ 326.667160][T24778] EXT4-fs: Ignoring removed bh option [ 326.678244][ T7891] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.682842][T23621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.690893][T24778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.711309][T24718] kmmpd-loop6: attempt to access beyond end of device [ 326.711309][T24718] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 326.724964][T24718] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 326.744982][T24778] loop7: detected capacity change from 1024 to 64 [ 326.754036][ T7891] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.757198][T24778] syz.7.7726: attempt to access beyond end of device [ 326.757198][T24778] loop7: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 326.777836][T24778] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 113) [ 326.789821][T24778] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -5) [ 326.802682][T24778] Buffer I/O error on device loop7, logical block 113 [ 326.823630][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.837714][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.851461][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.865265][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.879597][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.893234][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.907109][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.920742][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 326.921703][ T7891] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.934308][T15082] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 327.001881][ T7891] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.016063][T16023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.028752][T24780] kmmpd-loop7: attempt to access beyond end of device [ 327.028752][T24780] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 327.043272][T24780] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 327.078021][T24792] pim6reg1: entered promiscuous mode [ 327.083386][T24792] pim6reg1: entered allmulticast mode [ 327.159923][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.181684][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.198097][ T7891] bond0 (unregistering): Released all slaves [ 327.263246][T24850] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7731'. [ 327.289642][T24822] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7731'. [ 327.342354][ T7891] hsr_slave_0: left promiscuous mode [ 327.358287][ T7891] hsr_slave_1: left promiscuous mode [ 327.370390][ T7891] veth1_macvtap: left promiscuous mode [ 327.376176][ T7891] veth0_macvtap: left allmulticast mode [ 327.381753][ T7891] veth0_macvtap: left promiscuous mode [ 327.388861][ T7891] veth1_vlan: left promiscuous mode [ 327.394164][ T7891] veth0_vlan: left promiscuous mode [ 327.394595][T24868] loop5: detected capacity change from 0 to 128 [ 327.480370][T24875] vhci_hcd: invalid port number 96 [ 327.485732][T24875] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 327.508461][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 327.520622][ T7891] team0 (unregistering): Port device team_slave_0 removed [ 327.617833][T24784] chnl_net:caif_netlink_parms(): no params data found [ 327.635120][T24963] loop4: detected capacity change from 0 to 1024 [ 327.642364][T24963] EXT4-fs: Ignoring removed oldalloc option [ 327.648440][T24963] EXT4-fs: Ignoring removed bh option [ 327.673215][T24963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.739299][T24784] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.746573][T24784] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.757607][T24784] bridge_slave_0: entered allmulticast mode [ 327.767697][T24784] bridge_slave_0: entered promiscuous mode [ 327.775023][T24784] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.780970][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.782155][T24784] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.798965][T24784] bridge_slave_1: entered allmulticast mode [ 327.805727][T24784] bridge_slave_1: entered promiscuous mode [ 327.808781][T25032] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7754'. [ 327.849177][T24784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.866619][T24784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.902256][T24784] team0: Port device team_slave_0 added [ 327.922688][T24784] team0: Port device team_slave_1 added [ 327.995723][T24784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.002729][T24784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.029865][T24784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.041726][T24784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.048750][T24784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.075455][T24784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.093148][ T7891] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.103336][ T7891] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.141505][T24867] chnl_net:caif_netlink_parms(): no params data found [ 328.161318][ T7891] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.172059][ T7891] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.189140][T24784] hsr_slave_0: entered promiscuous mode [ 328.196958][T24784] hsr_slave_1: entered promiscuous mode [ 328.238630][ T7891] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.248640][ T7891] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.270328][T25302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7759'. [ 328.303321][ T7891] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.313272][ T7891] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.327928][T24867] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.335356][T24867] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.349991][T24867] bridge_slave_0: entered allmulticast mode [ 328.369372][T24867] bridge_slave_0: entered promiscuous mode [ 328.389631][T24867] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.396913][T24867] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.405814][T24867] bridge_slave_1: entered allmulticast mode [ 328.412499][T24867] bridge_slave_1: entered promiscuous mode [ 328.465044][T24867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.619517][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.630212][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.641974][ T7891] bond0 (unregistering): Released all slaves [ 328.652395][ T7891] bond1 (unregistering): Released all slaves [ 328.665147][ T7891] bond2 (unregistering): (slave veth5): Releasing active interface [ 328.674198][ T7891] bond2 (unregistering): Released all slaves [ 328.683466][ T7891] bond3 (unregistering): (slave veth7): Releasing active interface [ 328.693149][ T7891] bond3 (unregistering): Released all slaves [ 328.703928][ T7891] bond4 (unregistering): Released all slaves [ 328.723537][ T7891] bond5 (unregistering): Released all slaves [ 328.742600][ T7891] bond6 (unregistering): Released all slaves [ 328.748454][T25417] loop5: detected capacity change from 0 to 1024 [ 328.763183][T24867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.778451][T25417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.817265][T25417] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 328.854898][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.865920][ T7891] tipc: Disabling bearer [ 328.870923][ T7891] tipc: Left network mode [ 328.872021][T24867] team0: Port device team_slave_0 added [ 328.890269][T24867] team0: Port device team_slave_1 added [ 328.944596][T24867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.951667][T24867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.977715][T24867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.010722][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.018299][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.030231][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.037928][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.049562][ T7891] veth1_macvtap: left promiscuous mode [ 329.055349][ T7891] veth0_macvtap: left promiscuous mode [ 329.060870][ T7891] veth1_vlan: left promiscuous mode [ 329.066709][ T7891] veth0_vlan: left promiscuous mode [ 329.078509][T25504] loop4: detected capacity change from 0 to 128 [ 329.185473][ T3968] smc: removing ib device syz! [ 329.212184][T24867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.219292][T24867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.245252][T24867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.282948][T24867] hsr_slave_0: entered promiscuous mode [ 329.288912][T25517] netlink: 'syz.5.7773': attribute type 4 has an invalid length. [ 329.298190][T24867] hsr_slave_1: entered promiscuous mode [ 329.308776][T24867] debugfs: 'hsr0' already exists in 'hsr' [ 329.314567][T24867] Cannot create hsr debugfs directory [ 329.321773][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7777'. [ 329.333453][T25517] netlink: 'syz.5.7773': attribute type 4 has an invalid length. [ 329.369904][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7777'. [ 329.517577][T24784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.556526][T24784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.572139][T24784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.618447][T24784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.690178][T24784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.700328][T25667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7789'. [ 329.703088][T24784] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.733058][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.740220][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.752951][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.760165][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.813084][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7791'. [ 329.822220][T25691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7791'. [ 329.832419][T25691] netlink: 'syz.4.7791': attribute type 6 has an invalid length. [ 329.866995][T24784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.898871][T24867] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.909667][T24867] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.918655][T24867] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.930047][T24867] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 329.989923][T24867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.006118][T24867] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.018144][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.025276][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.039973][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.047099][ T7878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.067466][T24784] veth0_vlan: entered promiscuous mode [ 330.084083][T24784] veth1_vlan: entered promiscuous mode [ 330.107453][T24784] veth0_macvtap: entered promiscuous mode [ 330.115768][T24784] veth1_macvtap: entered promiscuous mode [ 330.128419][T24784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.140740][T24784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.152402][ T7877] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.167761][ T7877] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.176926][ T7877] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.189613][ T7877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.203798][T24867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.390847][T24867] veth0_vlan: entered promiscuous mode [ 330.417067][T24867] veth1_vlan: entered promiscuous mode [ 330.439645][T24867] veth0_macvtap: entered promiscuous mode [ 330.447829][T24867] veth1_macvtap: entered promiscuous mode [ 330.465592][T24867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.491591][T24867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.546572][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.576927][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.603583][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.623641][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.707550][T25800] loop4: detected capacity change from 0 to 512 [ 330.737697][T25800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.810426][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.997425][T25856] loop8: detected capacity change from 0 to 1024 [ 331.025967][T25856] EXT4-fs: Ignoring removed nobh option [ 331.031634][T25856] EXT4-fs: Ignoring removed bh option [ 331.062133][T25863] __nla_validate_parse: 3 callbacks suppressed [ 331.062156][T25863] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7816'. [ 331.089558][T25856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.185172][T25856] loop8: detected capacity change from 1024 to 64 [ 331.202791][T25856] syz.8.7818: attempt to access beyond end of device [ 331.202791][T25856] loop8: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 331.216330][T25856] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 113) [ 331.227887][T25856] EXT4-fs (loop8): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -5) [ 331.240433][T25856] Buffer I/O error on device loop8, logical block 113 [ 331.273482][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.288588][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.316032][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.339093][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.376891][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.415093][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.439201][T25880] loop5: detected capacity change from 0 to 512 [ 331.455396][T25880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 331.466975][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.491599][T25880] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7824: invalid indirect mapped block 83886080 (level 1) [ 331.495527][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.512783][T25880] EXT4-fs (loop5): Remounting filesystem read-only [ 331.519814][T24867] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 331.537702][T25880] EXT4-fs (loop5): 1 orphan inode deleted [ 331.545666][T25880] EXT4-fs (loop5): 1 truncate cleaned up [ 331.592161][T25880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.646189][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7836'. [ 331.676436][T25894] ref_ctr increment failed for inode: 0x1311 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881041d4ac0 [ 331.694437][T25892] uprobe: syz.4.7827:25892 failed to unregister, leaking uprobe [ 331.706570][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7829'. [ 331.716302][T25897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7829'. [ 331.725797][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7829'. [ 331.735180][T25897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7829'. [ 331.736179][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.744150][T25897] netlink: 'syz.0.7829': attribute type 6 has an invalid length. [ 331.780456][T25901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7830'. [ 331.876311][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 331.876330][ T29] audit: type=1326 audit(331.860:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25918 comm="syz.5.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 331.931056][ T29] audit: type=1326 audit(331.890:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25918 comm="syz.5.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 331.954203][ T29] audit: type=1326 audit(331.890:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25918 comm="syz.5.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 331.977361][ T29] audit: type=1326 audit(331.890:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25918 comm="syz.5.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.037839][T25930] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7843'. [ 332.049433][T25926] loop5: detected capacity change from 0 to 512 [ 332.075925][T25926] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.105942][T25926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.133136][T25938] loop6: detected capacity change from 0 to 512 [ 332.158201][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.177542][T25938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.266503][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7849'. [ 332.279052][T24784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.335047][T25960] netlink: 'syz.6.7846': attribute type 4 has an invalid length. [ 332.391466][T25960] netlink: 'syz.6.7846': attribute type 4 has an invalid length. [ 332.512299][T25973] loop6: detected capacity change from 0 to 512 [ 332.527253][T25973] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 332.551251][T25973] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7852: invalid indirect mapped block 83886080 (level 1) [ 332.585757][T25973] EXT4-fs (loop6): Remounting filesystem read-only [ 332.592585][T25973] EXT4-fs (loop6): 1 orphan inode deleted [ 332.598386][T25973] EXT4-fs (loop6): 1 truncate cleaned up [ 332.613315][T25973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.666851][ T36] hid_parser_main: 17 callbacks suppressed [ 332.666874][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 332.680296][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.688895][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.696380][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.703797][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.711292][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.718795][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.727377][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.734859][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.742339][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 332.763417][T24784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.774192][ T36] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 332.792659][T25988] loop6: detected capacity change from 0 to 512 [ 332.804914][T25988] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.817025][ T29] audit: type=1326 audit(332.801:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.5.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.840313][ T29] audit: type=1326 audit(332.801:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.5.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.863502][ T29] audit: type=1326 audit(332.801:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.5.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.886647][ T29] audit: type=1326 audit(332.801:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.5.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.909738][ T29] audit: type=1326 audit(332.801:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.5.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.945342][ T29] audit: type=1326 audit(332.911:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.5.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88c4cebe9 code=0x7ffc0000 [ 332.951093][T25988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.017408][T25999] loop4: detected capacity change from 0 to 512 [ 333.024329][T25999] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.045685][T25999] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 333.060350][T24784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.070403][T25999] EXT4-fs (loop4): 1 truncate cleaned up [ 333.076563][T25999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.178031][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7865'. [ 333.356134][T24867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.379802][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.395643][T25864] kmmpd-loop8: attempt to access beyond end of device [ 333.395643][T25864] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 333.409415][T25864] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 333.583952][T26063] tipc: New replicast peer: 100.1.1.1 [ 333.589499][T26063] tipc: Enabled bearer , priority 10 [ 333.759240][T26109] loop5: detected capacity change from 0 to 1024 [ 333.781667][T26109] EXT4-fs: Ignoring removed orlov option [ 333.794717][T26054] chnl_net:caif_netlink_parms(): no params data found [ 333.803722][T26109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.022642][T26054] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.030540][T26054] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.039696][T26054] bridge_slave_0: entered allmulticast mode [ 334.047174][T26054] bridge_slave_0: entered promiscuous mode [ 334.056887][T26054] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.064000][T26054] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.071541][T26054] bridge_slave_1: entered allmulticast mode [ 334.078679][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.080289][T26054] bridge_slave_1: entered promiscuous mode [ 334.128358][T26263] loop4: detected capacity change from 0 to 2048 [ 334.147166][T26054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.167609][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.168380][T26263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.179231][T26054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.247716][T12645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 334.264055][T12645] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 334.283071][T26054] team0: Port device team_slave_0 added [ 334.295528][T26054] team0: Port device team_slave_1 added [ 334.314273][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.325310][T26054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.332345][T26054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.358576][T26054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.370175][T26054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.377198][T26054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.403363][T26054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.416729][T26344] tipc: Enabling of bearer rejected, already enabled [ 334.446480][T26054] hsr_slave_0: entered promiscuous mode [ 334.452569][T26054] hsr_slave_1: entered promiscuous mode [ 334.458501][T26054] debugfs: 'hsr0' already exists in 'hsr' [ 334.464316][T26054] Cannot create hsr debugfs directory [ 334.741280][T26054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.750946][T26054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.759603][T26054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.768912][T26054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.785048][T26054] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.792190][T26054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.799610][T26054] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.806739][T26054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.828038][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.852554][T26054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.863576][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.872187][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.888658][T26054] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.898584][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.912174][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.919284][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.930814][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.937919][ T7897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.949185][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.026778][ T31] bridge_slave_1: left allmulticast mode [ 335.032461][ T31] bridge_slave_1: left promiscuous mode [ 335.038218][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.046634][ T31] bridge_slave_0: left allmulticast mode [ 335.052471][ T31] bridge_slave_0: left promiscuous mode [ 335.058179][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.136702][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.146780][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.156567][ T31] bond0 (unregistering): Released all slaves [ 335.168206][T26054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.209454][ T31] hsr_slave_0: left promiscuous mode [ 335.216553][ T31] hsr_slave_1: left promiscuous mode [ 335.222267][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.229799][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.237416][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.244949][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.256037][ T31] veth1_macvtap: left promiscuous mode [ 335.261675][ T31] veth0_macvtap: left promiscuous mode [ 335.267389][ T31] veth1_vlan: left promiscuous mode [ 335.272632][ T31] veth0_vlan: left promiscuous mode [ 335.342233][ T31] team0 (unregistering): Port device team_slave_1 removed [ 335.352271][ T31] team0 (unregistering): Port device team_slave_0 removed [ 335.412062][T26054] veth0_vlan: entered promiscuous mode [ 335.419838][T26054] veth1_vlan: entered promiscuous mode [ 335.436572][T26054] veth0_macvtap: entered promiscuous mode [ 335.443801][T26054] veth1_macvtap: entered promiscuous mode [ 335.455525][T26054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.467080][T26054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.477904][ T7897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.488369][ T7897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.499093][ T7897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.507895][ T7897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.931877][T26542] loop6: detected capacity change from 0 to 512 [ 335.940480][T26542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 335.948792][T26542] System zones: 1-12 [ 335.952961][T26542] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.7919: corrupted in-inode xattr: e_value size too large [ 335.969240][T26542] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7919: couldn't read orphan inode 15 (err -117) [ 335.981914][T26542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.116509][T24784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.182634][T26569] __nla_validate_parse: 10 callbacks suppressed [ 336.182711][T26569] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.7930'. [ 336.834262][T26598] loop5: detected capacity change from 0 to 2048 [ 336.859117][T26598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.924000][T26609] loop6: detected capacity change from 0 to 512 [ 336.945894][T17145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 336.975472][T26609] journal_path: Non-blockdev passed as './bus' [ 336.981715][T26609] EXT4-fs: error: could not find journal device path [ 336.993824][T17145] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 337.019128][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.071783][T26620] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7944'. [ 337.120977][T26624] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.7946'. [ 337.186178][T26626] loop6: detected capacity change from 0 to 1024 [ 337.193645][T26626] EXT4-fs: Ignoring removed orlov option [ 337.202564][T26626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.256532][T26638] bridge0: entered promiscuous mode [ 337.268786][T26638] bridge0: port 3(macvtap1) entered blocking state [ 337.275456][T26638] bridge0: port 3(macvtap1) entered disabled state [ 337.282716][T26638] macvtap1: entered allmulticast mode [ 337.289025][T26638] bridge0: entered allmulticast mode [ 337.295088][T26638] macvtap1: left allmulticast mode [ 337.300232][T26638] bridge0: left allmulticast mode [ 337.314950][T26638] bridge0: left promiscuous mode [ 337.611434][T26662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7960'. [ 337.621295][T26662] netem: change failed [ 337.655937][T24784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.678118][T26668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7964'. [ 337.795499][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7967'. [ 337.819269][T26684] hsr_slave_0 (unregistering): left promiscuous mode [ 338.007264][T26701] loop4: detected capacity change from 0 to 512 [ 338.026899][T26701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.071839][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.098801][T26706] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 338.135664][T26709] loop5: detected capacity change from 0 to 512 [ 338.149246][T26709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 338.158429][T26709] System zones: 1-12 [ 338.167264][T26709] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.7974: corrupted in-inode xattr: e_value size too large [ 338.212084][T26720] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7976'. [ 338.349141][T26730] SELinux: failed to load policy [ 338.372334][T26709] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7974: couldn't read orphan inode 15 (err -117) [ 338.390371][T26709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.549221][T17145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.602538][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 338.602565][ T29] audit: type=1326 audit(338.581:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.787232][ T29] audit: type=1326 audit(338.591:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.810488][ T29] audit: type=1326 audit(338.591:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.834274][ T29] audit: type=1326 audit(338.591:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.857369][ T29] audit: type=1326 audit(338.591:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.881476][ T29] audit: type=1326 audit(338.591:10800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.905276][ T29] audit: type=1326 audit(338.591:10801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.928357][ T29] audit: type=1326 audit(338.591:10802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.952216][ T29] audit: type=1326 audit(338.591:10803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 338.975981][ T29] audit: type=1326 audit(338.591:10804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26773 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb634a1ebe9 code=0x7ffc0000 [ 339.069065][T26788] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 339.285880][T26823] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 339.296474][T26820] loop5: detected capacity change from 0 to 1024 [ 339.306301][T26820] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 339.334429][T26820] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 339.345716][T26820] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 339.357046][T26820] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 339.387425][T26820] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: inode #17: comm syz.5.8007: iget: bad i_size value: 4398046511204 [ 339.408362][T26820] EXT4-fs (loop5): no journal found [ 339.423331][T26837] loop2: detected capacity change from 0 to 512 [ 339.447415][T26837] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8013: Failed to acquire dquot type 1 [ 339.482261][T26837] EXT4-fs (loop2): 1 truncate cleaned up [ 339.495252][T26846] loop4: detected capacity change from 0 to 512 [ 339.512279][T26837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.535547][T26846] journal_path: Non-blockdev passed as './bus' [ 339.541786][T26846] EXT4-fs: error: could not find journal device path [ 339.604390][T26054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.713416][T26874] loop2: detected capacity change from 0 to 1024 [ 339.731588][T26874] EXT4-fs: Ignoring removed orlov option [ 339.748811][T26874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.079078][T26054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.114880][T26896] syzkaller1: entered promiscuous mode [ 340.120497][T26896] syzkaller1: entered allmulticast mode [ 341.163654][T26994] loop2: detected capacity change from 0 to 512 [ 341.212458][T26994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 341.252276][T26994] System zones: 1-12 [ 341.274474][T26994] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.8053: corrupted in-inode xattr: e_value size too large [ 341.338072][T26994] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8053: couldn't read orphan inode 15 (err -117) [ 341.405355][T26994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.741124][T26054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.781110][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8069'. [ 341.809550][T27050] netlink: 'syz.4.8073': attribute type 2 has an invalid length. [ 341.903013][T27055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8075'. [ 342.114002][T27080] serio: Serial port ptm0 [ 342.250211][T27095] loop5: detected capacity change from 0 to 2368 [ 342.265530][T27095] iso9660: Bad value for 'check' [ 342.291707][T27104] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27104 comm=syz.4.8091 [ 342.307465][T27107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8092'. [ 342.474311][T27135] serio: Serial port ptm0 [ 342.581757][T27144] loop6: detected capacity change from 0 to 128 [ 342.591714][T27144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 342.600884][T27144] System zones: 1-3, 19-19, 35-36 [ 342.608146][T27144] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 342.660637][T27144] infiniband syz1: set active [ 342.666156][T27144] infiniband syz1: added syz_tun [ 342.678036][T27144] RDS/IB: syz1: added [ 342.682253][T27144] smc: adding ib device syz1 with port count 1 [ 342.690733][T27144] smc: ib device syz1 port 1 has pnetid [ 342.803117][T27158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8104'. [ 343.040631][T24784] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.242941][T27255] 9pnet: p9_errstr2errno: server reported unknown error [ 343.274916][T27175] chnl_net:caif_netlink_parms(): no params data found [ 343.347776][T27175] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.355628][T27175] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.380854][T27175] bridge_slave_0: entered allmulticast mode [ 343.391979][T27175] bridge_slave_0: entered promiscuous mode [ 343.408463][T27175] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.416296][T27175] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.429844][T27175] bridge_slave_1: entered allmulticast mode [ 343.443726][T27175] bridge_slave_1: entered promiscuous mode [ 343.477077][T27175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.495448][T27175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.526254][T27175] team0: Port device team_slave_0 added [ 343.533299][T27175] team0: Port device team_slave_1 added [ 343.566687][T27175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.573768][T27175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.600078][T27175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.614440][T27175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.621498][T27175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.647570][T27175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.696405][T27175] hsr_slave_0: entered promiscuous mode [ 343.702671][T27175] hsr_slave_1: entered promiscuous mode [ 343.709223][T27175] debugfs: 'hsr0' already exists in 'hsr' [ 343.715027][T27175] Cannot create hsr debugfs directory [ 343.801107][T27555] netlink: 'syz.4.8131': attribute type 1 has an invalid length. [ 343.821891][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 343.821970][ T29] audit: type=1326 audit(343.801:10913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 343.827213][T27555] 8021q: adding VLAN 0 to HW filter on device bond9 [ 343.830844][ T29] audit: type=1326 audit(343.811:10914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 343.882120][T27597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8131'. [ 343.887417][ T29] audit: type=1326 audit(343.851:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc97364ec23 code=0x7ffc0000 [ 343.914569][ T29] audit: type=1326 audit(343.861:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc97364d69f code=0x7ffc0000 [ 343.937792][ T29] audit: type=1326 audit(343.861:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc97364ec77 code=0x7ffc0000 [ 343.961646][ T29] audit: type=1326 audit(343.861:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc97364d550 code=0x7ffc0000 [ 343.985390][ T29] audit: type=1326 audit(343.861:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc97364d84a code=0x7ffc0000 [ 344.008262][ T29] audit: type=1326 audit(343.871:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 344.031826][ T29] audit: type=1326 audit(343.871:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 344.055722][ T29] audit: type=1326 audit(343.871:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.0.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc97364ebe9 code=0x7ffc0000 [ 344.082590][T27597] bond9 (unregistering): Released all slaves [ 344.116824][T27640] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8133'. [ 344.130196][T27640] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 344.138479][T27640] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 344.179808][T27645] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8134'. [ 344.189052][T27648] serio: Serial port ptm0 [ 344.388788][T27175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.413117][T27175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.442802][T27175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.464231][T27175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.471470][T27709] serio: Serial port ptm0 [ 344.513547][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.561943][ T3968] smc: removing ib device syz1 [ 344.574359][ T36] syz1: Port: 1 Link DOWN [ 344.580851][T27175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.607614][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.643701][T27175] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.655736][T27737] rdma_rxe: rxe_newlink: failed to add syz_tun [ 344.670079][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.677208][ T7897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.715102][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.739280][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.751289][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.820305][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.847068][T27175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.857709][T27175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.993229][ T31] bridge_slave_1: left allmulticast mode [ 344.999022][ T31] bridge_slave_1: left promiscuous mode [ 345.004963][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.013088][ T31] bridge_slave_0: left allmulticast mode [ 345.018934][ T31] bridge_slave_0: left promiscuous mode [ 345.025289][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.157402][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.170074][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.180392][ T31] bond0 (unregistering): Released all slaves [ 345.222622][ T31] hsr_slave_0: left promiscuous mode [ 345.229085][ T31] hsr_slave_1: left promiscuous mode [ 345.240755][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.248397][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.257651][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.265309][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.278384][ T31] veth1_macvtap: left promiscuous mode [ 345.284054][ T31] veth0_macvtap: left promiscuous mode [ 345.289611][ T31] veth1_vlan: left promiscuous mode [ 345.296428][ T31] veth0_vlan: left promiscuous mode [ 345.387453][ T31] team0 (unregistering): Port device team_slave_1 removed [ 345.395949][T27874] serio: Serial port ptm0 [ 345.400522][ T31] team0 (unregistering): Port device team_slave_0 removed [ 345.434635][T27730] chnl_net:caif_netlink_parms(): no params data found [ 345.450430][T27175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.531679][T27730] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.539513][T27730] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.551531][T27730] bridge_slave_0: entered allmulticast mode [ 345.558894][T27730] bridge_slave_0: entered promiscuous mode [ 345.565920][T27730] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.573077][T27730] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.580480][T27730] bridge_slave_1: entered allmulticast mode [ 345.587257][T27730] bridge_slave_1: entered promiscuous mode [ 345.625181][T27730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.640518][T27730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.672122][T27730] team0: Port device team_slave_0 added [ 345.679231][T27730] team0: Port device team_slave_1 added [ 345.706070][T27730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.713070][T27730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.742655][T27730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.762910][T28041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28041 comm=syz.0.8171 [ 345.785575][T27730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.792584][T27730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.818755][T27730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.847692][T27175] veth0_vlan: entered promiscuous mode [ 345.886730][T27730] hsr_slave_0: entered promiscuous mode [ 345.892937][T27730] hsr_slave_1: entered promiscuous mode [ 345.901798][T27730] debugfs: 'hsr0' already exists in 'hsr' [ 345.907598][T27730] Cannot create hsr debugfs directory [ 345.914875][T27175] veth1_vlan: entered promiscuous mode [ 345.926853][T28121] loop4: detected capacity change from 0 to 128 [ 345.939256][T28121] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.953088][ T31] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.973481][T12645] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.988792][T27865] chnl_net:caif_netlink_parms(): no params data found [ 346.016500][ T31] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.053553][T27175] veth0_macvtap: entered promiscuous mode [ 346.074820][T27175] veth1_macvtap: entered promiscuous mode [ 346.098528][ T31] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.126840][T27865] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.134787][T27865] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.142281][T27865] bridge_slave_0: entered allmulticast mode [ 346.151276][T27865] bridge_slave_0: entered promiscuous mode [ 346.178574][ T31] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.191410][T27865] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.198831][T27865] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.206242][T27865] bridge_slave_1: entered allmulticast mode [ 346.212896][T27865] bridge_slave_1: entered promiscuous mode [ 346.257654][T27175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.270198][T27865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.294992][T27175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.312506][T27865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.335595][ T3968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.372579][ T3968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.445797][ T31] $Hÿ (unregistering): Released all slaves [ 346.455192][ T31] bond1 (unregistering): Released all slaves [ 346.472707][ T31] bond2 (unregistering): Released all slaves [ 346.485560][ T31] bond3 (unregistering): Released all slaves [ 346.495902][ T31] bond4 (unregistering): (slave veth7): Releasing active interface [ 346.507042][ T31] bond4 (unregistering): Released all slaves [ 346.516169][ T31] bond5 (unregistering): Released all slaves [ 346.527696][ T31] bond6 (unregistering): Released all slaves [ 346.540214][ T31] bond7 (unregistering): Released all slaves [ 346.561092][ T3968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.576253][T27865] team0: Port device team_slave_0 added [ 346.583185][T27865] team0: Port device team_slave_1 added [ 346.599072][ T3968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.636136][ T31] tipc: Disabling bearer [ 346.641172][ T31] tipc: Disabling bearer [ 346.647404][ T31] tipc: Left network mode [ 346.668401][T27865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.675538][T27865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.701971][T27865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.736273][ T31] veth1_macvtap: left promiscuous mode [ 346.741911][ T31] veth0_macvtap: left allmulticast mode [ 346.747592][ T31] veth0_macvtap: left promiscuous mode [ 346.755155][ T31] veth1_vlan: left promiscuous mode [ 346.760509][ T31] veth0_vlan: left promiscuous mode [ 346.958295][T27865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.965388][T27865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.991354][T27865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.020648][T27730] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 347.030370][T27730] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 347.062839][T27730] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 347.072405][T27730] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 347.085142][T27865] hsr_slave_0: entered promiscuous mode [ 347.091396][T27865] hsr_slave_1: entered promiscuous mode [ 347.104055][T27865] debugfs: 'hsr0' already exists in 'hsr' [ 347.109817][T27865] Cannot create hsr debugfs directory [ 347.263884][T27730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.304818][T27730] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.319108][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.326236][ T7897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.352169][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.359417][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.422762][T28518] wg2: entered promiscuous mode [ 347.439186][T28518] wg2: entered allmulticast mode [ 347.473404][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.570069][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.594504][T28549] loop4: detected capacity change from 0 to 512 [ 347.600304][T28544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8195'. [ 347.610374][T27865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.631802][T27865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.641660][T28549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.657402][T27865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.679563][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.692986][T27865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.709400][T12645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.727502][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.767006][T27730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.841362][ T31] bridge_slave_1: left allmulticast mode [ 347.847261][ T31] bridge_slave_1: left promiscuous mode [ 347.853257][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.874468][ T31] bridge_slave_0: left allmulticast mode [ 347.880267][ T31] bridge_slave_0: left promiscuous mode [ 347.886095][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.909507][T28604] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8207'. [ 347.996602][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.007031][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.017383][ T31] bond0 (unregistering): Released all slaves [ 348.047535][T27865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.068355][T27865] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.092940][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.100086][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.114881][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.122091][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.125392][T28626] loop1: detected capacity change from 0 to 512 [ 348.155757][ T31] hsr_slave_0: left promiscuous mode [ 348.161490][ T31] hsr_slave_1: left promiscuous mode [ 348.168571][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.176093][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.189564][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.197773][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.218757][ T31] veth1_macvtap: left promiscuous mode [ 348.225373][ T31] veth0_macvtap: left promiscuous mode [ 348.231906][ T31] veth1_vlan: left promiscuous mode [ 348.237769][ T31] veth0_vlan: left promiscuous mode [ 348.345255][ T31] team0 (unregistering): Port device team_slave_1 removed [ 348.355596][ T31] team0 (unregistering): Port device team_slave_0 removed [ 348.410994][T28639] netlink: 'syz.1.8211': attribute type 10 has an invalid length. [ 348.418915][T28639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8211'. [ 348.460145][T27730] veth0_vlan: entered promiscuous mode [ 348.492995][T27730] veth1_vlan: entered promiscuous mode [ 348.537879][T27730] veth0_macvtap: entered promiscuous mode [ 348.556623][T27865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.578131][T27730] veth1_macvtap: entered promiscuous mode [ 348.600742][T27730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.616829][T27730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.630497][ T7878] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.641807][ T7878] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.650785][ T7878] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.662428][T28668] loop4: detected capacity change from 0 to 2048 [ 348.672436][ T7878] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.723752][T28668] loop4: p2 p3 p7 [ 348.747557][T28688] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8220'. [ 348.757452][T27865] veth0_vlan: entered promiscuous mode [ 348.766335][T27865] veth1_vlan: entered promiscuous mode [ 348.796741][T28697] IPv6: Can't replace route, no match found [ 348.807558][T27865] veth0_macvtap: entered promiscuous mode [ 348.827922][T27865] veth1_macvtap: entered promiscuous mode [ 348.872520][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 348.872601][ T29] audit: type=1400 audit(348.851:10961): avc: denied { cmd } for pid=28710 comm="syz.0.8225" path="socket:[88888]" dev="sockfs" ino=88888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 348.875446][T27865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.884263][ T29] audit: type=1400 audit(348.861:10962): avc: denied { map_create } for pid=28708 comm="syz.1.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.927810][ T29] audit: type=1400 audit(348.861:10963): avc: denied { map_read map_write } for pid=28708 comm="syz.1.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.947351][ T29] audit: type=1400 audit(348.861:10964): avc: denied { read write } for pid=12645 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.971358][ T29] audit: type=1400 audit(348.861:10965): avc: denied { open } for pid=12645 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.995278][ T29] audit: type=1400 audit(348.861:10966): avc: denied { ioctl } for pid=12645 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.005486][T27865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.044419][ T29] audit: type=1400 audit(348.891:10967): avc: denied { prog_load } for pid=28708 comm="syz.1.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.063364][ T29] audit: type=1400 audit(348.891:10968): avc: denied { bpf } for pid=28708 comm="syz.1.8224" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.066497][ T7897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.083638][ T29] audit: type=1400 audit(348.891:10969): avc: denied { perfmon } for pid=28708 comm="syz.1.8224" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.083670][ T29] audit: type=1400 audit(348.891:10970): avc: denied { prog_run } for pid=28708 comm="syz.1.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.151117][ T7877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.165004][T28713] bridge: RTM_NEWNEIGH with invalid ether address [ 349.188600][ T7877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.209492][ T7877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.222478][T28716] loop4: detected capacity change from 0 to 256 [ 349.258525][T28724] loop3: detected capacity change from 0 to 512 [ 349.270561][T28724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.294902][T28724] EXT4-fs (loop3): 1 truncate cleaned up [ 349.446099][T28754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8240'. [ 349.465633][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8242'. [ 349.552717][T28762] loop9: detected capacity change from 0 to 2048 [ 349.554271][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8247'. [ 349.622718][T28762] loop9: p2 p3 p7 [ 349.736436][T28795] loop3: detected capacity change from 0 to 1024 [ 349.759970][T28795] EXT4-fs: Ignoring removed orlov option [ 349.765736][T28795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.003316][T28829] bridge: RTM_NEWNEIGH with invalid ether address [ 351.337505][T28929] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8301'. [ 351.472431][T28971] loop3: detected capacity change from 0 to 256 [ 351.819517][T29005] netlink: 'syz.3.8318': attribute type 10 has an invalid length. [ 351.827500][T29005] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8318'. [ 352.219015][T29043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8326'. [ 352.252951][T20996] hid_parser_main: 24 callbacks suppressed [ 352.252972][T20996] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 352.279919][T20996] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.696584][T29063] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8333' sets config #0 [ 352.864449][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.871914][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.883387][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.890866][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.898545][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.906132][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.913712][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.921244][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.928752][ T4617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 352.944097][ T4617] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 353.007280][T29085] netlink: 'syz.0.8340': attribute type 30 has an invalid length. [ 353.079651][T29098] __nla_validate_parse: 1 callbacks suppressed [ 353.079669][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8344'. [ 353.118003][T29100] loop9: detected capacity change from 0 to 128 [ 353.132448][T29100] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.157558][T29100] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.201077][ T7877] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.234397][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8360'. [ 353.290760][T29123] loop9: detected capacity change from 0 to 256 [ 353.326060][T29132] IPVS: stopping master sync thread 29135 ... [ 353.332501][T29135] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 353.476445][T29154] IPv4: Oversized IP packet from 127.202.26.0 [ 354.087994][T29227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29227 comm=syz.9.8372 [ 354.206267][ T29] kauditd_printk_skb: 941 callbacks suppressed [ 354.206284][ T29] audit: type=1400 audit(354.192:11912): avc: denied { bind } for pid=29236 comm="syz.4.8379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 354.306350][T29245] loop9: detected capacity change from 0 to 512 [ 354.367790][T29245] EXT4-fs mount: 6 callbacks suppressed [ 354.367810][T29245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.453885][ T29] audit: type=1400 audit(354.432:11913): avc: denied { mount } for pid=29244 comm="syz.9.8384" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 354.485379][ T29] audit: type=1400 audit(354.442:11914): avc: denied { add_name } for pid=29244 comm="syz.9.8384" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.507389][ T29] audit: type=1400 audit(354.442:11915): avc: denied { create } for pid=29244 comm="syz.9.8384" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 354.528643][ T29] audit: type=1400 audit(354.442:11916): avc: denied { read append open } for pid=29244 comm="syz.9.8384" path="/31/bus/cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 354.552963][ T29] audit: type=1400 audit(354.442:11917): avc: denied { write } for pid=29244 comm="syz.9.8384" name="cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 354.599653][ T29] audit: type=1400 audit(354.572:11918): avc: denied { ioctl } for pid=29244 comm="syz.9.8384" path="/31/bus/cgroup.controllers" dev="loop9" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 354.639704][T27730] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.658888][ T29] audit: type=1400 audit(354.642:11919): avc: denied { read write } for pid=29264 comm="syz.9.8386" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 354.681896][ T29] audit: type=1400 audit(354.642:11920): avc: denied { open } for pid=29264 comm="syz.9.8386" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 354.850242][ T29] audit: type=1400 audit(354.832:11921): avc: denied { connect } for pid=29275 comm="syz.9.8391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.926346][T29272] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8388' sets config #0 [ 354.944005][T29278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29278 comm=syz.9.8392 [ 354.956637][T29278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29278 comm=syz.9.8392 [ 355.093175][T29286] loop9: detected capacity change from 0 to 512 [ 355.102703][T29285] IPv4: Oversized IP packet from 127.202.26.0 [ 355.212759][T29298] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8399'. [ 356.035128][T29409] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8435'. [ 356.217756][T29427] loop3: detected capacity change from 0 to 512 [ 356.253975][T29427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.398694][T27865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.499012][T29440] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8446' sets config #0 [ 357.072881][T29515] loop9: detected capacity change from 0 to 512 [ 357.080728][T29515] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 357.098479][T29515] EXT4-fs (loop9): 1 truncate cleaned up [ 357.113520][T29515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.147045][T27730] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.162216][T29524] vlan2: entered allmulticast mode [ 357.206173][T29536] syzkaller0: entered promiscuous mode [ 357.211755][T29536] syzkaller0: entered allmulticast mode [ 357.219036][ T7897] syzkaller0: tun_net_xmit 48 [ 357.244767][T29536] syzkaller0: tun_net_xmit 1280 [ 357.249786][T29536] syzkaller0: create flow: hash 1664215539 index 1 [ 357.267950][T29535] syzkaller0: delete flow: hash 1664215539 index 1 [ 357.997253][T29579] netlink: 'syz.0.8493': attribute type 1 has an invalid length. [ 358.021979][T29579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.032467][T29579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8493'. [ 358.046040][T29579] bond0 (unregistering): Released all slaves [ 358.136298][T29648] syzkaller0: entered promiscuous mode [ 358.136323][T29648] syzkaller0: entered allmulticast mode [ 358.142636][ T3968] syzkaller0: tun_net_xmit 48 [ 358.170511][T29648] syzkaller0: tun_net_xmit 1280 [ 358.170544][T29648] syzkaller0: create flow: hash 1664215539 index 1 [ 358.180596][T29647] syzkaller0: delete flow: hash 1664215539 index 1 [ 358.448001][T29675] vlan0: entered allmulticast mode [ 358.611075][T29683] loop3: detected capacity change from 0 to 2048 [ 358.645465][T29683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.857374][T27865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.914989][T29706] loop9: detected capacity change from 0 to 1756 [ 359.080781][T29768] loop3: detected capacity change from 0 to 2048 [ 359.094132][T29771] vlan2: entered allmulticast mode [ 359.112750][T29768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.158504][T29785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29785 comm=syz.1.8519 [ 359.217985][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 359.218003][ T29] audit: type=1326 audit(359.202:12123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29767 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cb26ebe9 code=0x7ffc0000 [ 359.249728][ T29] audit: type=1326 audit(359.232:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29767 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cb26ebe9 code=0x7ffc0000 [ 359.378982][T27865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.432617][T29804] loop3: detected capacity change from 0 to 1756 [ 359.546273][ T29] audit: type=1400 audit(359.532:12125): avc: denied { bind } for pid=29808 comm="syz.3.8527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.565454][ T29] audit: type=1400 audit(359.532:12126): avc: denied { name_bind } for pid=29808 comm="syz.3.8527" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 359.586130][ T29] audit: type=1400 audit(359.532:12127): avc: denied { node_bind } for pid=29808 comm="syz.3.8527" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 359.665177][ T29] audit: type=1400 audit(359.602:12128): avc: denied { setopt } for pid=29808 comm="syz.3.8527" laddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.716197][ T29] audit: type=1400 audit(359.702:12129): avc: denied { write } for pid=29815 comm="syz.9.8530" name="tcp6" dev="proc" ino=4026534203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 359.765131][T29818] syzkaller0: entered promiscuous mode [ 359.770662][T29818] syzkaller0: entered allmulticast mode [ 359.794097][ T7877] syzkaller0: tun_net_xmit 48 [ 359.834036][T29818] syzkaller0: tun_net_xmit 1280 [ 359.839086][T29818] syzkaller0: create flow: hash 1664215539 index 1 [ 359.878885][T29816] syzkaller0: delete flow: hash 1664215539 index 1 [ 360.150651][T29845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.266793][T29845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.321870][ T29] audit: type=1400 audit(360.302:12130): avc: denied { write } for pid=29850 comm="syz.4.8539" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.368014][T29845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.383762][ T29] audit: type=1400 audit(360.372:12131): avc: denied { connect } for pid=29852 comm="syz.9.8540" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.426621][T29840] ================================================================== [ 360.434874][T29840] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 360.443878][T29840] [ 360.446226][T29840] read to 0xffff888135ac3da0 of 4 bytes by task 29841 on cpu 0: [ 360.453891][T29840] selinux_inode_permission+0x334/0x740 [ 360.459492][T29840] security_inode_permission+0x6d/0xb0 [ 360.464990][T29840] inode_permission+0x106/0x310 [ 360.469970][T29840] link_path_walk+0x162/0x900 [ 360.474684][T29840] path_openat+0x1de/0x2170 [ 360.479210][T29840] do_filp_open+0x109/0x230 [ 360.483745][T29840] io_openat2+0x272/0x390 [ 360.488107][T29840] io_openat+0x1b/0x30 [ 360.492226][T29840] __io_issue_sqe+0xfe/0x2e0 [ 360.496849][T29840] io_issue_sqe+0x53/0x970 [ 360.501287][T29840] io_wq_submit_work+0x3f7/0x5f0 [ 360.506251][T29840] io_worker_handle_work+0x44e/0x9b0 [ 360.511560][T29840] io_wq_worker+0x22e/0x870 [ 360.516101][T29840] ret_from_fork+0xda/0x150 [ 360.520626][T29840] ret_from_fork_asm+0x1a/0x30 [ 360.525420][T29840] [ 360.527761][T29840] write to 0xffff888135ac3da0 of 4 bytes by task 29840 on cpu 1: [ 360.535495][T29840] selinux_inode_permission+0x3ac/0x740 [ 360.541076][T29840] security_inode_permission+0x6d/0xb0 [ 360.546583][T29840] inode_permission+0x106/0x310 [ 360.551479][T29840] link_path_walk+0x162/0x900 [ 360.556196][T29840] path_openat+0x1de/0x2170 [ 360.560769][T29840] do_filp_open+0x109/0x230 [ 360.565300][T29840] io_openat2+0x272/0x390 [ 360.569666][T29840] io_openat+0x1b/0x30 [ 360.573772][T29840] __io_issue_sqe+0xfe/0x2e0 [ 360.578480][T29840] io_issue_sqe+0x53/0x970 [ 360.583140][T29840] io_submit_sqes+0x664/0x1050 [ 360.587948][T29840] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 360.593527][T29840] __x64_sys_io_uring_enter+0x78/0x90 [ 360.598938][T29840] x64_sys_call+0x2de1/0x2ff0 [ 360.603651][T29840] do_syscall_64+0xd2/0x200 [ 360.608195][T29840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.614217][T29840] [ 360.616561][T29840] value changed: 0x00000000 -> 0x00000001 [ 360.622385][T29840] [ 360.624724][T29840] Reported by Kernel Concurrency Sanitizer on: [ 360.630896][T29840] CPU: 1 UID: 0 PID: 29840 Comm: syz.0.8535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.642301][T29840] Tainted: [W]=WARN [ 360.646162][T29840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.656241][T29840] ================================================================== [ 360.671465][ T29] audit: type=1400 audit(360.652:12132): avc: denied { mounton } for pid=29860 comm="syz.4.8542" path="/1088/file0" dev="tmpfs" ino=5701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 360.717410][T29845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.772085][ T3968] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.784252][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.796120][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.807786][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.044745][ T7891] bridge_slave_1: left allmulticast mode [ 362.050420][ T7891] bridge_slave_1: left promiscuous mode [ 362.056826][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.064647][ T7891] bridge_slave_0: left promiscuous mode [ 362.070320][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.134767][ T7891] team0: Port device bridge1 removed [ 362.245599][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.255210][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.264318][ T7891] bond0 (unregistering): Released all slaves [ 362.272653][ T7891] bond1 (unregistering): Released all slaves [ 362.316925][ T7891] hsr_slave_0: left promiscuous mode [ 362.322614][ T7891] hsr_slave_1: left promiscuous mode [ 362.328363][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.337046][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.372029][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 362.381903][ T7891] team0 (unregistering): Port device team_slave_0 removed