last executing test programs: 4m9.188773346s ago: executing program 32 (id=95): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 3m46.704600878s ago: executing program 33 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xd32}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x4, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c1}, 0x40000) 3m38.307010386s ago: executing program 34 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2) close(r2) 3m32.00878374s ago: executing program 35 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x6d, 0x11}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x0) 3m12.675766439s ago: executing program 36 (id=1711): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 2m57.248567059s ago: executing program 9 (id=2231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 2m57.119644699s ago: executing program 9 (id=2234): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)='#\x00', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)="e52f666977367a89e47582a836a8e9e0d5d51ce65678bdcdf7a05a3b5689f55d3b3e2eacd8e40752cbcd818f58813a90dc4b3cc5a17fa1bd38a1108962f45b45dbfe31", 0x43}, {&(0x7f0000001d40)="f2631aad78bfcceb8580f545d3188563c92c9877277758980f27bf79582efe86a31b0f496cc8f015894d2292d4f554542b00f8ffff62d43fe990bc68d6281e62b6704e93e83062be8334ceac6e65662e225f463e29fc7811812b7d34bd6809ced2b61922b48374f897fde8d2a6ae3e10444fd1248bb7bcbc86db337ef06356be49f869a976ae988df97b0c78ab04b8073f7d29375f1391b6574c3f4c3601141f220fe174fd10692512a2309886", 0xad}, {&(0x7f0000000cc0)="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", 0x137}], 0x3}}], 0x2, 0x0) 2m56.938899279s ago: executing program 9 (id=2237): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)='P', 0x1}], 0x1}}], 0x1, 0x840) 2m56.877045308s ago: executing program 9 (id=2240): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 2m56.876376009s ago: executing program 9 (id=2242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2m56.640422338s ago: executing program 9 (id=2257): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x642582, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 2m56.587879958s ago: executing program 37 (id=2257): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x642582, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 2m46.849646272s ago: executing program 4 (id=2604): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 2m46.807940023s ago: executing program 4 (id=2606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4136], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0xfffffff, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x805, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4ba6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7e98263b, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xfffffffe, 0x0, 0xbffffffe, 0x6, 0xc3ef, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x3, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m46.792221872s ago: executing program 4 (id=2608): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) personality(0x400000b) 2m46.572852242s ago: executing program 4 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2m46.476482982s ago: executing program 4 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x788, 0x3, 0x0, 0x6}) 2m46.439521931s ago: executing program 4 (id=2618): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capget(0x0, 0x0) 2m46.375201361s ago: executing program 38 (id=2618): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capget(0x0, 0x0) 2m26.731246351s ago: executing program 7 (id=3256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 2m26.5318715s ago: executing program 7 (id=3265): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2m26.385928879s ago: executing program 7 (id=3271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) 2m26.275787819s ago: executing program 7 (id=3277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2m26.228882029s ago: executing program 7 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x7000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000306010200000000000000000000000005000100d1"], 0x1c}}, 0x0) 2m26.092748599s ago: executing program 7 (id=3282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0xb0}}, 0x0) 2m26.075593149s ago: executing program 39 (id=3282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0xb0}}, 0x0) 2m7.0221464s ago: executing program 3 (id=4012): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 2m6.989783409s ago: executing program 3 (id=4014): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1053b0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2m6.737248769s ago: executing program 3 (id=4023): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000002c0)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2m6.700508319s ago: executing program 3 (id=4026): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x100d002, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) 2m6.700009749s ago: executing program 3 (id=4027): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) 2m6.546233608s ago: executing program 3 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m6.546109808s ago: executing program 40 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m5.973042677s ago: executing program 6 (id=4052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x20) 2m5.911878077s ago: executing program 6 (id=4054): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="96", 0x1}, 0x0]) 2m5.678784236s ago: executing program 6 (id=4059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) 2m5.592998725s ago: executing program 6 (id=4060): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x2000410, &(0x7f0000000140), 0x1, 0x7b1, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2m5.405800575s ago: executing program 6 (id=4066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m4.933513584s ago: executing program 6 (id=4078): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000700), 0xe, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a30d100007006000000002000020d3"]) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.872563924s ago: executing program 41 (id=4078): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000700), 0xe, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a30d100007006000000002000020d3"]) close_range(r0, 0xffffffffffffffff, 0x0) 4.368003191s ago: executing program 5 (id=8311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) 4.230734051s ago: executing program 5 (id=8315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206417000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.368657239s ago: executing program 2 (id=8351): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) 2.485460107s ago: executing program 2 (id=8372): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000b00)=""/182, 0xb6) ppoll(&(0x7f0000000780)=[{r1}], 0x1, 0x0, 0x0, 0x0) 1.940217695s ago: executing program 1 (id=8383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.871386845s ago: executing program 1 (id=8386): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f00000001c0)) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="9b", 0x1, 0x4004084, 0x0, 0x0) 1.855335575s ago: executing program 1 (id=8389): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 1.720019515s ago: executing program 1 (id=8393): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) 1.428955333s ago: executing program 5 (id=8315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206417000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 579.903132ms ago: executing program 5 (id=8395): r0 = io_uring_setup(0x3698, &(0x7f0000000340)={0x0, 0x6faf, 0x1, 0x0, 0x2e1}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200), 0xc) read(r1, &(0x7f0000000540)=""/67, 0x43) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) 579.104372ms ago: executing program 0 (id=8396): r0 = io_uring_setup(0x79bc, &(0x7f0000000140)={0x0, 0x4, 0x40, 0x4, 0x376}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 571.320362ms ago: executing program 1 (id=8397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c40)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) 571.078372ms ago: executing program 2 (id=8406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 539.317071ms ago: executing program 0 (id=8398): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone(0xd53e2180, 0x0, 0x0, 0x0, 0x0, 0x0) 490.579111ms ago: executing program 1 (id=8400): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00'}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 490.030111ms ago: executing program 2 (id=8401): mmap(&(0x7f0000334000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x8f1e4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 426.568171ms ago: executing program 5 (id=8402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r2, 0x4004550c, 0x0) 426.035141ms ago: executing program 8 (id=8414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 385.987021ms ago: executing program 2 (id=8403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 355.101981ms ago: executing program 8 (id=8404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="cf", 0x1}], 0x1}}], 0x1, 0x400c005) close(r2) 316.394671ms ago: executing program 2 (id=8407): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 312.083931ms ago: executing program 8 (id=8408): socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) 262.6122ms ago: executing program 8 (id=8409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) 262.313171ms ago: executing program 0 (id=8410): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x2000000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0xffffff00, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x7, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 196.051941ms ago: executing program 8 (id=8411): unshare(0x2040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) 184.122371ms ago: executing program 5 (id=8412): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 153.291451ms ago: executing program 0 (id=8413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 110.17939ms ago: executing program 8 (id=8415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x1, 0x3c, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x28, 0x0, @gue={{0x2, 0x1, 0x1, 0xf8, 0x100}, "52d2c29a490ac3424e7ecf951957855c0d6e3aafe54a2dab"}}}}}, 0x4a) 62.17511ms ago: executing program 0 (id=8416): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x211}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=8417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRESHEX], 0x1, 0x11f4, &(0x7f0000001280)="$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") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)='\f', 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) kernel console output (not intermixed with test programs): 0 [ 220.066182][T19157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.074846][T19157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.085288][ T8] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.306946][T19189] hub 5-0:1.0: USB hub found [ 220.312152][T19189] hub 5-0:1.0: 8 ports detected [ 220.381162][T19203] rdma_op ffff888102df3180 conn xmit_rdma 0000000000000000 [ 220.488083][T19221] 9pnet_fd: Insufficient options for proto=fd [ 220.563167][T19235] netlink: 'syz.0.6365': attribute type 3 has an invalid length. [ 220.689549][ T3372] tipc: Node number set to 2886997007 [ 220.908496][T19283] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6386'. [ 220.934326][T19285] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6389'. [ 220.984357][T19291] bpf_get_probe_write_proto: 5 callbacks suppressed [ 220.984373][T19291] syz.5.6392[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.991152][T19291] syz.5.6392[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.996333][T19289] lo speed is unknown, defaulting to 1000 [ 221.002720][T19291] syz.5.6392[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.148862][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 221.148887][ T29] audit: type=1326 audit(1737099656.291:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.0.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.215372][ T29] audit: type=1326 audit(1737099656.351:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.0.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.239073][ T29] audit: type=1326 audit(1737099656.351:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.0.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.262991][ T29] audit: type=1326 audit(1737099656.351:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.0.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.356461][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6401'. [ 221.374087][ T29] audit: type=1326 audit(1737099656.521:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.397687][ T29] audit: type=1326 audit(1737099656.521:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.425253][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6402'. [ 221.447866][ T29] audit: type=1326 audit(1737099656.571:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.471765][ T29] audit: type=1326 audit(1737099656.571:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.495328][ T29] audit: type=1326 audit(1737099656.571:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.518904][ T29] audit: type=1326 audit(1737099656.571:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.0.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 221.599898][T19308] Set syz1 is full, maxelem 65536 reached [ 221.779351][T19342] loop2: detected capacity change from 0 to 512 [ 221.838048][T19342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.895075][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.191031][T19391] program syz.1.6434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.230697][T19375] lo speed is unknown, defaulting to 1000 [ 222.337207][T19375] chnl_net:caif_netlink_parms(): no params data found [ 222.441109][T19418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 222.467002][T19375] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.474228][T19375] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.481453][T19375] bridge_slave_0: entered allmulticast mode [ 222.487920][T19375] bridge_slave_0: entered promiscuous mode [ 222.494845][T19375] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.502064][T19375] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.509259][T19375] bridge_slave_1: entered allmulticast mode [ 222.515875][T19375] bridge_slave_1: entered promiscuous mode [ 222.582452][T19375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.593136][T19375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.628982][T19375] team0: Port device team_slave_0 added [ 222.636316][T19375] team0: Port device team_slave_1 added [ 222.656627][T19375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.663646][T19375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.689633][T19375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.712831][T19375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.719900][T19375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.746484][T19375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.788910][T19375] hsr_slave_0: entered promiscuous mode [ 222.797519][T19375] hsr_slave_1: entered promiscuous mode [ 222.807375][T19375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.818765][T19375] Cannot create hsr debugfs directory [ 223.083503][T19375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.092626][T19375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.101030][T19375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.109951][T19375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.144783][T19375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.157264][T19375] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.166912][T12835] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.174081][T12835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.185545][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.192649][T11651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.257901][T19375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.367848][T19375] veth0_vlan: entered promiscuous mode [ 223.376190][T19375] veth1_vlan: entered promiscuous mode [ 223.392597][T19375] veth0_macvtap: entered promiscuous mode [ 223.400119][T19375] veth1_macvtap: entered promiscuous mode [ 223.410535][T19375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.421208][T19375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.432237][T19375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.443611][T19375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.454267][T19375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.464891][T19375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.474988][T19375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.483834][T19375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.492669][T19375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.501387][T19375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.541618][T19471] syz.5.6429[19471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.541696][T19471] syz.5.6429[19471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.553546][T19471] syz.5.6429[19471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.703814][T19484] loop2: detected capacity change from 0 to 512 [ 223.743724][T19488] __nla_validate_parse: 2 callbacks suppressed [ 223.743755][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6467'. [ 223.792453][T19484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6465: bg 0: block 248: padding at end of block bitmap is not set [ 223.807499][T19484] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6465: Failed to acquire dquot type 1 [ 223.822022][T19484] EXT4-fs (loop2): 1 truncate cleaned up [ 223.828232][T19484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.842462][T19484] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.018508][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.091229][T19513] vhci_hcd: invalid port number 15 [ 224.096404][T19513] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 224.131274][T19517] sctp: [Deprecated]: syz.8.6478 (pid 19517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.131274][T19517] Use struct sctp_sack_info instead [ 224.465091][T19534] lo speed is unknown, defaulting to 1000 [ 224.647834][T19547] IPVS: Error connecting to the multicast addr [ 224.726189][T19506] Set syz1 is full, maxelem 65536 reached [ 224.747501][T19553] loop5: detected capacity change from 0 to 2048 [ 224.759730][T19534] syz.0.6486[19534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.759802][T19534] syz.0.6486[19534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.771438][T19534] syz.0.6486[19534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.787882][T19554] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.829776][T19553] loop5: p1 p2 p3 [ 225.185734][T19595] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6512'. [ 225.317962][T19601] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6516'. [ 225.588423][T19588] Set syz1 is full, maxelem 65536 reached [ 225.628259][T19614] hub 9-0:1.0: USB hub found [ 225.651205][T19614] hub 9-0:1.0: 8 ports detected [ 225.959974][T19649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.968496][T19649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.000216][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6538'. [ 226.009295][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6538'. [ 226.018352][T19649] netlink: 'syz.1.6538': attribute type 18 has an invalid length. [ 226.081894][T19661] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6543'. [ 226.241404][T19680] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 226.268006][T19683] netlink: 'syz.0.6551': attribute type 153 has an invalid length. [ 226.318368][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 226.318385][ T29] audit: type=1326 audit(1737099661.461:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.368096][ T29] audit: type=1326 audit(1737099661.501:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.391708][ T29] audit: type=1326 audit(1737099661.501:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.415294][ T29] audit: type=1326 audit(1737099661.501:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.438944][ T29] audit: type=1326 audit(1737099661.501:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.462517][ T29] audit: type=1326 audit(1737099661.501:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.486004][ T29] audit: type=1326 audit(1737099661.501:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.509523][ T29] audit: type=1326 audit(1737099661.501:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.533101][ T29] audit: type=1326 audit(1737099661.501:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.556728][ T29] audit: type=1326 audit(1737099661.501:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.2.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93d955d29 code=0x7ffc0000 [ 226.662373][T19709] syz.8.6564[19709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.662837][T19709] syz.8.6564[19709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.675829][T19709] syz.8.6564[19709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.691395][T19709] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.711142][T19709] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.719479][T19709] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.727697][T19709] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.736096][T19709] vxlan0: entered promiscuous mode [ 226.741315][T19709] vxlan0: entered allmulticast mode [ 226.754057][T19709] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.762504][T19709] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.770944][T19709] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.779352][T19709] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.823894][T19717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.831638][T19717] batadv_slave_0: entered promiscuous mode [ 226.839767][T19717] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 227.184655][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'. [ 227.197521][T19738] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 227.257955][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'. [ 227.314231][T19767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6590'. [ 227.357354][T19775] syz.1.6594[19775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.357432][T19775] syz.1.6594[19775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.374209][T19775] syz.1.6594[19775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.430444][T19787] syz.8.6599[19787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.461771][T19787] syz.8.6599[19787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.482003][T19787] syz.8.6599[19787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.498714][T19796] netlink: 'syz.5.6604': attribute type 10 has an invalid length. [ 227.529452][T19796] syz_tun: entered promiscuous mode [ 227.538934][T19796] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 227.575837][T19800] lo speed is unknown, defaulting to 1000 [ 227.678424][T19811] lo speed is unknown, defaulting to 1000 [ 227.740741][T19819] syz.8.6606[19819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.789588][T19821] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.809818][T19821] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.818697][T19821] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.827484][T19821] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.967883][T19841] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 227.967883][T19841] n'º|$@OOݱµ’-®+·el' [ 228.128733][T19860] loop2: detected capacity change from 0 to 1024 [ 228.149868][T19860] EXT4-fs: Ignoring removed orlov option [ 228.175114][T19860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.203662][T19860] Invalid option length (303) for dns_resolver key [ 228.403063][T19876] bond3 (unregistering): Released all slaves [ 228.886089][T19900] loop5: detected capacity change from 0 to 1024 [ 228.920051][T19900] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.931085][T19900] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 228.949591][T19900] JBD2: no valid journal superblock found [ 228.955451][T19900] EXT4-fs (loop5): Could not load journal inode [ 228.981742][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.327959][T19959] netlink: 'syz.1.6677': attribute type 1 has an invalid length. [ 229.369555][T19959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.386984][T19968] lo speed is unknown, defaulting to 1000 [ 229.410686][T19959] bond3: (slave gretap1): making interface the new active one [ 229.418967][T19959] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 229.433413][T19971] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 229.735776][ T3374] kernel write not supported for file /941/attr/exec (pid: 3374 comm: kworker/0:4) [ 229.799395][T19984] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 229.799395][T19984] n'º|$@OOݱµ’-®+·el' [ 230.124844][T20012] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6702'. [ 230.253653][T20026] sd 0:0:1:0: device reset [ 230.263484][T20020] loop5: detected capacity change from 0 to 512 [ 230.330468][T20020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.343944][T20020] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.399546][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.478167][T20056] loop2: detected capacity change from 0 to 128 [ 230.541472][T20056] syz.2.6720: attempt to access beyond end of device [ 230.541472][T20056] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 231.087669][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 231.099196][T20092] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.107501][T20092] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.115784][T20092] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.124043][T20092] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.133246][T20092] vxlan0: entered promiscuous mode [ 231.138564][T20092] vxlan0: entered allmulticast mode [ 231.140688][T20097] 9pnet: p9_errstr2errno: server reported unknown error ZO¹›~Žt%u*jjX§d8Šè Sé4RŠ™›­Ô×_ [ 231.210742][T20101] lo speed is unknown, defaulting to 1000 [ 231.246807][T20101] block device autoloading is deprecated and will be removed. [ 231.434050][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 231.434069][ T29] audit: type=1326 audit(1737099666.581:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.490132][ T29] audit: type=1326 audit(1737099666.621:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.513832][ T29] audit: type=1326 audit(1737099666.621:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.537597][ T29] audit: type=1326 audit(1737099666.621:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.561303][ T29] audit: type=1326 audit(1737099666.621:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.584900][ T29] audit: type=1326 audit(1737099666.621:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.608433][ T29] audit: type=1326 audit(1737099666.621:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.632004][ T29] audit: type=1326 audit(1737099666.621:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.655554][ T29] audit: type=1326 audit(1737099666.621:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.679506][ T29] audit: type=1326 audit(1737099666.621:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20122 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 231.887313][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6762'. [ 231.896402][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6762'. [ 231.942156][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6764'. [ 232.062480][T20169] team0: Device gtp0 is of different type [ 232.216108][T20184] vlan2: entered allmulticast mode [ 232.241243][T20191] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 232.264644][T20193] vlan3: entered allmulticast mode [ 232.269845][T20193] bridge_slave_0: entered allmulticast mode [ 232.286300][T20193] bridge_slave_0: left allmulticast mode [ 232.338683][T20206] netlink: 'syz.5.6788': attribute type 8 has an invalid length. [ 232.600939][T20239] bpf_get_probe_write_proto: 11 callbacks suppressed [ 232.600955][T20239] syz.0.6804[20239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.616793][T20239] syz.0.6804[20239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.635192][T20239] syz.0.6804[20239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.698641][T20247] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 232.903210][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6816'. [ 233.221471][T20301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.230071][T20301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.392301][T20303] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.691128][T20320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6837'. [ 233.881346][ T6222] IPVS: starting estimator thread 0... [ 233.979127][T20348] IPVS: using max 2544 ests per chain, 127200 per kthread [ 234.219682][T20377] loop1: detected capacity change from 0 to 8192 [ 234.521331][T20385] lo speed is unknown, defaulting to 1000 [ 234.549770][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6869'. [ 234.675322][T20395] futex_wake_op: syz.1.6871 tries to shift op by -1; fix this program [ 234.700818][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6873'. [ 234.847511][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6878'. [ 234.960006][T20431] netlink: 'syz.5.6886': attribute type 10 has an invalid length. [ 234.980416][T20431] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.088661][T20446] loop5: detected capacity change from 0 to 8192 [ 235.171800][T20462] __nla_validate_parse: 1 callbacks suppressed [ 235.171818][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6901'. [ 235.278754][T20471] lo speed is unknown, defaulting to 1000 [ 235.287516][T20470] lo speed is unknown, defaulting to 1000 [ 235.739249][T20492] Falling back ldisc for ttyS3. [ 235.767212][T20496] syz.5.6917[20496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.767387][T20496] syz.5.6917[20496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.779042][T20496] syz.5.6917[20496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.853063][T20506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20506 comm=syz.8.6922 [ 235.877398][T20506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20506 comm=syz.8.6922 [ 235.902656][T20510] syz.2.6924[20510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.902790][T20510] syz.2.6924[20510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.928064][T20510] syz.2.6924[20510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.033431][T20528] loop1: detected capacity change from 0 to 1024 [ 236.051915][T20528] EXT4-fs: Ignoring removed orlov option [ 236.061825][T20528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.083194][T20528] Invalid option length (303) for dns_resolver key [ 236.994175][T13902] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.166266][T20562] batadv_slave_1: entered promiscuous mode [ 237.178422][T20562] syz_tun: entered promiscuous mode [ 237.185682][T20560] syz_tun: left promiscuous mode [ 237.190984][T20560] batadv_slave_1: left promiscuous mode [ 237.370368][T20569] lo speed is unknown, defaulting to 1000 [ 237.485168][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 237.485187][ T29] audit: type=1326 audit(1737099672.631:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.515097][ T29] audit: type=1326 audit(1737099672.631:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.540688][ T29] audit: type=1326 audit(1737099672.691:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.564442][ T29] audit: type=1326 audit(1737099672.691:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.588128][ T29] audit: type=1326 audit(1737099672.691:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.611679][ T29] audit: type=1326 audit(1737099672.691:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.635318][ T29] audit: type=1326 audit(1737099672.691:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.659096][ T29] audit: type=1326 audit(1737099672.691:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.691168][ T29] audit: type=1326 audit(1737099672.761:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.714726][ T29] audit: type=1326 audit(1737099672.761:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 237.817289][T20605] lo speed is unknown, defaulting to 1000 [ 237.873507][T20608] loop2: detected capacity change from 0 to 1024 [ 237.889667][T20608] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.907292][T20608] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 237.921517][T20608] EXT4-fs (loop2): orphan cleanup on readonly fs [ 237.928669][T20608] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 237.965081][T20608] EXT4-fs (loop2): Remounting filesystem read-only [ 237.973655][T20608] EXT4-fs (loop2): 1 orphan inode deleted [ 237.987021][T20608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 238.002593][T20608] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 238.009843][T20608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.065434][T20622] lo speed is unknown, defaulting to 1000 [ 238.099937][ T3374] IPVS: starting estimator thread 0... [ 238.178645][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6973'. [ 238.190315][T20626] IPVS: using max 2448 ests per chain, 122400 per kthread [ 238.233633][T20638] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6976'. [ 238.352260][T20645] vlan2: entered allmulticast mode [ 238.486316][T11651] IPVS: stop unused estimator thread 0... [ 238.748969][T20669] netlink: 'syz.8.6988': attribute type 27 has an invalid length. [ 238.767531][T20669] $Hÿ: left promiscuous mode [ 238.772943][T20669] bond0: left promiscuous mode [ 238.777740][T20669] ip6gretap1: left promiscuous mode [ 238.783079][T20669] bond0: left allmulticast mode [ 238.787961][T20669] ip6gretap1: left allmulticast mode [ 238.834352][T20672] loop5: detected capacity change from 0 to 1024 [ 238.845515][T20672] EXT4-fs: Ignoring removed orlov option [ 238.857499][T20672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.881040][T20672] Invalid option length (303) for dns_resolver key [ 238.916331][T20678] vlan3: entered allmulticast mode [ 238.921563][T20678] bridge_slave_0: entered allmulticast mode [ 238.931328][T20678] bridge_slave_0: left allmulticast mode [ 238.940006][T20682] syz.0.6994[20682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.940215][T20682] syz.0.6994[20682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.951849][T20682] syz.0.6994[20682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.137711][T20690] syz.8.6996[20690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.179258][T20690] syz.8.6996[20690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.194712][T20690] syz.8.6996[20690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.360339][T20696] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6998'. [ 239.637747][ T6222] kernel write not supported for file /1104/projid_map (pid: 6222 comm: kworker/1:15) [ 239.698856][T20710] loop2: detected capacity change from 0 to 512 [ 239.706198][T20710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.719665][T20710] EXT4-fs (loop2): 1 truncate cleaned up [ 239.725701][T20710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.781324][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.820909][T20713] netlink: 'syz.2.7006': attribute type 3 has an invalid length. [ 239.854406][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.152998][T20738] Invalid option length (303) for dns_resolver key [ 240.925927][T20771] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7032'. [ 241.022959][T20777] syz.1.7035[20777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.023089][T20777] syz.1.7035[20777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.067764][T20777] syz.1.7035[20777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.167008][T20783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20783 comm=syz.1.7037 [ 241.191213][T20783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20783 comm=syz.1.7037 [ 241.204662][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7038'. [ 241.252215][T20786] loop5: detected capacity change from 0 to 512 [ 241.268956][T20786] EXT4-fs: inline encryption not supported [ 241.595260][T20806] syz.8.7046[20806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.599222][T20806] atomic_op ffff88811207b928 conn xmit_atomic 0000000000000000 [ 241.624098][T20786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.654965][T20786] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.683984][T20786] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.7039: corrupted inode contents [ 241.696378][T20786] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.7039: mark_inode_dirty error [ 241.717795][T20786] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.7039: corrupted inode contents [ 241.737168][T20786] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.7039: corrupted inode contents [ 241.766368][T20786] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.7039: mark_inode_dirty error [ 241.786378][T20786] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.7039: corrupted inode contents [ 241.801285][T20786] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.7039: mark_inode_dirty error [ 241.818300][T20786] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.7039: corrupted inode contents [ 241.834948][T20786] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.7039: mark_inode_dirty error [ 241.890185][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.439200][T20876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7078'. [ 242.454463][T20876] bond1: entered promiscuous mode [ 242.471207][T20876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.479894][T20876] bond2: entered promiscuous mode [ 242.485179][T20876] bond1: (slave bond2): Enslaving as an active interface with an up link [ 242.501135][T20876] bond1 (unregistering): (slave bond2): Releasing backup interface [ 242.510199][T20876] bond2: left promiscuous mode [ 242.516338][T20876] bond1 (unregistering): Released all slaves [ 242.618119][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 242.618135][ T29] audit: type=1326 audit(1737099677.761:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.5.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 242.648277][ T29] audit: type=1326 audit(1737099677.761:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.5.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 242.672027][ T29] audit: type=1326 audit(1737099677.761:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.5.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 242.695600][ T29] audit: type=1326 audit(1737099677.761:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.5.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 242.719218][ T29] audit: type=1326 audit(1737099677.771:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.5.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 242.893458][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7091'. [ 242.918116][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7091'. [ 243.081377][ T29] audit: type=1400 audit(1737099678.231:7601): avc: denied { setopt } for pid=20920 comm="syz.2.7107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.123329][ T29] audit: type=1400 audit(1737099678.271:7602): avc: denied { setopt } for pid=20924 comm="syz.2.7098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.309956][ T29] audit: type=1400 audit(1737099678.461:7603): avc: denied { name_bind } for pid=20934 comm="syz.2.7102" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 243.420657][T20943] netlink: 'syz.0.7105': attribute type 39 has an invalid length. [ 244.057195][T20977] atomic_op ffff8881166bb928 conn xmit_atomic 0000000000000000 [ 244.276931][ T29] audit: type=1326 audit(1737099679.421:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20998 comm="syz.8.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efca7d9cce7 code=0x7ffc0000 [ 244.320641][ T29] audit: type=1326 audit(1737099679.451:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20998 comm="syz.8.7131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efca7d41f29 code=0x7ffc0000 [ 244.482247][T21016] netlink: 'syz.8.7138': attribute type 3 has an invalid length. [ 244.578385][T21030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7145'. [ 244.881834][T21060] bpf_get_probe_write_proto: 3 callbacks suppressed [ 244.881853][T21060] syz.0.7159[21060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.889168][T21060] syz.0.7159[21060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.900751][T21060] syz.0.7159[21060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.012415][T21071] 9pnet_fd: Insufficient options for proto=fd [ 245.285506][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7175'. [ 245.294493][T21097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7175'. [ 245.516446][T21119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7186'. [ 245.571143][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7189'. [ 245.931167][T21154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7200'. [ 246.062632][T21161] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7203'. [ 246.284026][T21185] loop5: detected capacity change from 0 to 512 [ 246.311656][T21185] EXT4-fs (loop5): too many log groups per flexible block group [ 246.319486][T21185] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 246.327668][T21185] EXT4-fs (loop5): mount failed [ 246.355454][T21200] loop5: detected capacity change from 0 to 164 [ 246.365496][T21200] syz.5.7218: attempt to access beyond end of device [ 246.365496][T21200] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 246.379597][T21200] syz.5.7218: attempt to access beyond end of device [ 246.379597][T21200] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 246.438126][T21207] loop5: detected capacity change from 0 to 1024 [ 246.445701][T21207] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 246.460719][T21207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.374512][T21206] syz.5.7222 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 247.385587][T21206] CPU: 0 UID: 0 PID: 21206 Comm: syz.5.7222 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 247.396381][T21206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.406468][T21206] Call Trace: [ 247.409760][T21206] [ 247.412700][T21206] dump_stack_lvl+0xf2/0x150 [ 247.417348][T21206] dump_stack+0x15/0x1a [ 247.421549][T21206] dump_header+0x83/0x2d0 [ 247.425950][T21206] oom_kill_process+0x341/0x4c0 [ 247.430840][T21206] out_of_memory+0x9af/0xbe0 [ 247.435517][T21206] ? css_next_descendant_pre+0x11c/0x140 [ 247.441238][T21206] mem_cgroup_out_of_memory+0x13e/0x190 [ 247.446836][T21206] try_charge_memcg+0x508/0x7f0 [ 247.451912][T21206] charge_memcg+0x50/0xc0 [ 247.456281][T21206] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 247.462357][T21206] __read_swap_cache_async+0x236/0x480 [ 247.467854][T21206] swap_cluster_readahead+0x279/0x3f0 [ 247.473266][T21206] swapin_readahead+0xe4/0x6f0 [ 247.478071][T21206] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 247.483795][T21206] ? swap_cache_get_folio+0x77/0x210 [ 247.489105][T21206] do_swap_page+0x31b/0x2550 [ 247.493767][T21206] ? probe_sched_wakeup+0x81/0xa0 [ 247.498844][T21206] ? ttwu_do_activate+0x206/0x240 [ 247.503927][T21206] ? __rcu_read_lock+0x36/0x50 [ 247.508807][T21206] ? __pfx_default_wake_function+0x10/0x10 [ 247.514648][T21206] handle_mm_fault+0x8e4/0x2ac0 [ 247.519622][T21206] exc_page_fault+0x3b9/0x650 [ 247.524344][T21206] asm_exc_page_fault+0x26/0x30 [ 247.529231][T21206] RIP: 0033:0x7f42d30df529 [ 247.533770][T21206] Code: 39 f0 73 46 49 89 34 24 48 89 ce 48 89 4f f8 49 8b 14 24 49 8b 4c 24 08 eb 85 0f 1f 80 00 00 00 00 48 89 fe 4c 89 ea 48 89 df f2 fe ff ff 48 89 d8 4c 29 e0 48 3d 80 00 00 00 7e 7f 4d 85 ed [ 247.553428][T21206] RSP: 002b:00007ffdde4c3150 EFLAGS: 00010202 [ 247.559550][T21206] RAX: 00007f42d2af98f0 RBX: 00007f42d2af98f8 RCX: ffffffff815e3e90 [ 247.567552][T21206] RDX: 0000000000000016 RSI: 00007f42d2af9b50 RDI: 00007f42d2af98f8 [ 247.575588][T21206] RBP: 00007f42d2af97d8 R08: 00007f42d2af9990 R09: 00007f42d33e2000 [ 247.583639][T21206] R10: 00007f42d287f008 R11: 0000000000000006 R12: 00007f42d2af97d0 [ 247.591634][T21206] R13: 0000000000000016 R14: 0000000000000032 R15: 00007f42d287f008 [ 247.599626][T21206] ? page_vma_mapped_walk+0xa0/0xb90 [ 247.605013][T21206] [ 247.608233][T21206] memory: usage 307200kB, limit 307200kB, failcnt 320 [ 247.615104][T21206] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 247.623118][T21206] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 247.630457][T21206] Memory cgroup stats for /syz5: [ 247.633780][T21206] cache 20480 [ 247.642044][T21206] rss 0 [ 247.644870][T21206] shmem 0 [ 247.647852][T21206] mapped_file 0 [ 247.651487][T21206] dirty 0 [ 247.654463][T21206] writeback 0 [ 247.657751][T21206] workingset_refault_anon 2552 [ 247.662704][T21206] workingset_refault_file 0 [ 247.667331][T21206] swap 724992 [ 247.670644][T21206] swapcached 0 [ 247.674025][T21206] pgpgin 177334 [ 247.677540][T21206] pgpgout 177329 [ 247.681128][T21206] pgfault 217178 [ 247.684721][T21206] pgmajfault 364 [ 247.688273][T21206] inactive_anon 0 [ 247.692084][T21206] active_anon 0 [ 247.695559][T21206] inactive_file 0 [ 247.699339][T21206] active_file 20480 [ 247.703247][T21206] unevictable 0 [ 247.706732][T21206] hierarchical_memory_limit 314572800 [ 247.712305][T21206] hierarchical_memsw_limit 9223372036854771712 [ 247.718510][T21206] total_cache 20480 [ 247.722342][T21206] total_rss 0 [ 247.725705][T21206] total_shmem 0 [ 247.729182][T21206] total_mapped_file 0 [ 247.733216][T21206] total_dirty 0 [ 247.736681][T21206] total_writeback 0 [ 247.740544][T21206] total_workingset_refault_anon 2552 [ 247.745830][T21206] total_workingset_refault_file 0 [ 247.750883][T21206] total_swap 724992 [ 247.754783][T21206] total_swapcached 0 [ 247.758718][T21206] total_pgpgin 177334 [ 247.762756][T21206] total_pgpgout 177329 [ 247.766880][T21206] total_pgfault 217178 [ 247.770968][T21206] total_pgmajfault 364 [ 247.775090][T21206] total_inactive_anon 0 [ 247.779322][T21206] total_active_anon 0 [ 247.783348][T21206] total_inactive_file 0 [ 247.787557][T21206] total_active_file 20480 [ 247.791917][T21206] total_unevictable 0 [ 247.795963][T21206] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7222,pid=21206,uid=0 [ 247.810690][T21206] Memory cgroup out of memory: Killed process 21206 (syz.5.7222) total-vm:95564kB, anon-rss:788kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 247.852198][T21246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7236'. [ 248.293417][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 248.293507][ T29] audit: type=1326 audit(1737099683.441:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.363833][ T29] audit: type=1326 audit(1737099683.471:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.387511][ T29] audit: type=1326 audit(1737099683.471:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.411097][ T29] audit: type=1326 audit(1737099683.471:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.434751][ T29] audit: type=1326 audit(1737099683.471:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.458311][ T29] audit: type=1326 audit(1737099683.471:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.481818][ T29] audit: type=1326 audit(1737099683.471:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.505351][ T29] audit: type=1326 audit(1737099683.471:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.528916][ T29] audit: type=1326 audit(1737099683.471:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.552458][ T29] audit: type=1326 audit(1737099683.471:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.8.7240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 248.697758][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.322370][T21370] can0: slcan on pts0. [ 249.379178][T21374] syz.0.7260[21374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.379256][T21374] syz.0.7260[21374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.390926][T21374] syz.0.7260[21374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.404395][T21370] can0 (unregistered): slcan off pts0. [ 249.432918][T21379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7262'. [ 249.434480][T21381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7263'. [ 249.491713][T21385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7265'. [ 249.733338][T21384] Set syz1 is full, maxelem 65536 reached [ 249.735489][T21395] syz.0.7269[21395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.739486][T21395] syz.0.7269[21395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.751089][T21395] syz.0.7269[21395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.833638][T21403] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 249.853606][T21403] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 249.858446][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7275'. [ 249.908622][T21413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7278'. [ 249.917810][T21413] netlink: 'syz.0.7278': attribute type 1 has an invalid length. [ 249.925676][T21413] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7278'. [ 249.937319][T21413] vlan2: entered allmulticast mode [ 249.945680][T21413] netlink: 'syz.0.7278': attribute type 6 has an invalid length. [ 250.008662][T21423] SELinux: security_context_str_to_sid (J) failed with errno=-22 [ 250.113051][T21433] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.141538][T21444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7302'. [ 250.192589][T21447] loop5: detected capacity change from 0 to 2048 [ 250.212542][T21447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.300835][T21447] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 250.327478][T21447] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 1600 with max blocks 32 with error 28 [ 250.340208][T21447] EXT4-fs (loop5): This should not happen!! Data will be lost [ 250.340208][T21447] [ 250.349924][T21447] EXT4-fs (loop5): Total free blocks count 0 [ 250.355973][T21447] EXT4-fs (loop5): Free/Dirty block details [ 250.361254][T21456] netlink: 'syz.0.7295': attribute type 3 has an invalid length. [ 250.361936][T21447] EXT4-fs (loop5): free_blocks=2415919104 [ 250.375572][T21447] EXT4-fs (loop5): dirty_blocks=32 [ 250.380739][T21447] EXT4-fs (loop5): Block reservation details [ 250.386761][T21447] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 250.422786][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.551772][T21481] xt_hashlimit: size too large, truncated to 1048576 [ 250.570772][T21485] loop2: detected capacity change from 0 to 128 [ 250.577667][T21485] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.601865][T21485] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.814726][T21498] syz.0.7313[21498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.814796][T21498] syz.0.7313[21498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.826380][T21498] syz.0.7313[21498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.095769][T21519] syz.0.7325[21519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.107522][T21519] syz.0.7325[21519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.128043][T21519] syz.0.7325[21519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.406922][T21547] netlink: zone id is out of range [ 251.423585][T21547] netlink: zone id is out of range [ 251.438468][T21547] netlink: set zone limit has 4 unknown bytes [ 251.535880][T21556] can0: slcan on pts0. [ 251.579151][T21556] can0 (unregistered): slcan off pts0. [ 251.709308][T21576] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.445120][T21621] ipvlan2: entered allmulticast mode [ 252.450591][T21621] macvlan0: entered allmulticast mode [ 252.455991][T21621] veth1_vlan: entered allmulticast mode [ 252.622496][T21635] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7378'. [ 252.661454][T21639] serio: Serial port ptm0 [ 252.869418][T21656] syz.0.7387[21656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.869523][T21656] syz.0.7387[21656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.888184][T21656] syz.0.7387[21656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.998436][T21669] lo speed is unknown, defaulting to 1000 [ 253.207886][T21693] syz.8.7403[21693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.533697][T21718] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7416'. [ 253.586657][T21726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7419'. [ 253.835099][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 253.835115][ T29] audit: type=1326 audit(1737099688.981:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21758 comm="syz.5.7432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 253.911651][T21763] SELinux: security_context_str_to_sid (@) failed with errno=-22 [ 253.933116][ T29] audit: type=1326 audit(1737099689.021:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21758 comm="syz.5.7432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 253.956762][ T29] audit: type=1326 audit(1737099689.021:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21758 comm="syz.5.7432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 253.980441][ T29] audit: type=1326 audit(1737099689.021:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21758 comm="syz.5.7432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 253.983932][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x1 [ 254.011498][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.019042][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.026461][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.033902][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x2 [ 254.041319][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.048723][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.056140][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.063562][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.071061][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x4 [ 254.078645][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.086082][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.093491][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x2 [ 254.101000][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.108420][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.115881][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.123301][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.130757][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.138229][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.145712][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.153193][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.160612][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.168008][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.175443][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.182868][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.190350][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.197776][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.205247][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.212661][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.220162][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.227617][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.235035][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.242562][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.250077][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.257496][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.264915][ T8] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 254.277263][ T8] hid-generic 0000:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 254.320445][T21757] Set syz1 is full, maxelem 65536 reached [ 254.698753][T21803] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 254.711417][T21802] IPVS: stopping master sync thread 21803 ... [ 254.765550][T21811] loop5: detected capacity change from 0 to 7 [ 254.782638][T21811] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.802694][T21811] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.810634][T21811] loop5: unable to read partition table [ 254.826535][T21811] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 254.826535][T21811] ) failed (rc=-5) [ 254.907440][T21821] loop5: detected capacity change from 0 to 256 [ 254.920179][T21821] FAT-fs (loop5): bogus number of FAT sectors [ 254.926307][T21821] FAT-fs (loop5): Can't find a valid FAT filesystem [ 255.137710][ T29] audit: type=1326 audit(1737099690.281:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.8.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 255.175081][ T29] audit: type=1326 audit(1737099690.281:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.8.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 255.198956][ T29] audit: type=1326 audit(1737099690.311:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.8.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 255.222841][ T29] audit: type=1326 audit(1737099690.311:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.8.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 255.246512][ T29] audit: type=1326 audit(1737099690.311:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.8.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 255.270223][ T29] audit: type=1326 audit(1737099690.311:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21835 comm="syz.8.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 255.353397][T21843] tmpfs: Bad value for 'mpol' [ 255.378089][T21849] loop5: detected capacity change from 0 to 256 [ 255.394608][T21849] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.562064][T21867] x_tables: duplicate underflow at hook 1 [ 255.740145][T21881] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.823851][T21890] bpf_get_probe_write_proto: 8 callbacks suppressed [ 255.823873][T21890] syz.2.7488[21890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.830730][T21890] syz.2.7488[21890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.842315][T21890] syz.2.7488[21890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.896806][T21894] random: crng reseeded on system resumption [ 256.273591][T21905] lo speed is unknown, defaulting to 1000 [ 256.316047][T21911] loop5: detected capacity change from 0 to 1024 [ 256.324742][T21911] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.335751][T21911] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 256.348436][T21911] JBD2: no valid journal superblock found [ 256.354323][T21911] EXT4-fs (loop5): Could not load journal inode [ 256.464647][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7502'. [ 256.805143][T21962] lo speed is unknown, defaulting to 1000 [ 256.864784][T21972] sd 0:0:1:0: device reset [ 257.134871][T21962] geneve0: entered promiscuous mode [ 257.140252][T21962] geneve0: entered allmulticast mode [ 257.149268][T22019] loop2: detected capacity change from 0 to 2048 [ 257.171233][T22019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.230274][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.297800][T22043] syz.8.7532[22043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.297981][T22043] syz.8.7532[22043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.314984][T22043] syz.8.7532[22043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.331934][ T8] kernel write not supported for file /1311/attr/exec (pid: 8 comm: kworker/0:0) [ 257.831493][T22138] bridge0: port 3(bond0) entered blocking state [ 257.837894][T22138] bridge0: port 3(bond0) entered disabled state [ 257.862502][T22138] bond0: entered allmulticast mode [ 257.867705][T22138] bond_slave_0: entered allmulticast mode [ 257.873484][T22138] bond_slave_1: entered allmulticast mode [ 257.879765][T22141] syz.1.7557[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.879839][T22141] syz.1.7557[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.884408][T22138] bond0: entered promiscuous mode [ 257.907838][T22138] bond_slave_0: entered promiscuous mode [ 257.913671][T22138] bond_slave_1: entered promiscuous mode [ 257.919933][T22141] syz.1.7557[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.989445][T22150] lo speed is unknown, defaulting to 1000 [ 258.189864][T22170] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 258.234298][T22173] loop2: detected capacity change from 0 to 256 [ 258.253422][T22173] FAT-fs (loop2): bogus number of FAT sectors [ 258.259604][T22173] FAT-fs (loop2): Can't find a valid FAT filesystem [ 258.426982][T22195] loop2: detected capacity change from 0 to 512 [ 258.457024][T22195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.472955][T22195] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.541266][T22207] lo speed is unknown, defaulting to 1000 [ 258.648236][T22219] program syz.1.7587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.661861][T22221] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.670673][T22221] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.679503][T22221] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.688274][T22221] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.703231][T22221] vxlan0: entered promiscuous mode [ 258.708495][T22221] vxlan0: entered allmulticast mode [ 258.715080][T22221] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.717075][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.724038][T22221] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.741903][T22221] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.750876][T22221] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.829540][T22231] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7594'. [ 258.832766][T22233] loop2: detected capacity change from 0 to 164 [ 258.906807][T22233] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 258.947926][T22247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7600'. [ 259.009755][T22252] loop2: detected capacity change from 0 to 2048 [ 259.039698][T22252] loop2: p1 < > p4 [ 259.045057][T22252] loop2: p4 size 8388608 extends beyond EOD, truncated [ 259.156656][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7612'. [ 259.198390][T22295] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 259.284219][T22308] random: crng reseeded on system resumption [ 259.335801][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 259.335818][ T29] audit: type=1326 audit(1737099694.481:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.1.7615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x0 [ 260.089429][T22446] program syz.2.7638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.103279][T22448] syz.0.7639[22448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.173753][ T29] audit: type=1400 audit(1737099695.321:8079): avc: denied { cmd } for pid=22457 comm="syz.2.7644" path="socket:[64257]" dev="sockfs" ino=64257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 260.284266][ T29] audit: type=1326 audit(1737099695.431:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.312077][ T29] audit: type=1326 audit(1737099695.451:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.335816][ T29] audit: type=1326 audit(1737099695.451:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.359399][ T29] audit: type=1326 audit(1737099695.451:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.382993][ T29] audit: type=1326 audit(1737099695.451:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.406723][ T29] audit: type=1326 audit(1737099695.451:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.430368][ T29] audit: type=1326 audit(1737099695.451:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.449334][T22476] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7653'. [ 260.453986][ T29] audit: type=1326 audit(1737099695.451:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22472 comm="syz.5.7651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 260.811443][T22527] xt_HMARK: spi-set and port-set can't be combined [ 260.842543][T22530] loop2: detected capacity change from 0 to 512 [ 260.849881][T22530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.868142][T22530] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 260.876417][T22530] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 260.880694][T22536] bpf_get_probe_write_proto: 8 callbacks suppressed [ 260.880714][T22536] syz.0.7679[22536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.885409][T22530] EXT4-fs (loop2): 1 truncate cleaned up [ 260.893236][T22536] syz.0.7679[22536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.904762][T22530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.909436][T22536] syz.0.7679[22536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.937520][T22530] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm syz.2.7677: lblock 0 mapped to illegal pblock 4 (length 1) [ 260.963497][T22530] EXT4-fs (loop2): Remounting filesystem read-only [ 260.984840][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.007442][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.014933][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.022407][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.032069][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.039538][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.046964][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.054482][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.061913][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.069342][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.076742][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.084241][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.091702][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.099140][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.106539][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.113977][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.121489][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.128896][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.136383][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.143936][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.153092][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.160560][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.167984][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.175464][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.182916][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.190404][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.197811][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.205246][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.212755][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.220195][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.227651][ T6222] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 261.235633][ T6222] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 261.527793][T22582] bond_slave_1: mtu less than device minimum [ 262.029493][T22626] loop5: detected capacity change from 0 to 2048 [ 262.325835][T22657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7733'. [ 262.351583][T22657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7733'. [ 262.495147][T22683] lo speed is unknown, defaulting to 1000 [ 262.827917][T22723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.836531][T22723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.911324][T22730] serio: Serial port ptm0 [ 263.197661][T22768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7783'. [ 263.206626][T22768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7783'. [ 263.220196][T22762] loop2: detected capacity change from 0 to 8192 [ 263.412693][T22788] atomic_op ffff888141a31928 conn xmit_atomic 0000000000000000 [ 263.455665][T22793] loop2: detected capacity change from 0 to 256 [ 263.464551][T22793] FAT-fs (loop2): bogus number of FAT sectors [ 263.470686][T22793] FAT-fs (loop2): Can't find a valid FAT filesystem [ 263.567993][T22798] veth0_virt_wifi: entered promiscuous mode [ 263.576388][T22798] veth0_virt_wifi: left promiscuous mode [ 263.760708][T22819] Cannot find del_set index 0 as target [ 263.808836][T22826] macvlan0: entered promiscuous mode [ 263.816755][T22826] ipvlan0: entered promiscuous mode [ 263.822596][T22826] ipvlan0: left promiscuous mode [ 263.827731][T22826] macvlan0: left promiscuous mode [ 263.925516][T22828] lo speed is unknown, defaulting to 1000 [ 263.939391][T22830] Falling back ldisc for ttyS3. [ 263.981100][T22833] loop5: detected capacity change from 0 to 512 [ 263.991419][T22833] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.7811: casefold flag without casefold feature [ 264.004434][T22833] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.7811: couldn't read orphan inode 15 (err -117) [ 264.017408][T22833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.051664][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.072173][T22837] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 264.078724][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.086174][T22837] vhci_hcd vhci_hcd.0: Device attached [ 264.093655][T22837] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 264.100257][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.107961][T22837] vhci_hcd vhci_hcd.0: Device attached [ 264.117522][T22837] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.135157][T22837] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 264.141882][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 264.149639][T22837] vhci_hcd vhci_hcd.0: Device attached [ 264.158489][T22837] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.167748][T22837] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 264.174410][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.182106][T22837] vhci_hcd vhci_hcd.0: Device attached [ 264.199317][T22837] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(15) [ 264.205976][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.213550][T22837] vhci_hcd vhci_hcd.0: Device attached [ 264.231116][T22837] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 264.237744][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.246049][T22837] vhci_hcd vhci_hcd.0: Device attached [ 264.261065][T22848] vhci_hcd: connection closed [ 264.261265][ T4717] vhci_hcd: stop threads [ 264.261384][T22846] vhci_hcd: connection closed [ 264.266058][ T4717] vhci_hcd: release socket [ 264.266069][ T4717] vhci_hcd: disconnect device [ 264.266182][T22842] vhci_hcd: connection closed [ 264.270699][T22844] vhci_hcd: connection closed [ 264.275420][ T6222] vhci_hcd: vhci_device speed not set [ 264.301135][ T4717] vhci_hcd: stop threads [ 264.305437][ T4717] vhci_hcd: release socket [ 264.309932][ T4717] vhci_hcd: disconnect device [ 264.314770][T22840] vhci_hcd: connection closed [ 264.315029][T22838] vhci_hcd: connection closed [ 264.329471][ T4717] vhci_hcd: stop threads [ 264.338468][ T4717] vhci_hcd: release socket [ 264.342960][ T4717] vhci_hcd: disconnect device [ 264.359317][ T4717] vhci_hcd: stop threads [ 264.363597][ T4717] vhci_hcd: release socket [ 264.368029][ T4717] vhci_hcd: disconnect device [ 264.380258][ T4717] vhci_hcd: stop threads [ 264.384581][ T4717] vhci_hcd: release socket [ 264.389044][ T4717] vhci_hcd: disconnect device [ 264.399370][ T4717] vhci_hcd: stop threads [ 264.403692][ T4717] vhci_hcd: release socket [ 264.408142][ T4717] vhci_hcd: disconnect device [ 264.419204][ T6222] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 264.426738][ T6222] usb 11-1: enqueue for inactive port 0 [ 264.439270][ T6222] usb 11-1: enqueue for inactive port 0 [ 264.444864][ T6222] usb 11-1: enqueue for inactive port 0 [ 264.529049][ T6222] vhci_hcd: vhci_device speed not set [ 264.550306][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 264.550322][ T29] audit: type=1326 audit(1737099699.701:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.585738][ T29] audit: type=1326 audit(1737099699.731:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.609465][ T29] audit: type=1326 audit(1737099699.731:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.633178][ T29] audit: type=1326 audit(1737099699.731:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.708388][ T29] audit: type=1326 audit(1737099699.731:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.732123][ T29] audit: type=1326 audit(1737099699.811:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.755708][ T29] audit: type=1326 audit(1737099699.811:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.779304][ T29] audit: type=1326 audit(1737099699.811:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.802947][ T29] audit: type=1326 audit(1737099699.811:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 264.826481][ T29] audit: type=1326 audit(1737099699.811:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22865 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 265.202064][T22904] loop2: detected capacity change from 0 to 8192 [ 265.250390][T22904] loop2: p1 p2 p3 p4 [ 265.259074][T22904] loop2: p1 start 51379968 is beyond EOD, truncated [ 265.279286][T22904] loop2: p3 size 100663552 extends beyond EOD, truncated [ 265.289944][T22904] loop2: p4 size 81920 extends beyond EOD, truncated [ 265.324483][T22921] atomic_op ffff88814113d928 conn xmit_atomic 0000000000000000 [ 265.397925][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7845'. [ 265.552618][T22945] bond0: left allmulticast mode [ 265.557723][T22945] bond_slave_0: left allmulticast mode [ 265.563324][T22945] bond_slave_1: left allmulticast mode [ 265.568866][T22945] bond0: left promiscuous mode [ 265.573731][T22945] bond_slave_0: left promiscuous mode [ 265.579425][T22945] bond_slave_1: left promiscuous mode [ 265.585001][T22945] bridge0: port 3(bond0) entered disabled state [ 265.593062][T22945] bridge_slave_0: left allmulticast mode [ 265.598734][T22945] bridge_slave_0: left promiscuous mode [ 265.604498][T22945] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.613428][T22945] bridge_slave_1: left allmulticast mode [ 265.619625][T22945] bridge_slave_1: left promiscuous mode [ 265.625342][T22945] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.636304][T22945] bond0: (slave bond_slave_0): Releasing backup interface [ 265.645414][T22945] bond0: (slave bond_slave_1): Releasing backup interface [ 265.662032][T22945] team0: Port device team_slave_0 removed [ 265.671338][T22945] team0: Port device team_slave_1 removed [ 265.747034][T22962] bridge0: port 3(bond0) entered blocking state [ 265.753375][T22962] bridge0: port 3(bond0) entered disabled state [ 265.761050][T22962] bond0: entered allmulticast mode [ 265.766213][T22962] bond_slave_0: entered allmulticast mode [ 265.772043][T22962] bond_slave_1: entered allmulticast mode [ 265.777787][T22962] syz_tun: entered allmulticast mode [ 265.783192][T22962] dummy0: entered allmulticast mode [ 265.792364][T22962] bond0: entered promiscuous mode [ 265.797421][T22962] bond_slave_0: entered promiscuous mode [ 265.803222][T22962] bond_slave_1: entered promiscuous mode [ 265.809590][T22962] dummy0: entered promiscuous mode [ 265.815832][T22969] syz.8.7863[22969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.815968][T22969] syz.8.7863[22969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.828915][T22962] bridge0: port 3(bond0) entered blocking state [ 265.846711][T22962] bridge0: port 3(bond0) entered forwarding state [ 265.853573][T22969] syz.8.7863[22969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.080091][T23003] syz.2.7883[23003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.105411][T23003] syz.2.7883[23003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.122945][T23003] syz.2.7883[23003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.303373][T23020] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.7888'. [ 266.324073][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7888'. [ 266.626282][T23038] lo speed is unknown, defaulting to 1000 [ 266.763421][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7897'. [ 266.855005][T23038] geneve0: entered promiscuous mode [ 266.860330][T23038] geneve0: entered allmulticast mode [ 266.973549][T23054] macvlan0: entered promiscuous mode [ 266.979839][T23054] ipvlan0: entered promiscuous mode [ 266.985611][T23054] ipvlan0: left promiscuous mode [ 266.990808][T23054] macvlan0: left promiscuous mode [ 267.142516][T23078] loop2: detected capacity change from 0 to 512 [ 267.166546][T23078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.189212][T23078] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.263904][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.414847][T23101] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 267.462999][T23106] vhci_hcd: default hub control req: 800c v0000 i0000 l0 [ 267.543552][T23113] loop5: detected capacity change from 0 to 1024 [ 267.554724][T23113] EXT4-fs: Invalid want_extra_isize 3 [ 267.565718][T23113] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 267.661796][T23124] loop5: detected capacity change from 0 to 512 [ 267.698564][T23124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.718984][T23128] bridge_slave_0: left allmulticast mode [ 267.724810][T23128] bridge_slave_0: left promiscuous mode [ 267.730677][T23128] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.738371][T23124] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.753955][T23128] bridge_slave_1: left allmulticast mode [ 267.759908][T23128] bridge_slave_1: left promiscuous mode [ 267.765638][T23128] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.804848][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.824990][T23128] bond0: (slave bond_slave_0): Releasing backup interface [ 267.834522][T23135] syz.5.7936[23135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.834581][T23135] syz.5.7936[23135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.846492][T23135] syz.5.7936[23135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.858653][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7935'. [ 267.881992][T23128] bond0: (slave bond_slave_1): Releasing backup interface [ 267.894869][T23128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.905704][T23128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.913189][T23128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.924062][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7938'. [ 267.949804][T23128] bond3: (slave gretap1): Releasing active interface [ 267.958948][T23144] SET target dimension over the limit! [ 268.021399][T23148] loop2: detected capacity change from 0 to 1024 [ 268.028186][T23148] EXT4-fs: Invalid want_extra_isize 3 [ 268.069584][T23154] vlan2: entered allmulticast mode [ 268.074788][T23154] bridge_slave_0: entered allmulticast mode [ 268.086810][T23154] bridge_slave_0: left allmulticast mode [ 268.118922][T23158] loop2: detected capacity change from 0 to 4096 [ 268.137608][T23158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.167848][T23167] loop5: detected capacity change from 0 to 128 [ 268.186144][T23167] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.200352][T23167] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.201392][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.272834][T19375] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.454215][T23197] syz.5.7964[23197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.454274][T23197] syz.5.7964[23197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.467504][T23197] syz.5.7964[23197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.500688][T23200] can0: slcan on ptm0. [ 268.570610][T23206] pimreg: entered allmulticast mode [ 268.581686][T23206] pimreg: left allmulticast mode [ 268.589145][T23199] can0 (unregistered): slcan off ptm0. [ 268.741099][T23231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7978'. [ 268.784910][T23235] lo speed is unknown, defaulting to 1000 [ 269.166258][T23243] loop2: detected capacity change from 0 to 128 [ 269.274237][T23260] bond0: (slave syz_tun): Releasing backup interface [ 269.282259][T23260] syz_tun: left allmulticast mode [ 269.290302][T23260] bond0: left allmulticast mode [ 269.295301][T23260] bond_slave_0: left allmulticast mode [ 269.300929][T23260] bond_slave_1: left allmulticast mode [ 269.306617][T23260] dummy0: left allmulticast mode [ 269.311753][T23260] bond0: left promiscuous mode [ 269.316571][T23260] bond_slave_0: left promiscuous mode [ 269.322151][T23260] bond_slave_1: left promiscuous mode [ 269.327701][T23260] dummy0: left promiscuous mode [ 269.332857][T23260] bridge0: port 3(bond0) entered disabled state [ 269.343889][T23260] bond0: (slave dummy0): Releasing backup interface [ 269.357393][T23260] bridge_slave_0: left allmulticast mode [ 269.363233][T23260] bridge_slave_0: left promiscuous mode [ 269.368957][T23260] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.378188][T23260] bridge_slave_1: left allmulticast mode [ 269.383919][T23260] bridge_slave_1: left promiscuous mode [ 269.389941][T23260] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.400085][T23260] bond0: (slave bond_slave_0): Releasing backup interface [ 269.402986][T23267] loop2: detected capacity change from 0 to 8192 [ 269.417814][T23260] bond0: (slave bond_slave_1): Releasing backup interface [ 269.430929][T23260] team0: Port device team_slave_0 removed [ 269.440419][T23260] team0: Port device team_slave_1 removed [ 269.450395][T23260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.457845][T23260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.481036][T23260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.488511][T23260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.660517][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 269.660534][ T29] audit: type=1326 audit(1737099704.811:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.1.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 269.699306][ T29] audit: type=1326 audit(1737099704.811:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.1.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 269.722890][ T29] audit: type=1326 audit(1737099704.811:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.1.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01918e5d29 code=0x7ffc0000 [ 270.058839][T23307] binfmt_misc: register: failed to install interpreter file ./file0 [ 270.152934][T23319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8016'. [ 270.426949][T23337] bond0: (slave ip6gretap1): Releasing backup interface [ 270.501463][T23351] tipc: Enabling of bearer rejected, failed to enable media [ 270.814427][T23390] geneve0: entered allmulticast mode [ 271.083190][T23427] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8064'. [ 271.150064][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.157514][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.165006][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.172914][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.180380][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.188012][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.195610][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.203258][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.210777][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.218181][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.225665][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.233155][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.240595][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.248060][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.255687][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.263229][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.270770][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.278189][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.285682][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.293259][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.300708][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.308323][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.315746][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.323216][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.330715][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.338403][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.345843][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.353335][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.360859][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.368276][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 271.379194][ T8] hid-generic 0000:0000:0000.0011: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 271.533049][T23445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8073'. [ 271.556242][T23463] geneve0: entered allmulticast mode [ 271.775102][T23482] bond_slave_1: entered promiscuous mode [ 271.783829][T23482] bond_slave_1: left promiscuous mode [ 272.001524][ T29] audit: type=1400 audit(1737099707.151:8366): avc: denied { map } for pid=23497 comm="syz.5.8097" path="socket:[67401]" dev="sockfs" ino=67401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 272.038477][ T8] kernel write not supported for file /1576/attr/exec (pid: 8 comm: kworker/0:0) [ 272.109097][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8101'. [ 272.200018][T23520] loop2: detected capacity change from 0 to 4096 [ 272.227280][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8107'. [ 272.229884][T23520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.364436][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8113'. [ 272.373774][T23537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 272.413637][ T29] audit: type=1326 audit(1737099707.561:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23542 comm="syz.8.8116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x0 [ 272.494200][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.577474][T23560] loop5: detected capacity change from 0 to 512 [ 272.584467][T23560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.601140][T23560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.613879][T23560] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.652320][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.688950][ T29] audit: type=1326 audit(1737099707.831:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 272.715749][ T29] audit: type=1326 audit(1737099707.831:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 272.739955][ T29] audit: type=1326 audit(1737099707.841:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 272.763591][ T29] audit: type=1326 audit(1737099707.841:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 272.787220][ T29] audit: type=1326 audit(1737099707.841:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d3205d29 code=0x7ffc0000 [ 272.919236][T23583] syz.5.8133[23583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.919413][T23583] syz.5.8133[23583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.931224][T23583] syz.5.8133[23583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.013320][T23595] IPVS: Error connecting to the multicast addr [ 273.105394][T23603] syz.0.8143[23603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.106377][T23603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.399878][T23612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8147'. [ 273.497618][T23617] macvlan2: entered promiscuous mode [ 273.503123][T23617] bridge0: entered promiscuous mode [ 273.512501][T23617] bridge0: port 1(macvlan2) entered blocking state [ 273.519246][T23617] bridge0: port 1(macvlan2) entered disabled state [ 273.529563][T23617] macvlan2: entered allmulticast mode [ 273.535039][T23617] bridge0: entered allmulticast mode [ 273.543293][T23617] macvlan2: left allmulticast mode [ 273.548463][T23617] bridge0: left allmulticast mode [ 273.554079][T23617] bridge0: left promiscuous mode [ 273.941135][T23624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8152'. [ 273.976523][T23626] loop5: detected capacity change from 0 to 4096 [ 274.005099][T23626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.036356][T23637] netlink: 'syz.0.8157': attribute type 4 has an invalid length. [ 274.267415][T23657] vlan3: entered promiscuous mode [ 274.272587][T23657] vxcan1: entered promiscuous mode [ 274.292828][T23657] vxcan1: left promiscuous mode [ 274.319801][T23661] vxlan2: entered promiscuous mode [ 274.324974][T23661] vxlan2: entered allmulticast mode [ 274.432060][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.480432][T23676] infiniband syz1: set down [ 274.485018][T23676] infiniband syz1: added bond_slave_1 [ 274.517800][T23676] RDS/IB: syz1: added [ 274.521941][T23676] smc: adding ib device syz1 with port count 1 [ 274.532784][T23693] pim6reg1: entered promiscuous mode [ 274.534025][T23676] smc: ib device syz1 port 1 has pnetid [ 274.538118][T23693] pim6reg1: entered allmulticast mode [ 274.718946][T23708] loop5: detected capacity change from 0 to 4096 [ 274.759139][T23708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.778645][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 274.778659][ T29] audit: type=1326 audit(1737099709.921:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.822048][ T29] audit: type=1326 audit(1737099709.961:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.845734][ T29] audit: type=1326 audit(1737099709.961:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.869447][ T29] audit: type=1326 audit(1737099709.961:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.893063][ T29] audit: type=1326 audit(1737099709.961:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.916600][ T29] audit: type=1326 audit(1737099709.961:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.940189][ T29] audit: type=1326 audit(1737099709.961:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.963848][ T29] audit: type=1326 audit(1737099709.961:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 274.987460][ T29] audit: type=1326 audit(1737099709.961:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 275.010973][ T29] audit: type=1326 audit(1737099709.961:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.0.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9574b05d29 code=0x7ffc0000 [ 275.129223][T19375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.256968][T23741] syz.0.8203[23741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.257080][T23741] syz.0.8203[23741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.270823][T23741] syz.0.8203[23741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.370544][T23757] loop2: detected capacity change from 0 to 1024 [ 275.382564][T23759] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8211'. [ 275.397973][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8207'. [ 275.408191][T23757] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 275.418284][T23757] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 275.434154][T23757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e119, mo2=0002] [ 275.454908][T23757] System zones: 0-1, 4-36, 102-102 [ 275.466543][T23757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.474746][T23768] syz.5.8213[23768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.479380][T23768] syz.5.8213[23768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.490942][T23768] syz.5.8213[23768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.520545][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.528101][T23771] loop5: detected capacity change from 0 to 1024 [ 275.548327][T23771] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 275.558146][T23771] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 275.567981][T23771] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 275.578833][T23771] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #5: comm syz.5.8215: unexpected bad inode w/o EXT4_IGET_BAD [ 275.592405][T23771] EXT4-fs (loop5): no journal found [ 275.663710][T23783] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.8221'. [ 276.030677][T23815] loop5: detected capacity change from 0 to 1024 [ 276.157845][T23823] ------------[ cut here ]------------ [ 276.163375][T23823] WARNING: CPU: 1 PID: 23823 at kernel/signal.c:2050 posixtimer_send_sigqueue+0x74a/0x9e0 [ 276.173322][T23823] Modules linked in: [ 276.177268][T23823] CPU: 1 UID: 0 PID: 23823 Comm: syz.2.8240 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 276.188136][T23823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.198277][T23823] RIP: 0010:posixtimer_send_sigqueue+0x74a/0x9e0 [ 276.204718][T23823] Code: 00 4c 89 2b 4c 89 ff e8 24 a5 35 00 49 89 1f 41 be 01 00 00 00 e9 fd fc ff ff e8 91 2a 1c 00 e8 9c d2 0d 00 e9 2f fd ff ff 90 <0f> 0b 90 48 89 df e8 0b 90 35 00 48 8b 2b 48 85 ed 0f 84 a0 00 00 [ 276.224340][T23823] RSP: 0018:ffffc900069b7d08 EFLAGS: 00010086 [ 276.230422][T23823] RAX: ffff88810b5b8a78 RBX: ffff88810414e180 RCX: ffffffff81168bde [ 276.238421][T23823] RDX: 00000000000007a5 RSI: 0000000000000000 RDI: ffff88810414e180 [ 276.246414][T23823] RBP: 0000000000000000 R08: 000188810414e187 R09: 0000000000000000 [ 276.254466][T23823] R10: 0001ffffffffffff R11: 000188810414e1cc R12: ffff88810b5b87c0 [ 276.262444][T23823] R13: 0000000000000046 R14: ffff88810414e168 R15: ffff88810414e1f0 [ 276.270476][T23823] FS: 00007fe93bfc76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 276.279414][T23823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.286119][T23823] CR2: 0000001b31b1bff8 CR3: 0000000141b2c000 CR4: 00000000003506f0 [ 276.294156][T23823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.302153][T23823] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 276.310143][T23823] Call Trace: [ 276.313442][T23823] [ 276.316382][T23823] ? __warn+0x141/0x350 [ 276.320637][T23823] ? report_bug+0x315/0x420 [ 276.325191][T23823] ? posixtimer_send_sigqueue+0x74a/0x9e0 [ 276.330986][T23823] ? handle_bug+0x60/0x90 [ 276.335329][T23823] ? exc_invalid_op+0x1a/0x50 [ 276.340091][T23823] ? asm_exc_invalid_op+0x1a/0x20 [ 276.345127][T23823] ? posixtimer_send_sigqueue+0x1fe/0x9e0 [ 276.350903][T23823] ? posixtimer_send_sigqueue+0x74a/0x9e0 [ 276.356708][T23823] ? posixtimer_send_sigqueue+0x1fe/0x9e0 [ 276.362449][T23823] posix_timer_queue_signal+0x41/0x50 [ 276.367844][T23823] posix_cpu_timer_set+0x8a3/0xa20 [ 276.372976][T23823] ? do_futex+0x276/0x370 [ 276.377404][T23823] ? should_fail_ex+0x31/0x230 [ 276.382228][T23823] do_timer_settime+0x1a2/0x2b0 [ 276.387095][T23823] __x64_sys_timer_settime+0xe8/0x160 [ 276.392554][T23823] x64_sys_call+0xd76/0x2dc0 [ 276.397193][T23823] do_syscall_64+0xc9/0x1c0 [ 276.401703][T23823] ? clear_bhb_loop+0x55/0xb0 [ 276.406490][T23823] ? clear_bhb_loop+0x55/0xb0 [ 276.411178][T23823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.417080][T23823] RIP: 0033:0x7fe93d955d29 [ 276.421510][T23823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.441142][T23823] RSP: 002b:00007fe93bfc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 276.449578][T23823] RAX: ffffffffffffffda RBX: 00007fe93db45fa0 RCX: 00007fe93d955d29 [ 276.457641][T23823] RDX: 0000000020000080 RSI: ffffffffffffffff RDI: 0000000000000000 [ 276.465620][T23823] RBP: 00007fe93d9d1b08 R08: 0000000000000000 R09: 0000000000000000 [ 276.473637][T23823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.481618][T23823] R13: 0000000000000000 R14: 00007fe93db45fa0 R15: 00007ffee96c6b78 [ 276.489675][T23823] [ 276.492711][T23823] ---[ end trace 0000000000000000 ]--- [ 276.739466][T23861] loop2: detected capacity change from 0 to 164 [ 276.970429][T23888] ref_ctr_offset mismatch. inode: 0x1f97 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 277.125505][T23914] __nla_validate_parse: 1 callbacks suppressed [ 277.125526][T23914] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8283'. [ 277.205662][T23924] loop2: detected capacity change from 0 to 2048 [ 277.221744][T23927] loop5: detected capacity change from 0 to 256 [ 277.234945][T23927] FAT-fs (loop5): Directory bread(block 64) failed [ 277.241842][T23927] FAT-fs (loop5): Directory bread(block 65) failed [ 277.244039][T23924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.248452][T23927] FAT-fs (loop5): Directory bread(block 66) failed [ 277.267103][T23927] FAT-fs (loop5): Directory bread(block 67) failed [ 277.274044][T23927] FAT-fs (loop5): Directory bread(block 68) failed [ 277.280732][T23924] ext4 filesystem being mounted at /755/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.286298][T23927] FAT-fs (loop5): Directory bread(block 69) failed [ 277.297874][T23927] FAT-fs (loop5): Directory bread(block 70) failed [ 277.304551][T23927] FAT-fs (loop5): Directory bread(block 71) failed [ 277.311281][T23927] FAT-fs (loop5): Directory bread(block 72) failed [ 277.317889][T23927] FAT-fs (loop5): Directory bread(block 73) failed [ 277.338442][T23927] syz.5.8289: attempt to access beyond end of device [ 277.338442][T23927] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 277.383251][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.469560][T23943] lo speed is unknown, defaulting to 1000 [ 277.535323][ T323] blk_print_req_error: 4 callbacks suppressed [ 277.535342][ T323] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 277.623248][T23963] loop2: detected capacity change from 0 to 512 [ 277.661559][T23963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.674454][T23963] ext4 filesystem being mounted at /760/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.691016][T23968] lo speed is unknown, defaulting to 1000 [ 277.736213][T23974] netlink: 'syz.0.8307': attribute type 4 has an invalid length. [ 277.782092][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.794312][T23978] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8310'. [ 277.884815][T23984] bond_slave_1: entered promiscuous mode [ 277.901817][T23984] bond_slave_1: left promiscuous mode [ 277.919752][T23982] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 278.004805][T23996] ALSA: seq fatal error: cannot create timer (-19) [ 278.206103][T23998] lo speed is unknown, defaulting to 1000 [ 278.340946][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8330'. [ 278.427628][T23998] chnl_net:caif_netlink_parms(): no params data found [ 278.463011][T24045] bpf_get_probe_write_proto: 9 callbacks suppressed [ 278.463027][T24045] syz.1.8335[24045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.470584][T24045] syz.1.8335[24045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.493803][T24045] syz.1.8335[24045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.514844][T23998] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.533396][T23998] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.552556][T23998] bridge_slave_0: entered allmulticast mode [ 278.559628][T23998] bridge_slave_0: entered promiscuous mode [ 278.566391][T23998] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.573571][T23998] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.586492][T23998] bridge_slave_1: entered allmulticast mode [ 278.593526][T23998] bridge_slave_1: entered promiscuous mode [ 278.621739][T23998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.642287][T23998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.669296][T23998] team0: Port device team_slave_0 added [ 278.680372][T23998] team0: Port device team_slave_1 added [ 278.722823][T24070] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8346'. [ 278.745848][T23998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.752911][T23998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.779080][T23998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.817320][T23998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.821009][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.824389][T23998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.831723][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.857589][T23998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.875745][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.883495][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.890952][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.898353][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.905855][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.913392][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.920847][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.928314][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.935722][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.943123][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.950567][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.958142][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.965563][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.973015][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.980418][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 278.988404][ T8] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 279.022991][T23998] hsr_slave_0: entered promiscuous mode [ 279.029684][T23998] hsr_slave_1: entered promiscuous mode [ 279.035864][T23998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.045197][T23998] Cannot create hsr debugfs directory [ 279.151077][T23998] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.253855][T23998] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.384612][T24110] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ0xffffffffffffffff184467440737095516150177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777' [ 279.467641][T23998] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.611888][T24104] Set syz1 is full, maxelem 65536 reached [ 279.641968][T23998] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.661424][T24120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 279.730754][T23998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.744505][T23998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.754491][T24136] netlink: '+}[@': attribute type 29 has an invalid length. [ 279.763163][T23998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.783108][T24136] netlink: '+}[@': attribute type 29 has an invalid length. [ 279.796499][T24136] netlink: 500 bytes leftover after parsing attributes in process `+}[@'. [ 279.799192][T23998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.841898][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 279.841916][ T29] audit: type=1326 audit(1737099714.991:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 279.921653][T23998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.938444][ T29] audit: type=1326 audit(1737099715.021:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 279.962633][ T29] audit: type=1326 audit(1737099715.031:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 279.986236][ T29] audit: type=1326 audit(1737099715.031:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efca7da5d63 code=0x7ffc0000 [ 280.010061][ T29] audit: type=1326 audit(1737099715.061:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efca7da47df code=0x7ffc0000 [ 280.031869][T23998] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.033970][ T29] audit: type=1326 audit(1737099715.141:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efca7da5db7 code=0x7ffc0000 [ 280.059078][ T4075] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.063563][ T29] audit: type=1326 audit(1737099715.141:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efca7da4690 code=0x7ffc0000 [ 280.070533][ T4075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.093985][ T29] audit: type=1326 audit(1737099715.141:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efca7da498a code=0x7ffc0000 [ 280.124584][ T29] audit: type=1326 audit(1737099715.161:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 280.148133][ T29] audit: type=1326 audit(1737099715.161:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24141 comm="syz.8.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca7da5d29 code=0x7ffc0000 [ 280.180074][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.187243][T11654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.315241][T23998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.340826][T24168] lo speed is unknown, defaulting to 1000 [ 280.368865][T24174] bond_slave_1: entered promiscuous mode [ 280.377409][T24174] bond_slave_1: left promiscuous mode [ 280.556598][T23998] veth0_vlan: entered promiscuous mode [ 280.567034][T23998] veth1_vlan: entered promiscuous mode [ 280.586164][T23998] veth0_macvtap: entered promiscuous mode [ 280.593756][T23998] veth1_macvtap: entered promiscuous mode [ 280.607441][T23998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.619508][T23998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.631166][T23998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.640110][T23998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.648869][T23998] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.657779][T23998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.582274][T24202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8397'. [ 281.654189][T24207] lo speed is unknown, defaulting to 1000 [ 281.671075][T24213] tipc: Enabled bearer , priority 0 [ 281.679351][T24212] tipc: Disabling bearer [ 281.737869][T24222] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.855363][T24231] loop2: detected capacity change from 0 to 1024 [ 281.886516][T24231] EXT4-fs: Ignoring removed orlov option [ 281.896499][T24234] xt_hashlimit: max too large, truncated to 1048576 [ 281.912988][T24231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.348188][T24231] ================================================================== [ 282.356321][T24231] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 282.364442][T24231] [ 282.367302][T24231] write to 0xffff88811769a230 of 8 bytes by task 24249 on cpu 1: [ 282.375046][T24231] filemap_splice_read+0x6c4/0x910 [ 282.380202][T24231] ext4_file_splice_read+0x8f/0xb0 [ 282.385379][T24231] splice_direct_to_actor+0x269/0x670 [ 282.390791][T24231] do_splice_direct+0xd7/0x150 [ 282.395596][T24231] do_sendfile+0x398/0x660 [ 282.400062][T24231] __x64_sys_sendfile64+0x110/0x150 [ 282.405391][T24231] x64_sys_call+0xfbd/0x2dc0 [ 282.410003][T24231] do_syscall_64+0xc9/0x1c0 [ 282.414535][T24231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420469][T24231] [ 282.422809][T24231] write to 0xffff88811769a230 of 8 bytes by task 24231 on cpu 0: [ 282.430552][T24231] filemap_splice_read+0x6c4/0x910 [ 282.435718][T24231] ext4_file_splice_read+0x8f/0xb0 [ 282.440880][T24231] splice_direct_to_actor+0x269/0x670 [ 282.446292][T24231] do_splice_direct+0xd7/0x150 [ 282.451091][T24231] do_sendfile+0x398/0x660 [ 282.455558][T24231] __x64_sys_sendfile64+0x110/0x150 [ 282.460807][T24231] x64_sys_call+0xfbd/0x2dc0 [ 282.465433][T24231] do_syscall_64+0xc9/0x1c0 [ 282.469966][T24231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.475883][T24231] [ 282.478222][T24231] value changed: 0x00000000000002a3 -> 0x00000000000002a4 [ 282.485348][T24231] [ 282.487688][T24231] Reported by Kernel Concurrency Sanitizer on: [ 282.493860][T24231] CPU: 0 UID: 0 PID: 24231 Comm: syz.2.8407 Tainted: G W 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 282.506138][T24231] Tainted: [W]=WARN [ 282.509957][T24231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.520036][T24231] ================================================================== [ 282.847840][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.