last executing test programs: 3m19.874987098s ago: executing program 32 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7e9f0133322bb5"], 0x7) 3m17.865797853s ago: executing program 33 (id=151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) 2m59.777567386s ago: executing program 34 (id=610): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 2m43.765212625s ago: executing program 35 (id=1077): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x150, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x0, 0x1}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2m33.501706018s ago: executing program 36 (id=1344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000200)='./file0\x00', 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m15.308381531s ago: executing program 7 (id=1902): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) syz_clone3(&(0x7f0000000940)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m15.272992331s ago: executing program 7 (id=1904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m15.235208271s ago: executing program 7 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m15.195677891s ago: executing program 7 (id=1911): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2m15.149225601s ago: executing program 7 (id=1913): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m14.89003685s ago: executing program 7 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 2m14.88026299s ago: executing program 37 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1m48.252617721s ago: executing program 9 (id=2832): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000240)=0x5, 0x4) 1m48.145560511s ago: executing program 9 (id=2840): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000280), 0x0) 1m48.144945271s ago: executing program 9 (id=2842): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") unlink(&(0x7f0000000180)='./file1\x00') 1m48.069130341s ago: executing program 9 (id=2847): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) 1m48.02494485s ago: executing program 9 (id=2849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m47.750005929s ago: executing program 9 (id=2856): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x0, 0x3bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 1m47.749610759s ago: executing program 38 (id=2856): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x0, 0x3bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 1m12.813210979s ago: executing program 8 (id=4047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000011c0)='sched_switch\x00', r3}, 0x18) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) lseek(r0, 0x0, 0x5) 1m12.330118898s ago: executing program 8 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 1m12.227927928s ago: executing program 8 (id=4057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000380)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m12.081007247s ago: executing program 8 (id=4061): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=r1, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYRESHEX=r3, @ANYRES64, @ANYRES16=r2, @ANYRES64], 0x0, 0x2c5, &(0x7f0000000840)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 1m11.884297477s ago: executing program 8 (id=4062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) close(r2) 1m11.502085786s ago: executing program 8 (id=4074): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1m11.501953596s ago: executing program 39 (id=4074): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 22.95728676s ago: executing program 2 (id=5722): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = io_uring_setup(0x67bb, &(0x7f00000004c0)={0x0, 0xfffffffe, 0x1, 0x2, 0xfffffffc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000540)=r1) io_uring_enter(r0, 0x0, 0x0, 0xb, 0x0, 0x0) 22.92263022s ago: executing program 2 (id=5724): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000500)=ANY=[@ANYBLOB="666d61736b3d30303030303030303000000000000005773030303030352c6e6f6e756d7461696c3d302c726f6469722c726f6469722c636865636b3d6e6f726d616c2c756e695f786c61743b42653d302c696f636861727365743d63703935302c756e695f786c6174653d3145756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d5b3d6c6f7765722c757466383d302c5e6f6469722c73686f72746e616d653d77696e6e74ca5b8b06816603e34f4a7b591759e7bd950f5f9a57db0e38c586d9"], 0x3, 0x37a, &(0x7f0000000140)="$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") rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22.89043555s ago: executing program 0 (id=5725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0x10000005}) tkill(r1, 0x7) 22.763568369s ago: executing program 0 (id=5726): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) sendmsg$inet(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) 22.608609989s ago: executing program 2 (id=5732): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 22.607944159s ago: executing program 0 (id=5733): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000c80)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}], [{@smackfsdef={'smackfsdef', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x28c0}}, {@subj_role={'subj_role', 0x3d, '!-^^{,-(*'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef}, {@subj_role={'subj_role', 0x3d, 'kfree\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0x80, 0x550, &(0x7f0000000700)="$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") r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 22.540220499s ago: executing program 2 (id=5737): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78e76ee677df701905b9aafab4afaaf75580f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "c136d60eae9ef30bea2a004000", [0x3, 0x20000000000]}) 22.522296269s ago: executing program 0 (id=5739): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 22.471377309s ago: executing program 0 (id=5742): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x10, 0x20000000, 0x20004, 0xc, 0x0, {0x1}}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 22.323161398s ago: executing program 2 (id=5745): unshare(0x28000400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 22.206058298s ago: executing program 0 (id=5747): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 22.178385048s ago: executing program 40 (id=5747): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 22.040232798s ago: executing program 2 (id=5750): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x80000000000000}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYBLOB='N'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 22.009438837s ago: executing program 41 (id=5750): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x80000000000000}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYBLOB='N'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.983986825s ago: executing program 5 (id=6323): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 1.905662275s ago: executing program 5 (id=6327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x71, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 1.846665975s ago: executing program 5 (id=6331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$rds(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.413315774s ago: executing program 6 (id=6341): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x81000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 1.338234024s ago: executing program 5 (id=6344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 1.319388144s ago: executing program 3 (id=6345): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendto$inet(r1, &(0x7f0000000400)="a7", 0x1, 0x20000094, 0x0, 0x0) 1.253780923s ago: executing program 3 (id=6348): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x51) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 1.253264464s ago: executing program 5 (id=6349): perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.177546863s ago: executing program 1 (id=6350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.137583943s ago: executing program 1 (id=6351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='kfree_skb\x00', r1, 0x0, 0x800}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1.077963673s ago: executing program 3 (id=6352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30}}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.076528313s ago: executing program 5 (id=6353): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.043839523s ago: executing program 1 (id=6354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x6, 0x100000000, 0x80003, 0xfffffffffffffffe}) 1.043596183s ago: executing program 3 (id=6356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.014617613s ago: executing program 3 (id=6357): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 971.410343ms ago: executing program 1 (id=6358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 959.627183ms ago: executing program 3 (id=6359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x4, 0x2bcc8a99, 0x0}) 936.265563ms ago: executing program 1 (id=6360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x600010c) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 780.185192ms ago: executing program 1 (id=6362): syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) syz_usbip_server_init(0x6) 779.627122ms ago: executing program 6 (id=6363): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 394.664482ms ago: executing program 6 (id=6364): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000000f80)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 330.362301ms ago: executing program 4 (id=6366): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1}}, 0x10, 0x0}, 0x0) 241.962941ms ago: executing program 4 (id=6367): socket$inet6(0xa, 0x3, 0x4) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0xbbb9, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 197.055121ms ago: executing program 4 (id=6368): r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0xdd}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1e, 0x4007, @fd, 0x328, 0x4c, 0x3, 0x8}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0), 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x25, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 148.922151ms ago: executing program 4 (id=6369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 122.560741ms ago: executing program 6 (id=6370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@cgroup=r2, 0xffffffffffffffff, 0x36, 0x2009, 0xffffffffffffffff, @value}, 0x20) 34.83226ms ago: executing program 4 (id=6371): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 34.40615ms ago: executing program 6 (id=6372): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 27.4499ms ago: executing program 4 (id=6373): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00'}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=6374): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x20000000, 0x2}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 185.083533][T16208] syz.3.4830: attempt to access beyond end of device [ 185.083533][T16208] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 185.101022][T16153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.110449][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4832'. [ 185.262547][T16233] 9pnet_fd: Insufficient options for proto=fd [ 185.305096][T10282] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.356899][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4847'. [ 185.788488][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4850'. [ 185.983784][T16274] hub 5-0:1.0: USB hub found [ 186.010329][T16274] hub 5-0:1.0: 8 ports detected [ 186.108471][T16284] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4866'. [ 186.418231][T10306] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.422447][T16282] Set syz1 is full, maxelem 65536 reached [ 187.195293][T16379] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4910'. [ 187.214068][T16381] loop1: detected capacity change from 0 to 128 [ 187.222393][T16381] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.237808][T16381] ext4 filesystem being mounted at /394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.296073][T11593] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.370396][T16388] bpf_get_probe_write_proto: 8 callbacks suppressed [ 187.370492][T16388] syz.1.4914[16388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.380309][T16388] syz.1.4914[16388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.392881][T16388] syz.1.4914[16388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.422741][T16390] loop3: detected capacity change from 0 to 2048 [ 187.462593][T16400] rdma_op ffff88811dacf980 conn xmit_rdma 0000000000000000 [ 187.465625][T16390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.492834][T16390] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.551431][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.559398][T16411] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.573869][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4925'. [ 187.601465][T16417] syz.6.4927[16417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.601558][T16417] syz.6.4927[16417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.602785][T16415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 187.614429][T16417] syz.6.4927[16417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.635505][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.660602][T16411] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.699409][T16411] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.840959][T16411] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.902978][T16411] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.915405][T16443] netlink: 'syz.3.4937': attribute type 5 has an invalid length. [ 187.936599][T16411] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.956692][T16411] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.973521][T16411] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.045955][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4942'. [ 188.079767][T16458] loop3: detected capacity change from 0 to 128 [ 188.118665][T16458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.133118][T16458] ext4 filesystem being mounted at /1086/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.177399][T16472] syz.2.4951[16472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.177466][T16472] syz.2.4951[16472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.189245][T16472] syz.2.4951[16472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.230044][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'. [ 188.263959][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.304572][T16478] lo speed is unknown, defaulting to 1000 [ 188.310658][T16478] lo speed is unknown, defaulting to 1000 [ 188.336523][T16487] syz.2.4959[16487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.386126][T16494] program syz.1.4961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.653982][T16533] sd 0:0:1:0: device reset [ 188.758332][T10321] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.767808][T16549] sctp: [Deprecated]: syz.6.4986 (pid 16549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.767808][T16549] Use struct sctp_sack_info instead [ 188.878057][T16567] lo speed is unknown, defaulting to 1000 [ 188.884527][T16567] lo speed is unknown, defaulting to 1000 [ 188.983062][T16581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.992096][T16581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.000363][T16577] vhci_hcd: invalid port number 15 [ 189.002819][T16581] __nla_validate_parse: 2 callbacks suppressed [ 189.002846][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4999'. [ 189.005662][T16577] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 189.011726][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4999'. [ 189.038218][T16581] netlink: 'syz.1.4999': attribute type 18 has an invalid length. [ 189.152740][T16591] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5003'. [ 189.422973][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5015'. [ 189.463108][T16623] rdma_op ffff88810fcfed80 conn xmit_rdma 0000000000000000 [ 189.494241][T16625] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5018'. [ 189.545486][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 189.545502][ T29] audit: type=1326 audit(1737099658.799:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.3.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 189.575275][ T29] audit: type=1326 audit(1737099658.799:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.3.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 189.602669][ T29] audit: type=1326 audit(1737099658.859:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.3.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 189.626334][ T29] audit: type=1326 audit(1737099658.859:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.3.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 189.649899][ T29] audit: type=1326 audit(1737099658.859:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.3.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 189.704867][ T29] audit: type=1326 audit(1737099658.949:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5b2d5d29 code=0x7ffc0000 [ 189.738288][T16640] IPVS: stopping master sync thread 16642 ... [ 189.761914][ T29] audit: type=1326 audit(1737099658.989:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d5b2d5d29 code=0x7ffc0000 [ 189.785591][ T29] audit: type=1326 audit(1737099658.989:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5b2d5d29 code=0x7ffc0000 [ 189.809156][ T29] audit: type=1326 audit(1737099658.989:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5b2d5d29 code=0x7ffc0000 [ 189.832866][ T29] audit: type=1326 audit(1737099658.989:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d5b2d5d29 code=0x7ffc0000 [ 189.975112][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.113247][T16673] loop3: detected capacity change from 0 to 512 [ 190.139819][T16673] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5041: bg 0: block 248: padding at end of block bitmap is not set [ 190.167012][T16673] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.5041: Failed to acquire dquot type 1 [ 190.181531][T16673] EXT4-fs (loop3): 1 truncate cleaned up [ 190.188393][T16684] loop2: detected capacity change from 0 to 1024 [ 190.189337][T16673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.195633][T16684] EXT4-fs: Ignoring removed nobh option [ 190.213446][T16673] ext4 filesystem being mounted at /1109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.270472][T16693] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5049'. [ 190.275503][T16684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.327044][T14428] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.419953][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.503116][T16713] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5059'. [ 190.676152][T16739] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5070'. [ 190.866894][T16751] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5074'. [ 190.877248][T16751] netlink: 'syz.6.5074': attribute type 10 has an invalid length. [ 190.887170][T16751] dummy0: entered promiscuous mode [ 190.893262][T16751] $H: (slave dummy0): Enslaving as an active interface with an up link [ 190.958570][T16762] IPVS: Error connecting to the multicast addr [ 191.070679][T16779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16779 comm=syz.6.5087 [ 191.107833][T10306] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.135459][T10321] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.155358][T10306] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.198660][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'. [ 191.209095][T10306] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.303664][T16812] batadv_slave_0: entered promiscuous mode [ 191.311615][T16812] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 191.372686][T16817] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 191.381047][T10306] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.481358][T16803] lo speed is unknown, defaulting to 1000 [ 191.483587][T10306] bridge_slave_1: left allmulticast mode [ 191.493214][T10306] bridge_slave_1: left promiscuous mode [ 191.499012][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.549217][T10306] bridge_slave_0: left allmulticast mode [ 191.554904][T10306] bridge_slave_0: left promiscuous mode [ 191.560671][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.593556][T16847] netlink: 'syz.1.5102': attribute type 153 has an invalid length. [ 191.702353][T10306] bond1 (unregistering): (slave gretap1): Releasing active interface [ 191.778358][T10306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.791065][T10306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.810674][T10306] bond0 (unregistering): Released all slaves [ 191.823197][T10306] bond1 (unregistering): Released all slaves [ 191.837057][T16803] lo speed is unknown, defaulting to 1000 [ 191.988921][T10306] hsr_slave_0: left promiscuous mode [ 191.998742][T10306] hsr_slave_1: left promiscuous mode [ 192.004619][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.012135][T10306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.026558][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.034031][T10306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.064816][T16895] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 192.074014][T16895] SELinux: failed to load policy [ 192.092853][T10306] veth1_macvtap: left promiscuous mode [ 192.098543][T10306] veth0_macvtap: left promiscuous mode [ 192.104182][T10306] veth1_vlan: left promiscuous mode [ 192.109691][T10306] veth0_vlan: left promiscuous mode [ 192.282293][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.394727][T16906] hub 9-0:1.0: USB hub found [ 192.405193][T16906] hub 9-0:1.0: 8 ports detected [ 192.453633][T16883] Set syz1 is full, maxelem 65536 reached [ 192.461328][T16912] bpf_get_probe_write_proto: 11 callbacks suppressed [ 192.461346][T16912] syz.3.5133[16912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.468204][T16912] syz.3.5133[16912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.479768][T16912] syz.3.5133[16912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.535007][T10306] team0 (unregistering): Port device team_slave_1 removed [ 192.559412][T10306] team0 (unregistering): Port device team_slave_0 removed [ 192.607435][T16916] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff18446744073709551615' [ 192.744592][T16803] chnl_net:caif_netlink_parms(): no params data found [ 192.792890][T16939] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.801291][T16939] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.809690][T16939] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.817954][T16939] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.879149][T16803] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.886400][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.895352][T16803] bridge_slave_0: entered allmulticast mode [ 192.903455][T16803] bridge_slave_0: entered promiscuous mode [ 192.948344][T16803] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.955713][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.964377][T16803] bridge_slave_1: entered allmulticast mode [ 192.979923][T16803] bridge_slave_1: entered promiscuous mode [ 193.013971][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.024653][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.063134][T16803] team0: Port device team_slave_0 added [ 193.070038][T16803] team0: Port device team_slave_1 added [ 193.088343][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.095448][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.121445][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.132980][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.140090][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.166067][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.200162][T16803] hsr_slave_0: entered promiscuous mode [ 193.207193][T16803] hsr_slave_1: entered promiscuous mode [ 193.226114][T16968] netlink: 'syz.3.5157': attribute type 10 has an invalid length. [ 193.295927][T16976] syz.3.5159[16976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.296053][T16976] syz.3.5159[16976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.316428][T16976] syz.3.5159[16976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.378019][T16985] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.415028][T10304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.446205][T16991] syz.3.5167[16991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.446644][T16991] syz.3.5167[16991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.459533][T16991] syz.3.5167[16991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.575610][T16803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.596962][T16803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.637281][T16803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.688848][T16803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.769379][T16803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.783771][T16803] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.809094][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.816277][T10304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.831395][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.838512][T10306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.888644][T17025] syz.1.5183[17025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.893680][T16803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.915823][T16803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.021612][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.082145][T17047] macvlan0: entered allmulticast mode [ 194.087670][T17047] veth1_vlan: entered allmulticast mode [ 194.116642][T17047] macvlan0: left allmulticast mode [ 194.121812][T17047] veth1_vlan: left allmulticast mode [ 194.208350][T16803] veth0_vlan: entered promiscuous mode [ 194.238299][T16803] veth1_vlan: entered promiscuous mode [ 194.279488][T16803] veth0_macvtap: entered promiscuous mode [ 194.287214][T16803] veth1_macvtap: entered promiscuous mode [ 194.300810][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.313035][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.323092][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.333631][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.343563][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.354081][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.365485][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.387792][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.398385][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.408263][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.408473][T17080] netlink: 'syz.6.5202': attribute type 1 has an invalid length. [ 194.418927][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.436953][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.447433][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.462011][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.491046][T17080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.506673][T17080] bond2: (slave gretap1): making interface the new active one [ 194.515228][T17080] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 194.531001][T16803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.539874][T16803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.548661][T16803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.557487][T16803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.570757][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 194.570771][ T29] audit: type=1326 audit(1737099663.789:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 194.600488][ T29] audit: type=1326 audit(1737099663.819:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 194.602381][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.624247][ T29] audit: type=1326 audit(1737099663.819:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee541f5d29 code=0x7ffc0000 [ 194.666241][ T29] audit: type=1326 audit(1737099663.919:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.689920][ T29] audit: type=1326 audit(1737099663.919:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.715016][ T29] audit: type=1326 audit(1737099663.919:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.738692][ T29] audit: type=1326 audit(1737099663.919:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.762304][ T29] audit: type=1326 audit(1737099663.919:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.785858][ T29] audit: type=1326 audit(1737099663.919:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.809453][ T29] audit: type=1326 audit(1737099663.919:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 194.877724][T17102] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff184467440737095516153Pq{P [ 194.877724][T17102] n'|$@OO-+el' [ 194.914041][T17107] lo speed is unknown, defaulting to 1000 [ 194.920639][T17107] lo speed is unknown, defaulting to 1000 [ 195.027670][T17114] loop3: detected capacity change from 0 to 512 [ 195.057790][T17114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.070760][T17114] ext4 filesystem being mounted at /1148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.089232][T17118] loop1: detected capacity change from 0 to 512 [ 195.132590][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.161368][T17118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.174313][T17118] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.240788][T17130] bond4 (unregistering): Released all slaves [ 195.258733][T17125] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff18446744073709551615' [ 195.333889][T17138] ref_ctr_offset mismatch. inode: 0x172e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 195.373705][T11593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.414232][T17142] loop2: detected capacity change from 0 to 1024 [ 195.430748][T17142] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 195.441731][T17142] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 195.474235][T17142] JBD2: no valid journal superblock found [ 195.480144][T17142] EXT4-fs (loop2): Could not load journal inode [ 195.747519][T10304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.856046][T17185] loop3: detected capacity change from 0 to 1024 [ 195.863982][T17184] lo speed is unknown, defaulting to 1000 [ 195.878677][T17184] lo speed is unknown, defaulting to 1000 [ 195.895454][T17185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.944082][T17185] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm +}[@: missing EA_INODE flag [ 196.013196][T17185] EXT4-fs (loop3): Remounting filesystem read-only [ 196.060593][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.145456][T17208] 9pnet: p9_errstr2errno: server reported unknown error ZO~t%u*jjXd8 S4R_ [ 196.177204][ T3376] IPVS: starting estimator thread 0... [ 196.265031][T17211] IPVS: using max 2400 ests per chain, 120000 per kthread [ 196.341386][ T1049] kernel write not supported for file /1002/attr/exec (pid: 1049 comm: kworker/0:2) [ 196.385154][T10295] IPVS: stop unused estimator thread 0... [ 196.449758][T17236] __nla_validate_parse: 4 callbacks suppressed [ 196.449775][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5267'. [ 196.468756][T17236] vxlan1: entered promiscuous mode [ 196.474002][T17236] vxlan1: entered allmulticast mode [ 196.544388][T17243] lo speed is unknown, defaulting to 1000 [ 196.555584][T17243] lo speed is unknown, defaulting to 1000 [ 196.587100][T17247] Invalid option length (303) for dns_resolver key [ 196.597833][T17248] loop1: detected capacity change from 0 to 1024 [ 196.616192][T17248] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.642854][T17248] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 196.665063][T17248] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.694721][T17248] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 196.715213][T17248] EXT4-fs (loop1): Remounting filesystem read-only [ 196.732884][T17248] EXT4-fs (loop1): 1 orphan inode deleted [ 196.740428][T17248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.756222][T17248] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 196.763151][T17248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.865094][T10304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.878125][ T9] IPVS: starting estimator thread 0... [ 196.965019][T17254] IPVS: using max 2448 ests per chain, 122400 per kthread [ 196.980407][T17262] sd 0:0:1:0: device reset [ 197.046243][T17268] loop1: detected capacity change from 0 to 128 [ 197.120650][T10304] IPVS: stop unused estimator thread 0... [ 197.131687][T17268] syz.1.5281: attempt to access beyond end of device [ 197.131687][T17268] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 197.315758][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5293'. [ 197.324764][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5293'. [ 197.492894][T17308] lo speed is unknown, defaulting to 1000 [ 197.505275][T17308] lo speed is unknown, defaulting to 1000 [ 197.539858][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5303'. [ 197.688046][T17331] loop1: detected capacity change from 0 to 1024 [ 197.726599][T17331] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 197.737605][T17331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 197.767607][T17338] bpf_get_probe_write_proto: 11 callbacks suppressed [ 197.767648][T17338] syz.0.5315[17338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.770837][T17331] JBD2: no valid journal superblock found [ 197.791557][T17331] EXT4-fs (loop1): Could not load journal inode [ 197.800243][T17338] syz.0.5315[17338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.800322][T17338] syz.0.5315[17338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.989692][T17348] lo speed is unknown, defaulting to 1000 [ 198.001151][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.015172][T17348] lo speed is unknown, defaulting to 1000 [ 198.091812][T17348] chnl_net:caif_netlink_parms(): no params data found [ 198.126280][T17348] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.133415][T17348] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.140770][T17348] bridge_slave_0: entered allmulticast mode [ 198.147550][T17348] bridge_slave_0: entered promiscuous mode [ 198.154333][T17348] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.161505][T17348] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.168875][T17348] bridge_slave_1: entered allmulticast mode [ 198.175616][T17348] bridge_slave_1: entered promiscuous mode [ 198.193234][T17348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.203847][T17348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.224091][T17348] team0: Port device team_slave_0 added [ 198.231466][T17348] team0: Port device team_slave_1 added [ 198.247515][T17348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.254485][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.280430][T17348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.291687][T17348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.298717][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.324725][T17348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.351630][T17348] hsr_slave_0: entered promiscuous mode [ 198.357967][T17348] hsr_slave_1: entered promiscuous mode [ 198.364120][T17348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.371787][T17348] Cannot create hsr debugfs directory [ 198.426335][T17348] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.486198][T17348] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.510951][T17366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.519492][T17366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.536182][T17348] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.585955][T17348] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.674971][T17348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.687229][T17348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.708349][T17348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.727366][T17348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.757610][T17348] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.764736][T17348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.772057][T17348] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.779156][T17348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.803720][T17377] loop1: detected capacity change from 0 to 2048 [ 198.878721][T17348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.899383][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.915200][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.924017][T17385] 9pnet: p9_errstr2errno: server reported unknown error ZO~t%u*jjXd8 S4R_ [ 198.939952][T17348] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.978247][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.985376][T10305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.003970][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.011119][T10305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.028938][T17348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.039426][T17348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.122555][T10287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.141035][T17348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.316200][T17348] veth0_vlan: entered promiscuous mode [ 199.344374][T17348] veth1_vlan: entered promiscuous mode [ 199.367544][T17348] veth0_macvtap: entered promiscuous mode [ 199.415135][T17348] veth1_macvtap: entered promiscuous mode [ 199.439218][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.449720][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.459647][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.470160][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.480082][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.490601][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.500446][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.510908][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.555713][T17348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.585778][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.596319][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.606163][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.616608][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.626455][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.637050][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.647035][T17348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.657623][T17348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.676375][T17348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.697591][T17419] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 199.707436][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 199.707504][ T29] audit: type=1400 audit(1737099668.959:6389): avc: denied { relabelto } for pid=17418 comm="syz.2.5336" name="wakeup_count" dev="sysfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 199.715733][T17348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.749918][T17348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.758961][T17348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.767838][T17348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.801714][T17426] netlink: 'syz.0.5339': attribute type 8 has an invalid length. [ 199.805066][ T29] audit: type=1400 audit(1737099668.959:6390): avc: denied { associate } for pid=17418 comm="syz.2.5336" name="wakeup_count" dev="sysfs" ino=197 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0" [ 199.865855][T17428] loop2: detected capacity change from 0 to 512 [ 199.872970][T17428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.887177][T17430] vlan2: entered allmulticast mode [ 199.892317][T17430] bridge_slave_0: entered allmulticast mode [ 199.901474][T17430] bridge_slave_0: left allmulticast mode [ 199.938368][T17428] EXT4-fs (loop2): 1 truncate cleaned up [ 199.944464][T17428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.006664][T17447] team0: Device gtp0 is of different type [ 200.013315][T16803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.034528][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5348'. [ 200.314978][ T29] audit: type=1400 audit(1737099669.549:6391): avc: denied { read } for pid=17485 comm="syz.3.5364" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.357171][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.407010][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5370'. [ 200.428368][ T29] audit: type=1400 audit(1737099669.679:6392): avc: denied { write } for pid=17496 comm="syz.2.5369" lport=52143 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 200.461027][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'. [ 200.482699][ T29] audit: type=1400 audit(1737099669.679:6393): avc: denied { getopt } for pid=17496 comm="syz.2.5369" lport=52143 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 200.518073][T17508] syz.6.5374[17508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.518264][T17508] syz.6.5374[17508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.546402][T17508] syz.6.5374[17508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.833760][T17540] sd 0:0:1:0: device reset [ 200.851132][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5393'. [ 200.860985][T17545] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.955948][T17554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17554 comm=syz.2.5397 [ 200.968592][T17554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17554 comm=syz.2.5397 [ 201.171144][ T29] audit: type=1400 audit(1737099670.419:6394): avc: denied { map } for pid=17565 comm="syz.1.5401" path="socket:[49585]" dev="sockfs" ino=49585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 201.220197][T17568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5402'. [ 201.465343][T10306] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.508110][T17589] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 201.588758][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 201.617852][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5418'. [ 201.689926][T17607] loop3: detected capacity change from 0 to 8192 [ 202.009122][ T29] audit: type=1326 audit(1737099671.259:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17624 comm="syz.3.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fadbd5d29 code=0x7ffc0000 [ 202.048128][ T29] audit: type=1326 audit(1737099671.279:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17624 comm="syz.3.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fadbd5d29 code=0x7ffc0000 [ 202.071895][ T29] audit: type=1326 audit(1737099671.279:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17624 comm="syz.3.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fadbd5d29 code=0x7ffc0000 [ 202.096224][ T29] audit: type=1326 audit(1737099671.279:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17624 comm="syz.3.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fadbd5d29 code=0x7ffc0000 [ 202.134699][T17634] lo speed is unknown, defaulting to 1000 [ 202.140834][T17634] lo speed is unknown, defaulting to 1000 [ 202.224197][T17640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5435'. [ 202.234011][T17640] netlink: 'syz.3.5435': attribute type 10 has an invalid length. [ 202.248850][T17640] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.341010][T17646] loop2: detected capacity change from 0 to 8192 [ 202.425851][T17652] syz.1.5441[17652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.425977][T17652] syz.1.5441[17652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.437619][T17652] syz.1.5441[17652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.516006][T17658] lo speed is unknown, defaulting to 1000 [ 202.533666][T17654] Falling back ldisc for ttyS3. [ 202.543911][T17658] lo speed is unknown, defaulting to 1000 [ 202.575459][T10306] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.720817][T17669] lo speed is unknown, defaulting to 1000 [ 202.753031][T17669] lo speed is unknown, defaulting to 1000 [ 202.775607][T17673] loop3: detected capacity change from 0 to 1024 [ 202.810800][T17673] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.833262][T17678] netlink: 'syz.6.5451': attribute type 27 has an invalid length. [ 202.841552][T17673] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 202.849688][T17673] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.849724][T17678] $H: left promiscuous mode [ 202.860984][T17678] dummy0: left promiscuous mode [ 202.878720][T17673] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 202.902616][T17673] EXT4-fs (loop3): Remounting filesystem read-only [ 202.944534][T17673] EXT4-fs (loop3): 1 orphan inode deleted [ 202.989892][T17673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 203.030084][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5455'. [ 203.038069][T17673] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 203.075768][T17673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.165202][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.200598][T17703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5461'. [ 203.210260][T17703] netlink: 'syz.2.5461': attribute type 10 has an invalid length. [ 203.228551][T17703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 203.257855][ T9] IPVS: starting estimator thread 0... [ 203.341658][T17716] lo speed is unknown, defaulting to 1000 [ 203.345880][T17706] IPVS: using max 2016 ests per chain, 100800 per kthread [ 203.347822][T17716] lo speed is unknown, defaulting to 1000 [ 203.582169][T10305] IPVS: stop unused estimator thread 0... [ 203.705294][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.731421][T17741] vlan2: entered allmulticast mode [ 203.736916][T17741] bridge_slave_0: entered allmulticast mode [ 203.754119][T17745] loop2: detected capacity change from 0 to 512 [ 203.765250][T17745] EXT4-fs: Ignoring removed oldalloc option [ 203.771335][T17741] bridge_slave_0: left allmulticast mode [ 203.771808][T17745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.806088][T17745] EXT4-fs (loop2): 1 truncate cleaned up [ 203.815663][T17745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.869194][T16803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.907596][T17753] lo speed is unknown, defaulting to 1000 [ 203.913668][T17753] lo speed is unknown, defaulting to 1000 [ 204.018432][T17760] syz.2.5485[17760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.020735][T17760] syz.2.5485[17760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.034556][T17760] syz.2.5485[17760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.071527][T17765] syz.0.5487[17765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.083240][T17765] syz.0.5487[17765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.102824][T17765] syz.0.5487[17765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.338546][T17790] lo speed is unknown, defaulting to 1000 [ 204.356539][ T9] kernel write not supported for file /1395/projid_map (pid: 9 comm: kworker/0:1) [ 204.357216][T17790] lo speed is unknown, defaulting to 1000 [ 204.399651][T17798] loop2: detected capacity change from 0 to 1024 [ 204.401819][T17793] lo speed is unknown, defaulting to 1000 [ 204.420488][T17798] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.433448][T17793] lo speed is unknown, defaulting to 1000 [ 204.441406][T17800] batadv_slave_1: entered promiscuous mode [ 204.442636][T17798] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 204.453534][T17800] syz_tun: entered promiscuous mode [ 204.462206][T17799] syz_tun: left promiscuous mode [ 204.467356][T17799] batadv_slave_1: left promiscuous mode [ 204.473539][T17798] EXT4-fs (loop2): orphan cleanup on readonly fs [ 204.497099][T17798] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 204.508618][T17798] EXT4-fs (loop2): Remounting filesystem read-only [ 204.518141][T17798] EXT4-fs (loop2): 1 orphan inode deleted [ 204.526068][T17798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.550807][T17798] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 204.589700][T17798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.673271][ T3376] IPVS: starting estimator thread 0... [ 204.769258][T17815] IPVS: using max 2448 ests per chain, 122400 per kthread [ 204.846311][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.946117][T10305] IPVS: stop unused estimator thread 0... [ 205.032248][T17839] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5517'. [ 205.136384][T17848] dccp_close: ABORT with 29 bytes unread [ 205.153498][T17851] syz.1.5523[17851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.153575][T17851] syz.1.5523[17851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.179772][T17851] syz.1.5523[17851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.235838][T17853] lo speed is unknown, defaulting to 1000 [ 205.281110][T17858] loop2: detected capacity change from 0 to 1024 [ 205.296714][T17853] lo speed is unknown, defaulting to 1000 [ 205.306586][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 205.306603][ T29] audit: type=1400 audit(1737099674.559:6526): avc: denied { ioctl } for pid=17863 comm="syz.6.5528" path="socket:[50424]" dev="sockfs" ino=50424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.339085][T17858] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.403261][T17858] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 205.457239][T17858] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.509713][T17858] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 205.552360][T17858] EXT4-fs (loop2): Remounting filesystem read-only [ 205.602020][T17858] Quota error (device loop2): write_blk: dquota write failed [ 205.609615][T17858] Quota error (device loop2): write_blk: dquota write failed [ 205.617128][T17858] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 205.702953][T17858] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 205.752241][T17858] EXT4-fs (loop2): 1 orphan inode deleted [ 205.791583][T17858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.818052][T17858] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 205.836185][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5537'. [ 205.846038][T17858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.956477][T10304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.975935][T17893] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.5540'. [ 206.042702][T17896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5541'. [ 206.063782][ T1049] IPVS: starting estimator thread 0... [ 206.074528][T17896] bond3: entered promiscuous mode [ 206.079888][T17898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5542'. [ 206.133864][T17896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.141918][T17896] bond4: entered promiscuous mode [ 206.150014][T17896] bond3: (slave bond4): Enslaving as an active interface with an up link [ 206.158768][T17900] IPVS: using max 2448 ests per chain, 122400 per kthread [ 206.179141][T17896] bond3 (unregistering): (slave bond4): Releasing backup interface [ 206.187488][T17896] bond4: left promiscuous mode [ 206.193015][T17896] bond3 (unregistering): Released all slaves [ 206.202216][T17907] netlink: 'syz.2.5545': attribute type 3 has an invalid length. [ 206.234445][ T29] audit: type=1400 audit(1737099675.479:6527): avc: denied { listen } for pid=17908 comm="syz.2.5546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.325382][T10304] IPVS: stop unused estimator thread 0... [ 206.562859][T17917] Set syz1 is full, maxelem 65536 reached [ 206.840029][ T29] audit: type=1400 audit(1737099676.079:6528): avc: denied { name_bind } for pid=17946 comm="syz.3.5560" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 206.904384][T17951] syz.6.5562[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.032353][ T29] audit: type=1326 audit(1737099676.279:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faede225d29 code=0x7ffc0000 [ 207.075085][T10287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.130222][ T29] audit: type=1326 audit(1737099676.329:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faede225d29 code=0x7ffc0000 [ 207.153881][ T29] audit: type=1326 audit(1737099676.329:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.2.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faede225d29 code=0x7ffc0000 [ 207.454811][T17997] loop2: detected capacity change from 0 to 1024 [ 207.528324][T17997] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 207.595338][T17997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.788017][T18008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18008 comm=syz.1.5585 [ 207.800662][T18008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18008 comm=syz.1.5585 [ 208.096617][T17973] syz.0.5572 (17973) used greatest stack depth: 6328 bytes left [ 208.195498][T10304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.234254][T18031] loop3: detected capacity change from 0 to 512 [ 208.255332][T18031] EXT4-fs: inline encryption not supported [ 208.318715][T18031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.339116][T18031] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.410211][T18031] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.5596: corrupted inode contents [ 208.445583][T18031] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.5596: mark_inode_dirty error [ 208.518285][T18031] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.5596: corrupted inode contents [ 208.535538][T16803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.561407][T18048] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.5596: corrupted inode contents [ 208.591759][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5606'. [ 208.614633][T18048] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.5596: mark_inode_dirty error [ 208.657390][T18048] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.5596: corrupted inode contents [ 208.689763][T18048] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.5596: mark_inode_dirty error [ 208.701303][T18048] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.5596: corrupted inode contents [ 208.716507][T18048] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.5596: mark_inode_dirty error [ 208.760626][T17348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.176901][T18093] bpf_get_probe_write_proto: 2 callbacks suppressed [ 209.176934][T18093] syz.2.5623[18093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.203935][T18093] syz.2.5623[18093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.235105][T18093] syz.2.5623[18093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.369227][T18113] atomic_op ffff8881282aed28 conn xmit_atomic 0000000000000000 [ 209.381527][T10305] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.788146][T18149] netlink: 'syz.6.5649': attribute type 39 has an invalid length. [ 209.845328][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 209.875529][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 210.209510][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5652'. [ 210.378155][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 210.378172][ T29] audit: type=1326 audit(1737099679.629:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18131 comm="syz.0.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5b2d5d29 code=0x7fc00000 [ 210.525049][ T29] audit: type=1326 audit(1737099679.769:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 210.556812][T10322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.609976][ T29] audit: type=1326 audit(1737099679.769:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 210.633561][ T29] audit: type=1326 audit(1737099679.799:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10a7d44690 code=0x7ffc0000 [ 210.657151][ T29] audit: type=1326 audit(1737099679.799:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10a7d44690 code=0x7ffc0000 [ 210.680751][ T29] audit: type=1326 audit(1737099679.799:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 210.704753][ T29] audit: type=1326 audit(1737099679.799:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 210.728526][ T29] audit: type=1326 audit(1737099679.799:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 210.751864][ T29] audit: type=1326 audit(1737099679.799:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 210.775403][ T29] audit: type=1326 audit(1737099679.799:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz.6.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 211.408575][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5686'. [ 211.417551][T18220] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5686'. [ 211.797510][T10266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.155678][T18247] syz.2.5688[18247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.159151][T18247] syz.2.5688[18247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.182571][T18247] syz.2.5688[18247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.228492][T18247] loop4: detected capacity change from 0 to 7 [ 212.258657][T18255] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5692'. [ 212.258664][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5691'. [ 212.285224][T18247] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.295127][T18247] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.303206][T18247] loop4: unable to read partition table [ 212.309314][T18247] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 212.309314][T18247] ) failed (rc=-5) [ 212.366021][T18262] serio: Serial port ptm0 [ 212.548069][T18286] loop3: detected capacity change from 0 to 164 [ 212.589587][T18286] syz.3.5706: attempt to access beyond end of device [ 212.589587][T18286] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 212.614301][T18286] syz.3.5706: attempt to access beyond end of device [ 212.614301][T18286] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 212.772941][T18297] loop3: detected capacity change from 0 to 8192 [ 212.926465][T10303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.961354][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5718'. [ 213.112739][T18328] loop2: detected capacity change from 0 to 256 [ 213.147625][T18328] FAT-fs (loop2): Directory bread(block 64) failed [ 213.164461][T18328] FAT-fs (loop2): Directory bread(block 65) failed [ 213.174571][T18328] FAT-fs (loop2): Directory bread(block 66) failed [ 213.193614][T18328] FAT-fs (loop2): Directory bread(block 67) failed [ 213.206436][T18328] FAT-fs (loop2): Directory bread(block 68) failed [ 213.222040][T18328] FAT-fs (loop2): Directory bread(block 69) failed [ 213.231653][T18328] FAT-fs (loop2): Directory bread(block 70) failed [ 213.275318][T18328] FAT-fs (loop2): Directory bread(block 71) failed [ 213.284991][T18328] FAT-fs (loop2): Directory bread(block 72) failed [ 213.291552][T18328] FAT-fs (loop2): Directory bread(block 73) failed [ 213.397150][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5730'. [ 213.439085][T18350] Cannot find del_set index 0 as target [ 213.492742][T18359] loop2: detected capacity change from 0 to 512 [ 213.517474][T18359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 213.520605][T18366] xt_hashlimit: size too large, truncated to 1048576 [ 213.561815][T18359] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.646918][T12474] bond0: (slave syz_tun): Releasing backup interface [ 213.680892][T16803] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz-executor: Failed to acquire dquot type 0 [ 213.738402][T18319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 213.972324][T10278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.018400][T10278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.035703][T10330] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.049832][T18380] lo speed is unknown, defaulting to 1000 [ 214.056110][T18380] lo speed is unknown, defaulting to 1000 [ 214.067871][T10278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.151662][T10278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.213150][T18405] __nla_validate_parse: 2 callbacks suppressed [ 214.213221][T18405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5754'. [ 214.339232][T18380] chnl_net:caif_netlink_parms(): no params data found [ 214.383500][T10278] bridge_slave_1: left allmulticast mode [ 214.389289][T10278] bridge_slave_1: left promiscuous mode [ 214.395006][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.421745][T10278] bridge_slave_0: left allmulticast mode [ 214.427585][T10278] bridge_slave_0: left promiscuous mode [ 214.433309][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.618394][T10278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.629621][T10278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.651569][T10278] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 214.665203][T10278] bond0 (unregistering): Released all slaves [ 214.688931][T18397] lo speed is unknown, defaulting to 1000 [ 214.698119][T18397] lo speed is unknown, defaulting to 1000 [ 214.865917][T10278] hsr_slave_0: left promiscuous mode [ 214.873845][T10278] hsr_slave_1: left promiscuous mode [ 214.881898][T10278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.889664][T10278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.919243][T10278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.926796][T10278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.975164][T10278] veth1_macvtap: left promiscuous mode [ 214.980691][T10278] veth0_macvtap: left promiscuous mode [ 214.986243][T10278] veth1_vlan: left promiscuous mode [ 214.991585][T10278] veth0_vlan: left promiscuous mode [ 215.122389][T10278] team0 (unregistering): Port device team_slave_1 removed [ 215.144470][T10278] team0 (unregistering): Port device team_slave_0 removed [ 215.156410][T10290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.293145][T18380] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.300404][T18380] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.315654][T18380] bridge_slave_0: entered allmulticast mode [ 215.322285][T18380] bridge_slave_0: entered promiscuous mode [ 215.329238][T18380] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.336410][T18380] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.343530][T18380] bridge_slave_1: entered allmulticast mode [ 215.350237][T18380] bridge_slave_1: entered promiscuous mode [ 215.424199][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 215.424216][ T29] audit: type=1326 audit(1737099684.669:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.457170][T18380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.458656][ T29] audit: type=1326 audit(1737099684.709:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.493271][ T29] audit: type=1326 audit(1737099684.719:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.517579][ T29] audit: type=1326 audit(1737099684.719:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.535277][T18380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.541089][ T29] audit: type=1326 audit(1737099684.719:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.573740][ T29] audit: type=1326 audit(1737099684.749:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.605955][ T29] audit: type=1326 audit(1737099684.779:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.629659][ T29] audit: type=1326 audit(1737099684.779:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.653302][ T29] audit: type=1326 audit(1737099684.809:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.676987][ T29] audit: type=1326 audit(1737099684.859:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.6.5770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 215.709262][T18397] chnl_net:caif_netlink_parms(): no params data found [ 215.719395][T18380] team0: Port device team_slave_0 added [ 215.738034][T18380] team0: Port device team_slave_1 added [ 215.796858][T18380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.803882][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.829870][T18380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.876220][T18380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.883222][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.909276][T18380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.952548][T18380] hsr_slave_0: entered promiscuous mode [ 215.963344][T18380] hsr_slave_1: entered promiscuous mode [ 215.977087][T18397] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.984181][T18397] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.992893][T18397] bridge_slave_0: entered allmulticast mode [ 216.001542][T18397] bridge_slave_0: entered promiscuous mode [ 216.012030][T18397] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.019229][T18397] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.029840][T18397] bridge_slave_1: entered allmulticast mode [ 216.036373][T18397] bridge_slave_1: entered promiscuous mode [ 216.070448][T18397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.087487][T18397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.123484][T18397] team0: Port device team_slave_0 added [ 216.133332][T18397] team0: Port device team_slave_1 added [ 216.164744][T18397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.171861][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.197795][T18397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.212079][T18397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.219255][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.245273][T18397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.285328][T18397] hsr_slave_0: entered promiscuous mode [ 216.291498][T18397] hsr_slave_1: entered promiscuous mode [ 216.297391][T18397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.305375][T10327] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.305534][T18397] Cannot create hsr debugfs directory [ 216.465958][T18397] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.526236][T18397] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.599632][T18397] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.657701][T18397] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.676341][T18478] can0: slcan on pts0. [ 216.745166][T18478] can0 (unregistered): slcan off pts0. [ 216.759587][T18397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.786528][T18397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.803601][T18380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.812539][T18397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.822123][T18397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.838235][T18380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.856943][T18380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.884823][T18380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.936176][T18397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.971182][T18397] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.007162][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.014268][T10327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.061711][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.068901][T10290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.114352][T18380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.149240][T18380] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.159676][T18486] syz.3.5780[18486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.159806][T18486] syz.3.5780[18486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.179568][T10278] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.195170][T18486] syz.3.5780[18486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.198065][T10278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.250746][T10278] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.258031][T10278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.270365][T18397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.345476][T18380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.411347][T18397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.435378][T10306] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.520871][T18380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.723235][T18397] veth0_vlan: entered promiscuous mode [ 217.737550][T18397] veth1_vlan: entered promiscuous mode [ 217.760173][T18397] veth0_macvtap: entered promiscuous mode [ 217.785836][T18397] veth1_macvtap: entered promiscuous mode [ 217.814757][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.825362][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.835304][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.845770][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.855678][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.866265][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.876171][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.886736][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.898824][T18397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.907173][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.917750][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.927646][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.938121][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.947974][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.958429][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.968344][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.978786][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.019395][T18397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.030414][T18380] veth0_vlan: entered promiscuous mode [ 218.046107][T18397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.054861][T18397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.063749][T18397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.072545][T18397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.145212][T18380] veth1_vlan: entered promiscuous mode [ 218.258070][T18380] veth0_macvtap: entered promiscuous mode [ 218.278192][T18380] veth1_macvtap: entered promiscuous mode [ 218.310411][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.320951][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.330815][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.341290][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.351183][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.361690][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.371583][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.382050][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.392008][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.402610][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.413653][T18380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.421786][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.432313][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.442212][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.452752][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.462704][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.473184][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.483093][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.493602][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.503449][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.513923][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.524487][T18380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.556299][T18380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.565174][T18380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.573898][T18380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.582662][T18380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.626692][T10327] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.654183][T18660] loop5: detected capacity change from 0 to 7 [ 218.661774][T18656] netlink: 'syz.6.5798': attribute type 3 has an invalid length. [ 218.661835][T18660] Buffer I/O error on dev loop5, logical block 0, async page read [ 218.687912][T18660] Buffer I/O error on dev loop5, logical block 0, async page read [ 218.695829][T18660] loop5: unable to read partition table [ 218.711885][T18660] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 218.711885][T18660] ) failed (rc=-5) [ 218.912266][T18686] netlink: zone id is out of range [ 218.917515][T18686] netlink: zone id is out of range [ 218.928205][T18686] netlink: set zone limit has 4 unknown bytes [ 219.040282][T18695] loop5: detected capacity change from 0 to 2048 [ 219.070565][T18695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.188851][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.401004][T18719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5824'. [ 219.461657][T18724] serio: Serial port ptm0 [ 219.468662][T18713] Set syz1 is full, maxelem 65536 reached [ 219.518245][T18727] syz.1.5828[18727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.518367][T18727] syz.1.5828[18727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.529889][T18727] syz.1.5828[18727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.622586][T18734] syz.4.5831[18734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.634253][T18734] syz.4.5831[18734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.646044][T18734] syz.4.5831[18734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.668049][T18734] loop4: detected capacity change from 0 to 256 [ 219.686585][T18734] vfat: Deprecated parameter 'posix' [ 219.691903][T18734] FAT-fs: "posix" option is obsolete, not supported now [ 219.695135][T18738] SELinux: security_context_str_to_sid (J) failed with errno=-22 [ 219.725789][T10344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.809151][T18751] ipvlan2: entered allmulticast mode [ 219.814562][T18751] macvlan0: entered allmulticast mode [ 219.820100][T18751] veth1_vlan: entered allmulticast mode [ 219.848224][T18755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5839'. [ 219.977273][T18767] lo speed is unknown, defaulting to 1000 [ 219.983864][T18767] lo speed is unknown, defaulting to 1000 [ 220.039892][T18769] loop5: detected capacity change from 0 to 1024 [ 220.068071][T18769] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.079058][T18769] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.095272][T18769] JBD2: no valid journal superblock found [ 220.101072][T18769] EXT4-fs (loop5): Could not load journal inode [ 220.141770][T18774] syz.3.5848[18774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.423401][T18792] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.5855'. [ 220.444264][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5855'. [ 220.722124][T18798] syzkaller0: entered promiscuous mode [ 220.727790][T18798] syzkaller0: entered allmulticast mode [ 220.825043][T10293] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.096573][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 221.096591][ T29] audit: type=1400 audit(1737099690.349:6838): avc: denied { setopt } for pid=18814 comm="syz.1.5866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.185282][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5867'. [ 221.220285][T18821] loop4: detected capacity change from 0 to 2048 [ 221.227248][T18821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.238271][T18821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.270835][T18380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.282440][T18823] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.282701][ T9] IPVS: starting estimator thread 0... [ 221.377847][T18834] IPVS: stopping master sync thread 18838 ... [ 221.377963][T18838] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 221.415740][T18827] IPVS: using max 2160 ests per chain, 108000 per kthread [ 221.471633][ T29] audit: type=1326 audit(1737099690.719:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.495289][ T29] audit: type=1326 audit(1737099690.719:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.518962][ T29] audit: type=1326 audit(1737099690.719:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.542549][ T29] audit: type=1326 audit(1737099690.719:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.566079][ T29] audit: type=1326 audit(1737099690.719:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.589630][ T29] audit: type=1326 audit(1737099690.719:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.613150][ T29] audit: type=1326 audit(1737099690.719:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.636900][ T29] audit: type=1326 audit(1737099690.719:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.660562][ T29] audit: type=1326 audit(1737099690.719:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz.4.5878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81dab35d29 code=0x7ffc0000 [ 221.969714][T10293] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.027585][T18889] loop3: detected capacity change from 0 to 128 [ 222.040755][T18889] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 222.048356][T18889] FAT-fs (loop3): Filesystem has been set read-only [ 222.237998][T18910] loop3: detected capacity change from 0 to 256 [ 222.244769][T18910] FAT-fs (loop3): bogus number of FAT sectors [ 222.251012][T18910] FAT-fs (loop3): Can't find a valid FAT filesystem [ 222.441918][T18915] loop3: detected capacity change from 0 to 8192 [ 222.460568][T18920] loop5: detected capacity change from 0 to 2048 [ 222.478821][T18924] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 222.486495][T18915] loop3: p1 p2 p3 p4 [ 222.490651][T18915] loop3: p1 start 51379968 is beyond EOD, truncated [ 222.497895][T18920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.503469][T18915] loop3: p3 size 100663552 extends beyond EOD, truncated [ 222.520181][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x1 [ 222.527655][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.535153][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.542687][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.550114][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x2 [ 222.557554][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.564970][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.572372][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.579823][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.587250][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x4 [ 222.594654][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.602098][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.609582][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x2 [ 222.609842][T18915] loop3: p4 size 81920 extends beyond EOD, [ 222.617026][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617055][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617080][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617105][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617131][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617180][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617210][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617237][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617263][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617285][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617306][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.617346][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.623571][T18915] truncated [ 222.631010][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.723420][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.730861][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.738315][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.745731][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.753207][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.760622][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.768040][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.775440][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.782900][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.790321][ T9] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 222.798964][T18931] smc: net device bond0 applied user defined pnetid SYZ2 [ 222.806176][ T9] hid-generic 0000:0003:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 222.817428][T18931] smc: net device bond0 erased user defined pnetid SYZ2 [ 222.843974][T18933] loop4: detected capacity change from 0 to 512 [ 222.870858][T18937] bpf_get_probe_write_proto: 20 callbacks suppressed [ 222.870896][T18937] syz.3.5914[18937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.877875][T18937] syz.3.5914[18937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.889934][T18937] syz.3.5914[18937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.904501][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.930358][T18933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.947623][T18933] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.958458][T18941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 223.014406][T18947] SELinux: security_context_str_to_sid (@) failed with errno=-22 [ 223.195192][T18380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.205507][T10287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.409317][T18999] lo speed is unknown, defaulting to 1000 [ 223.415529][T18999] lo speed is unknown, defaulting to 1000 [ 223.498695][T19008] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5946'. [ 223.613384][T19021] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.651941][T19025] loop5: detected capacity change from 0 to 128 [ 223.717843][T19029] random: crng reseeded on system resumption [ 223.729141][ T3376] kernel write not supported for file /87/attr/exec (pid: 3376 comm: kworker/1:3) [ 223.771736][T18999] geneve0: entered promiscuous mode [ 223.777158][T18999] geneve0: entered allmulticast mode [ 223.908133][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5962'. [ 224.029941][T19053] sd 0:0:1:0: device reset [ 224.140982][T19075] loop3: detected capacity change from 0 to 128 [ 224.148451][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'. [ 224.203432][T19082] loop3: detected capacity change from 0 to 2048 [ 224.235587][T19082] loop3: p1 < > p4 [ 224.240112][T19082] loop3: p4 size 8388608 extends beyond EOD, truncated [ 224.305976][T10327] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.353731][T19087] sd 0:0:1:0: device reset [ 224.793266][T19143] bridge0: port 3(bond0) entered blocking state [ 224.799783][T19143] bridge0: port 3(bond0) entered disabled state [ 224.810083][T19143] bond0: entered allmulticast mode [ 224.815291][T19143] bond_slave_0: entered allmulticast mode [ 224.821072][T19143] bond_slave_1: entered allmulticast mode [ 224.832193][T19143] bond0: entered promiscuous mode [ 224.837352][T19143] bond_slave_0: entered promiscuous mode [ 224.843077][T19143] bond_slave_1: entered promiscuous mode [ 224.849649][T19143] bridge0: port 3(bond0) entered blocking state [ 224.856013][T19143] bridge0: port 3(bond0) entered forwarding state [ 224.858944][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6006'. [ 224.944175][T19154] program syz.1.6010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.028211][T19165] syz.1.6015[19165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.028331][T19165] syz.1.6015[19165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.062758][T19165] syz.1.6015[19165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.078496][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6019'. [ 225.089490][T19177] program syz.3.6021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.166666][T19188] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6025'. [ 225.209819][T19194] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 225.266959][T19203] loop4: detected capacity change from 0 to 128 [ 225.278463][T19203] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.319819][T19203] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.416123][T10327] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.427706][T19216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6038'. [ 225.458315][T19219] SELinux: Context is not valid (left unmapped). [ 225.476465][T18380] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.574379][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6046'. [ 225.575271][T19233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6045'. [ 225.708854][T19248] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6058'. [ 225.718859][T19247] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6058'. [ 225.828320][T19252] syz.6.6062[19252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.828423][T19252] syz.6.6062[19252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.859228][T19252] syz.6.6062[19252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.939459][T19264] loop5: detected capacity change from 0 to 512 [ 225.984263][T19264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.002105][T19264] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 226.011317][T19271] smc: net device bond0 applied user defined pnetid SYZ0 [ 226.013325][T19264] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 226.020402][T19271] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6059'. [ 226.033203][T19264] EXT4-fs (loop5): 1 truncate cleaned up [ 226.035610][T19271] smc: net device bond0 erased user defined pnetid SYZ0 [ 226.053529][T19264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.053549][T19273] xt_HMARK: spi-set and port-set can't be combined [ 226.056830][T19264] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #2: block 4: comm syz.5.6056: lblock 0 mapped to illegal pblock 4 (length 1) [ 226.107479][T19277] loop4: detected capacity change from 0 to 512 [ 226.115727][T19264] EXT4-fs (loop5): Remounting filesystem read-only [ 226.144613][T19277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.160244][T19277] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.179338][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.197787][T18380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.273995][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.281487][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.289209][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.297850][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.305381][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.312936][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.320493][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.328134][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.335561][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.342964][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.350402][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.357876][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.365499][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.372932][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.380378][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.387973][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.395467][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.403049][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.410554][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.415171][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 226.415188][ T29] audit: type=1400 audit(1737099695.639:6929): avc: denied { read } for pid=19313 comm="syz.5.6076" name="wakeup_count" dev="sysfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 226.426988][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.450967][ T29] audit: type=1400 audit(1737099695.639:6930): avc: denied { open } for pid=19313 comm="syz.5.6076" path="/sys/power/wakeup_count" dev="sysfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 226.458284][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.493575][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.501066][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.508816][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.516302][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.519962][ T29] audit: type=1400 audit(1737099695.769:6931): avc: denied { module_load } for pid=19313 comm="syz.5.6076" path="/sys/power/wakeup_count" dev="sysfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=system permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 226.523686][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.559805][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.567255][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.574707][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.582219][ T9174] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.590482][ T9174] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 226.601725][T10287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.628770][T19320] lo speed is unknown, defaulting to 1000 [ 226.635005][T19320] lo speed is unknown, defaulting to 1000 [ 227.159343][T19409] syz.6.6087[19409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.248950][ T29] audit: type=1400 audit(1737099696.499:6932): avc: denied { cmd } for pid=19417 comm="syz.6.6091" path="socket:[54946]" dev="sockfs" ino=54946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 227.348231][ T29] audit: type=1326 audit(1737099696.599:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 227.371812][ T29] audit: type=1326 audit(1737099696.599:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 227.428585][ T29] audit: type=1326 audit(1737099696.599:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 227.452218][ T29] audit: type=1326 audit(1737099696.599:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 227.475725][ T29] audit: type=1326 audit(1737099696.629:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 227.499475][ T29] audit: type=1326 audit(1737099696.629:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 227.775023][ T288] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.043029][T19478] bpf_get_probe_write_proto: 5 callbacks suppressed [ 228.043049][T19478] syz.4.6116[19478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.058530][T19478] syz.4.6116[19478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.075111][T19478] syz.4.6116[19478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.589088][T19539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6142'. [ 228.779553][T19551] lo speed is unknown, defaulting to 1000 [ 228.785781][T19551] lo speed is unknown, defaulting to 1000 [ 228.885652][T10283] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.162619][T19579] veth0_virt_wifi: entered promiscuous mode [ 229.171483][T19581] serio: Serial port ptm0 [ 229.184842][T19579] veth0_virt_wifi: left promiscuous mode [ 229.318318][T19603] Cannot find del_set index 0 as target [ 229.433764][T19621] loop5: detected capacity change from 0 to 512 [ 229.457603][T19621] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.6175: casefold flag without casefold feature [ 229.477515][T19621] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.6175: couldn't read orphan inode 15 (err -117) [ 229.513765][T19621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.574735][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.586454][T19641] atomic_op ffff8881247ddd28 conn xmit_atomic 0000000000000000 [ 229.767708][T19667] veth0_virt_wifi: entered promiscuous mode [ 229.798367][T19667] veth0_virt_wifi: left promiscuous mode [ 229.995288][ T288] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.238353][T19715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.258429][T19715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.315135][T19713] Falling back ldisc for ttyS3. [ 230.324881][T19723] macvlan0: entered promiscuous mode [ 230.326484][T19724] atomic_op ffff8881017d2528 conn xmit_atomic 0000000000000000 [ 230.341460][T19723] ipvlan0: entered promiscuous mode [ 230.347971][T19723] ipvlan0: left promiscuous mode [ 230.368296][T19723] macvlan0: left promiscuous mode [ 230.384651][T19726] __nla_validate_parse: 5 callbacks suppressed [ 230.384667][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6225'. [ 230.640165][T19745] bond0: left allmulticast mode [ 230.645165][T19745] bond_slave_0: left allmulticast mode [ 230.650664][T19745] bond_slave_1: left allmulticast mode [ 230.656291][T19745] bond0: left promiscuous mode [ 230.661114][T19745] bond_slave_0: left promiscuous mode [ 230.666658][T19745] bond_slave_1: left promiscuous mode [ 230.672281][T19745] bridge0: port 3(bond0) entered disabled state [ 230.693749][T19745] bridge_slave_0: left allmulticast mode [ 230.699465][T19745] bridge_slave_0: left promiscuous mode [ 230.705317][T19745] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.718965][T19745] bridge_slave_1: left allmulticast mode [ 230.724704][T19745] bridge_slave_1: left promiscuous mode [ 230.730494][T19745] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.741632][T19745] bond0: (slave bond_slave_0): Releasing backup interface [ 230.751929][T19745] bond0: (slave bond_slave_1): Releasing backup interface [ 230.764137][T19745] team0: Port device team_slave_0 removed [ 230.775992][T19745] team0: Port device team_slave_1 removed [ 230.783027][T19745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.790516][T19745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.799596][T19745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.807152][T19745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.831871][T19745] bond1: (slave batadv1): Releasing active interface [ 230.838670][T19745] batadv1: left promiscuous mode [ 230.849096][T19745] bond2: (slave batadv2): Releasing active interface [ 230.851759][T19753] atomic_op ffff888147786528 conn xmit_atomic 0000000000000000 [ 230.868245][T19745] bond3: (slave gretap1): Releasing active interface [ 230.881518][T19745] bond4: (slave batadv3): Releasing backup interface [ 230.889124][T19745] batadv3: left promiscuous mode [ 230.954428][T19761] loop5: detected capacity change from 0 to 1024 [ 230.962361][T19761] EXT4-fs: Ignoring removed orlov option [ 230.972753][T19761] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 230.991307][T19761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.037597][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.063487][T19774] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.079603][T19778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 231.086170][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.093709][T19778] vhci_hcd vhci_hcd.0: Device attached [ 231.095695][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.123748][T19778] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 231.130299][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.138053][T19778] vhci_hcd vhci_hcd.0: Device attached [ 231.152366][T19778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.163473][T19778] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 231.170027][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.177699][T19778] vhci_hcd vhci_hcd.0: Device attached [ 231.184473][T19778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.205550][T19778] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 231.212387][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.220052][T19778] vhci_hcd vhci_hcd.0: Device attached [ 231.225679][T19799] loop5: detected capacity change from 0 to 1024 [ 231.237852][T19778] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 231.239550][T19804] syz.1.6253[19804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.244504][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.244561][T19778] vhci_hcd vhci_hcd.0: Device attached [ 231.259988][T19804] syz.1.6253[19804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.269053][T19804] syz.1.6253[19804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.276089][T19778] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 231.298495][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.306773][T19778] vhci_hcd vhci_hcd.0: Device attached [ 231.312385][ T3376] vhci_hcd: vhci_device speed not set [ 231.323102][T19799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.327165][T19806] vhci_hcd: connection closed [ 231.338242][T19801] vhci_hcd: connection closed [ 231.343406][T19796] vhci_hcd: connection closed [ 231.355314][T19786] vhci_hcd: connection closed [ 231.357756][T19793] vhci_hcd: connection closed [ 231.361241][T19779] vhci_hcd: connection closed [ 231.381193][T10278] vhci_hcd: stop threads [ 231.390382][T10278] vhci_hcd: release socket [ 231.394890][T10278] vhci_hcd: disconnect device [ 231.399730][ T3376] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 231.407363][T19780] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 231.408509][T10278] vhci_hcd: stop threads [ 231.417695][T10278] vhci_hcd: release socket [ 231.422232][T10278] vhci_hcd: disconnect device [ 231.427478][T10278] vhci_hcd: stop threads [ 231.429955][T19811] macvlan0: entered promiscuous mode [ 231.431716][T10278] vhci_hcd: release socket [ 231.431784][T10278] vhci_hcd: disconnect device [ 231.442774][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.455412][T10278] vhci_hcd: stop threads [ 231.459705][T10278] vhci_hcd: release socket [ 231.460860][T19811] ipvlan0: entered promiscuous mode [ 231.464122][T10278] vhci_hcd: disconnect device [ 231.474699][T10278] vhci_hcd: stop threads [ 231.479011][T10278] vhci_hcd: release socket [ 231.483439][T10278] vhci_hcd: disconnect device [ 231.492006][T10278] vhci_hcd: stop threads [ 231.494607][T19811] ipvlan0: left promiscuous mode [ 231.496294][T10278] vhci_hcd: release socket [ 231.496309][T10278] vhci_hcd: disconnect device [ 231.513434][T19811] macvlan0: left promiscuous mode [ 231.704735][T19828] loop5: detected capacity change from 0 to 8192 [ 231.725359][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 231.725405][ T29] audit: type=1326 audit(1737099700.969:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.6.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 231.756840][ T29] audit: type=1326 audit(1737099700.969:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.6.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 231.780535][ T29] audit: type=1326 audit(1737099700.969:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.6.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a7d45d29 code=0x7ffc0000 [ 231.825340][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6266'. [ 231.947799][T19847] macvlan0: entered promiscuous mode [ 231.959348][T19847] ipvlan0: entered promiscuous mode [ 231.971294][T19847] ipvlan0: left promiscuous mode [ 231.977048][T19847] macvlan0: left promiscuous mode [ 232.074181][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6275'. [ 232.093569][T19858] macvlan0: entered promiscuous mode [ 232.122697][T19858] ipvlan0: entered promiscuous mode [ 232.133528][T19858] ipvlan0: left promiscuous mode [ 232.138756][T19858] macvlan0: left promiscuous mode [ 232.184999][T19862] bridge0: port 3(bond0) entered blocking state [ 232.191311][T19862] bridge0: port 3(bond0) entered disabled state [ 232.205370][T19862] bond0: entered allmulticast mode [ 232.210575][T19862] bond_slave_0: entered allmulticast mode [ 232.216441][T19862] bond_slave_1: entered allmulticast mode [ 232.265123][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.267230][T19862] bond0: entered promiscuous mode [ 232.278043][T19862] bond_slave_0: entered promiscuous mode [ 232.283896][T19862] bond_slave_1: entered promiscuous mode [ 232.317254][T19868] SELinux: syz.3.6281 (19868) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.325365][T19862] bridge0: port 3(bond0) entered blocking state [ 232.337317][T19862] bridge0: port 3(bond0) entered forwarding state [ 232.385587][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6280'. [ 232.972321][ T29] audit: type=1326 audit(1737099702.219:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 232.997148][ T29] audit: type=1326 audit(1737099702.219:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 233.020895][ T29] audit: type=1326 audit(1737099702.219:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 233.044471][ T29] audit: type=1326 audit(1737099702.219:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 233.068049][ T29] audit: type=1326 audit(1737099702.219:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 233.091666][ T29] audit: type=1326 audit(1737099702.219:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 233.115212][ T29] audit: type=1326 audit(1737099702.219:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511545d29 code=0x7ffc0000 [ 233.207030][T19906] x_tables: duplicate underflow at hook 1 [ 233.320529][T19904] loop5: detected capacity change from 0 to 8192 [ 233.375628][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.501926][T19931] loop3: detected capacity change from 0 to 512 [ 233.508695][T19927] loop5: detected capacity change from 0 to 4096 [ 233.517793][T19931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.540417][T19927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.571253][T19931] EXT4-fs (loop3): 1 truncate cleaned up [ 233.605412][T19931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.674658][T17348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.730044][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.839282][T19952] x_tables: duplicate underflow at hook 1 [ 233.899446][T19959] can0: slcan on ptm0. [ 233.941922][T19963] syz.4.6318[19963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.942090][T19963] syz.4.6318[19963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.956428][T19963] syz.4.6318[19963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.976791][T19958] can0 (unregistered): slcan off ptm0. [ 234.090502][T19978] pimreg: entered allmulticast mode [ 234.115767][T19978] pimreg: left allmulticast mode [ 234.266877][T19992] bridge_slave_0: left allmulticast mode [ 234.272560][T19992] bridge_slave_0: left promiscuous mode [ 234.278313][T19992] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.305336][T19992] bridge_slave_1: left allmulticast mode [ 234.311038][T19992] bridge_slave_1: left promiscuous mode [ 234.316818][T19992] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.343212][T20000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6336'. [ 234.364985][T19992] bond0: (slave bond_slave_0): Releasing backup interface [ 234.383058][T19992] bond0: (slave bond_slave_1): Releasing backup interface [ 234.414360][T19992] team0: Port device team_slave_0 removed [ 234.426638][T19992] team0: Port device team_slave_1 removed [ 234.433858][T19992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.441490][T19992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.469283][T19992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.476823][T19992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.483988][T10278] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.493004][T20003] SET target dimension over the limit! [ 234.541048][T20010] x_tables: duplicate underflow at hook 1 [ 234.937861][T20034] loop4: detected capacity change from 0 to 512 [ 235.079491][T20034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.094940][T20034] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.120163][T20056] loop5: detected capacity change from 0 to 1024 [ 235.130759][T20056] EXT4-fs: Ignoring removed orlov option [ 235.151626][T20056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.295764][T18380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.427868][T20062] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 235.434492][T20062] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.442112][T20062] vhci_hcd vhci_hcd.0: Device attached [ 235.484042][T20062] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.569506][T20069] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.581885][T20062] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 235.588424][T20062] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.596079][T20062] vhci_hcd vhci_hcd.0: Device attached [ 235.599432][T20061] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 235.608146][T20061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.615643][T20061] vhci_hcd vhci_hcd.0: Device attached [ 235.649655][T20078] vlan3: entered allmulticast mode [ 235.654824][T20078] bridge_slave_0: entered allmulticast mode [ 235.661378][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.674866][T20062] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(9) [ 235.681769][T20062] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.689604][T20062] vhci_hcd vhci_hcd.0: Device attached [ 235.695494][T20078] bridge_slave_0: left allmulticast mode [ 235.706112][ T35] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 235.722594][T20061] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(12) [ 235.729311][T20061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.736939][T20061] vhci_hcd vhci_hcd.0: Device attached [ 235.745249][T20061] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(16) [ 235.751885][T20061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.760171][T20061] vhci_hcd vhci_hcd.0: Device attached [ 235.769592][T20086] vhci_hcd: connection closed [ 235.769707][T20082] vhci_hcd: connection closed [ 235.769767][T20077] vhci_hcd: connection closed [ 235.775738][T10278] vhci_hcd: stop threads [ 235.788078][T10278] vhci_hcd: release socket [ 235.792506][T10278] vhci_hcd: disconnect device [ 235.803276][T20065] vhci_hcd: connection closed [ 235.803417][T20067] vhci_hcd: connection closed [ 235.808362][T20063] vhci_hcd: connection reset by peer [ 235.818785][T10278] vhci_hcd: stop threads [ 235.823068][T10278] vhci_hcd: release socket [ 235.827574][T10278] vhci_hcd: disconnect device [ 235.837331][T10278] vhci_hcd: stop threads [ 235.841617][T10278] vhci_hcd: release socket [ 235.846168][T10278] vhci_hcd: disconnect device [ 235.851476][T10278] vhci_hcd: stop threads [ 235.855798][T10278] vhci_hcd: release socket [ 235.860278][T10278] vhci_hcd: disconnect device [ 235.889441][T10278] vhci_hcd: stop threads [ 235.893725][T10278] vhci_hcd: release socket [ 235.898198][T10278] vhci_hcd: disconnect device [ 235.912275][T20093] SET target dimension over the limit! [ 235.917849][T10278] vhci_hcd: stop threads [ 235.922194][T10278] vhci_hcd: release socket [ 235.926812][T10278] vhci_hcd: disconnect device [ 236.007206][T20048] ================================================================== [ 236.015337][T20048] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 236.023441][T20048] [ 236.025784][T20048] write to 0xffff888136cec2f0 of 8 bytes by task 20056 on cpu 0: [ 236.033516][T20048] filemap_splice_read+0x6c4/0x910 [ 236.038713][T20048] ext4_file_splice_read+0x8f/0xb0 [ 236.043865][T20048] splice_direct_to_actor+0x269/0x670 [ 236.049266][T20048] do_splice_direct+0xd7/0x150 [ 236.054067][T20048] do_sendfile+0x398/0x660 [ 236.058512][T20048] __x64_sys_sendfile64+0x110/0x150 [ 236.063757][T20048] x64_sys_call+0xfbd/0x2dc0 [ 236.068373][T20048] do_syscall_64+0xc9/0x1c0 [ 236.072896][T20048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.078816][T20048] [ 236.081152][T20048] write to 0xffff888136cec2f0 of 8 bytes by task 20048 on cpu 1: [ 236.088887][T20048] filemap_splice_read+0x6c4/0x910 [ 236.094030][T20048] ext4_file_splice_read+0x8f/0xb0 [ 236.099169][T20048] splice_direct_to_actor+0x269/0x670 [ 236.104560][T20048] do_splice_direct+0xd7/0x150 [ 236.109342][T20048] do_sendfile+0x398/0x660 [ 236.113768][T20048] __x64_sys_sendfile64+0x110/0x150 [ 236.119003][T20048] x64_sys_call+0xfbd/0x2dc0 [ 236.123607][T20048] do_syscall_64+0xc9/0x1c0 [ 236.128208][T20048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.134114][T20048] [ 236.136437][T20048] value changed: 0x0000000000000bfb -> 0x0000000000000bfc [ 236.143550][T20048] [ 236.145878][T20048] Reported by Kernel Concurrency Sanitizer on: [ 236.152034][T20048] CPU: 1 UID: 0 PID: 20048 Comm: syz.5.6353 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 236.162805][T20048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.172905][T20048] ================================================================== [ 236.215805][T18397] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.445181][ T3376] usb 9-1: enqueue for inactive port 0 [ 236.450713][ T3376] usb 9-1: enqueue for inactive port 0 [ 236.535072][ T3376] vhci_hcd: vhci_device speed not set [ 236.844994][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.965362][T10330] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.085122][T10330] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.185100][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.845015][ T35] vhci_hcd: vhci_device speed not set [ 241.295029][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.405029][T10330] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.515065][T10330] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.635048][T10330] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.745001][T10295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!