last executing test programs: 18.37474753s ago: executing program 3 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 18.36044312s ago: executing program 3 (id=234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x0) 18.33420879s ago: executing program 3 (id=236): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) 18.194226819s ago: executing program 2 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0xffffffffffffff8a) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 18.093829038s ago: executing program 2 (id=242): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 18.005061238s ago: executing program 3 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x400) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 17.980059168s ago: executing program 3 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000807dbcbe18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x71) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 17.936854458s ago: executing program 3 (id=260): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e25, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) r1 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r1, 0x409, 0xb) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x11, r1, 0x14909000) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x140, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 17.911676788s ago: executing program 32 (id=260): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e25, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) r1 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r1, 0x409, 0xb) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x11, r1, 0x14909000) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x140, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 17.168195204s ago: executing program 2 (id=257): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.138535844s ago: executing program 2 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x400) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 17.110219984s ago: executing program 2 (id=261): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 15.066388795s ago: executing program 2 (id=282): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 15.057048955s ago: executing program 33 (id=282): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 5.379435143s ago: executing program 5 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r3], 0x20}}, 0x0) 3.507687415s ago: executing program 1 (id=414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 3.407626865s ago: executing program 1 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 3.338291364s ago: executing program 0 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 2.218505259s ago: executing program 5 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) msgget(0x0, 0x2c4) syz_extract_tcp_res$synack(&(0x7f0000000400)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000440)={0x41424344}, 0x7fff, 0x5) syz_emit_ethernet(0x10ba, &(0x7f0000001140)={@random="e90c4daeaca2", @random="43e711b6b572", @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0xf3606}, {0x1000, 0x0, 0x1}, {0x9}, {0xe7f}, {0x730}, {0x1, 0x0, 0x1}], @ipv4=@tcp={{0x19, 0x4, 0x1, 0x4, 0x1084, 0x66, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x21, 0x3, 0x8, [{@multicast1, 0x2}, {@broadcast, 0x6}, {@private=0xa010101, 0x80000001}, {@broadcast, 0x800}, {@local, 0x400}]}, @lsrr={0x83, 0x3, 0x5}, @generic={0x82, 0xf, "e426213075a0107e4bd6939297"}, @noop, @generic={0x86, 0x11, "f16e238ee38e5f24443330d30b8a2f"}]}}, {{0x4e23, 0x4e22, r1, r2, 0x1, 0x0, 0x8, 0x8, 0x9, 0x0, 0xf1, {[@exp_fastopen={0xfe, 0xb, 0xf989, "147076be67ec3a"}]}}, {"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"}}}}}}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2.21720379s ago: executing program 0 (id=436): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x8000) 2.21640193s ago: executing program 1 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 1.357831586s ago: executing program 5 (id=429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000600), 0x5, 0x46a, &(0x7f0000000640)="$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") chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='fsi_master_gpio_in\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) 1.357306716s ago: executing program 4 (id=430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000da169e68", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) 1.356863416s ago: executing program 1 (id=441): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9}}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x6b, [{0x0, 0x1, 0x5}, {0x9, 0x3, 0xfffffc12}, {0x3, 0x3, 0x2}, {0xe, 0x4, 0x483}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x6}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @fwd={0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000480)=""/199, 0xb3, 0xc7, 0x1, 0x4, 0x0, @void, @value}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.356534286s ago: executing program 0 (id=432): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x5c0) 1.260282835s ago: executing program 6 (id=434): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.258370485s ago: executing program 4 (id=435): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.215186345s ago: executing program 6 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x66000080) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0x800, 0x228f8b15) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 824.231383ms ago: executing program 6 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r3], 0x20}}, 0x0) 823.859563ms ago: executing program 4 (id=439): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$unix(r0, &(0x7f0000010440)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 813.936944ms ago: executing program 1 (id=440): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 787.681853ms ago: executing program 1 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d7063303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f459574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801e26d335ef2ba9ac2423a358ccbb776b21e1d3b5ee4e0f21a4c775145ef26c98b4af40babc3b18cc5635b6da7c4d1b0fbb8f271016ecf316158c2be5a4bef251c82b85bbc335cae0a2920ce36f206f449fbf64a47e05bd4cf8312774a4e61", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 502.629172ms ago: executing program 6 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x9) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xe}}, 0x70d402) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket(0x1, 0x80802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 422.713732ms ago: executing program 5 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffff6000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x7}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 420.629042ms ago: executing program 4 (id=454): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendfile(r1, r1, 0x0, 0x80000000) 399.265332ms ago: executing program 0 (id=445): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') 365.479831ms ago: executing program 0 (id=446): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(0xffffffffffffffff, 0x3157, 0xb53e, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 146.046381ms ago: executing program 4 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r1, r2, 0x0) 136.134011ms ago: executing program 6 (id=448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000da169e68", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) 91.17878ms ago: executing program 0 (id=449): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write(r2, &(0x7f0000004200)="1d", 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 89.94826ms ago: executing program 6 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 69.03831ms ago: executing program 4 (id=451): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x101082) r3 = fcntl$dupfd(r2, 0x0, r2) read$snapshot(r3, 0x0, 0xffffffbf) 45.45733ms ago: executing program 5 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsync(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x2, {0x10, 0x0, @broadcast}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 0s ago: executing program 5 (id=453): r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x420, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): [ 18.805547][ T29] audit: type=1400 audit(1737166476.021:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 25.102185][ T29] audit: type=1400 audit(1737166482.311:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.103173][ T3287] cgroup: Unknown subsys name 'net' [ 25.124897][ T29] audit: type=1400 audit(1737166482.311:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.152281][ T29] audit: type=1400 audit(1737166482.341:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.327265][ T3287] cgroup: Unknown subsys name 'cpuset' [ 25.333328][ T3287] cgroup: Unknown subsys name 'rlimit' [ 25.462632][ T29] audit: type=1400 audit(1737166482.671:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.485971][ T29] audit: type=1400 audit(1737166482.671:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.495563][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.506499][ T29] audit: type=1400 audit(1737166482.671:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.535354][ T29] audit: type=1400 audit(1737166482.671:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.555605][ T29] audit: type=1400 audit(1737166482.681:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.580426][ T29] audit: type=1400 audit(1737166482.681:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.603621][ T29] audit: type=1400 audit(1737166482.721:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.625565][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.684431][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 26.744421][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 26.807686][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 26.838071][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.845205][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.852327][ T3299] bridge_slave_0: entered allmulticast mode [ 26.858775][ T3299] bridge_slave_0: entered promiscuous mode [ 26.865141][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.886680][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.893790][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.900935][ T3299] bridge_slave_1: entered allmulticast mode [ 26.907338][ T3299] bridge_slave_1: entered promiscuous mode [ 26.926668][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.946291][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.955432][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.995905][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.003013][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.010158][ T3297] bridge_slave_0: entered allmulticast mode [ 27.016478][ T3297] bridge_slave_0: entered promiscuous mode [ 27.025047][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.032171][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.039348][ T3297] bridge_slave_1: entered allmulticast mode [ 27.045605][ T3297] bridge_slave_1: entered promiscuous mode [ 27.052291][ T3299] team0: Port device team_slave_0 added [ 27.058208][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.065251][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.072494][ T3298] bridge_slave_0: entered allmulticast mode [ 27.078980][ T3298] bridge_slave_0: entered promiscuous mode [ 27.098257][ T3299] team0: Port device team_slave_1 added [ 27.103961][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.111069][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.118182][ T3298] bridge_slave_1: entered allmulticast mode [ 27.124548][ T3298] bridge_slave_1: entered promiscuous mode [ 27.152254][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.159436][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.166770][ T3308] bridge_slave_0: entered allmulticast mode [ 27.173092][ T3308] bridge_slave_0: entered promiscuous mode [ 27.182818][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.192369][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.199337][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.225257][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.239587][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.246693][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.253796][ T3308] bridge_slave_1: entered allmulticast mode [ 27.260253][ T3308] bridge_slave_1: entered promiscuous mode [ 27.269849][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.280270][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.287240][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.313173][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.325057][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.349026][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.365825][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.372903][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.380035][ T3310] bridge_slave_0: entered allmulticast mode [ 27.386385][ T3310] bridge_slave_0: entered promiscuous mode [ 27.397889][ T3297] team0: Port device team_slave_0 added [ 27.404651][ T3297] team0: Port device team_slave_1 added [ 27.415126][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.424332][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.431425][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.438639][ T3310] bridge_slave_1: entered allmulticast mode [ 27.444987][ T3310] bridge_slave_1: entered promiscuous mode [ 27.469161][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.485161][ T3299] hsr_slave_0: entered promiscuous mode [ 27.491362][ T3299] hsr_slave_1: entered promiscuous mode [ 27.502281][ T3298] team0: Port device team_slave_0 added [ 27.516949][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.526200][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.533173][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.559074][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.570265][ T3298] team0: Port device team_slave_1 added [ 27.576083][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.583045][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.609025][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.628402][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.649803][ T3308] team0: Port device team_slave_0 added [ 27.667873][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.674838][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.700800][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.711832][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.718872][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.744853][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.756104][ T3308] team0: Port device team_slave_1 added [ 27.784993][ T3297] hsr_slave_0: entered promiscuous mode [ 27.791242][ T3297] hsr_slave_1: entered promiscuous mode [ 27.797271][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.804836][ T3297] Cannot create hsr debugfs directory [ 27.814544][ T3310] team0: Port device team_slave_0 added [ 27.821326][ T3310] team0: Port device team_slave_1 added [ 27.843584][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.850565][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.876556][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.887839][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.894776][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.920688][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.938792][ T3298] hsr_slave_0: entered promiscuous mode [ 27.944700][ T3298] hsr_slave_1: entered promiscuous mode [ 27.950731][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.958344][ T3298] Cannot create hsr debugfs directory [ 27.988026][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.994985][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.020904][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.045262][ T3308] hsr_slave_0: entered promiscuous mode [ 28.051749][ T3308] hsr_slave_1: entered promiscuous mode [ 28.057941][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.065486][ T3308] Cannot create hsr debugfs directory [ 28.077878][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.084977][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.110940][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.165911][ T3310] hsr_slave_0: entered promiscuous mode [ 28.172122][ T3310] hsr_slave_1: entered promiscuous mode [ 28.178155][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.185707][ T3310] Cannot create hsr debugfs directory [ 28.224695][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.247827][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.265890][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.290428][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.324501][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.338383][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.358263][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.368967][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.400791][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.412670][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.420968][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.429460][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.444067][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.454399][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.468287][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.476467][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.499517][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.508660][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.522002][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.531062][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.573552][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.589441][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.611697][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.630730][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.637943][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.648294][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.661898][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.668974][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.677731][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.684803][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.693397][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.700512][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.714990][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.739012][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.750345][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.777735][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.784842][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.794374][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.809487][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.817661][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.843818][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.853069][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.860179][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.875756][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.882987][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.895438][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.902544][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.920912][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.928011][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.942213][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.949501][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.968672][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.996059][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.006554][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.038276][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.075427][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.137594][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.163748][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.193325][ T3299] veth0_vlan: entered promiscuous mode [ 29.212067][ T3299] veth1_vlan: entered promiscuous mode [ 29.232799][ T3298] veth0_vlan: entered promiscuous mode [ 29.262380][ T3299] veth0_macvtap: entered promiscuous mode [ 29.271986][ T3298] veth1_vlan: entered promiscuous mode [ 29.293063][ T3299] veth1_macvtap: entered promiscuous mode [ 29.312855][ T3308] veth0_vlan: entered promiscuous mode [ 29.319762][ T3297] veth0_vlan: entered promiscuous mode [ 29.334042][ T3308] veth1_vlan: entered promiscuous mode [ 29.340637][ T3297] veth1_vlan: entered promiscuous mode [ 29.349323][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.367747][ T3310] veth0_vlan: entered promiscuous mode [ 29.375016][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.388615][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.397384][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.406136][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.414953][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.425851][ T3298] veth0_macvtap: entered promiscuous mode [ 29.435637][ T3310] veth1_vlan: entered promiscuous mode [ 29.443111][ T3298] veth1_macvtap: entered promiscuous mode [ 29.453867][ T3308] veth0_macvtap: entered promiscuous mode [ 29.469648][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.480211][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.490619][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.498763][ T3308] veth1_macvtap: entered promiscuous mode [ 29.507576][ T3297] veth0_macvtap: entered promiscuous mode [ 29.519412][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.529885][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.540333][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.551451][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.561985][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.571818][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.582292][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.593759][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.601260][ T3297] veth1_macvtap: entered promiscuous mode [ 29.611840][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.620683][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.629454][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.638174][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.649726][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.652832][ T3310] veth0_macvtap: entered promiscuous mode [ 29.674632][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.685122][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.694966][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.705416][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.718512][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.726403][ T3310] veth1_macvtap: entered promiscuous mode [ 29.742375][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.751228][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.760110][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.768847][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.787065][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.797640][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.807539][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.817996][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.827850][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.838303][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.848833][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.866950][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.877645][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.887728][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.898177][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.908206][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.918635][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.938917][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.966184][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.975053][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.983808][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.992639][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.013991][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.024590][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.034463][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.044923][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.054780][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.063444][ T3441] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.065382][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.086874][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.097402][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.108426][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.116463][ T3446] loop2: detected capacity change from 0 to 4096 [ 30.147382][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.153520][ T3446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.157955][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.180534][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.191086][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.192924][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 30.192936][ T29] audit: type=1400 audit(1737166487.401:131): avc: denied { create } for pid=3449 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.201186][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.236543][ T29] audit: type=1326 audit(1737166487.421:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62183d5d29 code=0x7ffc0000 [ 30.236821][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.259760][ T29] audit: type=1326 audit(1737166487.421:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62183d5d29 code=0x7ffc0000 [ 30.269518][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.292533][ T29] audit: type=1400 audit(1737166487.441:134): avc: denied { mount } for pid=3444 comm="syz.2.7" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.302918][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.305139][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.333131][ T3450] loop1: detected capacity change from 0 to 1024 [ 30.350971][ T29] audit: type=1326 audit(1737166487.541:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62183d5d29 code=0x7ffc0000 [ 30.374090][ T29] audit: type=1326 audit(1737166487.541:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62183d5d29 code=0x7ffc0000 [ 30.397370][ T29] audit: type=1326 audit(1737166487.541:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62183d5d29 code=0x7ffc0000 [ 30.420562][ T29] audit: type=1326 audit(1737166487.541:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f62183d5d29 code=0x7ffc0000 [ 30.429418][ T3450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.443695][ T29] audit: type=1326 audit(1737166487.541:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62183d5d63 code=0x7ffc0000 [ 30.478642][ T29] audit: type=1326 audit(1737166487.541:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62183d47df code=0x7ffc0000 [ 30.517338][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.522214][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.526084][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.543761][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.552668][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.562077][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.606675][ T3459] $Hÿ: renamed from bond0 (while UP) [ 30.631808][ T3459] $Hÿ: entered promiscuous mode [ 30.636889][ T3459] bond_slave_0: entered promiscuous mode [ 30.642587][ T3459] bond_slave_1: entered promiscuous mode [ 30.730854][ T3468] ref_ctr increment failed for inode: 0x11 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103359f80 [ 30.764499][ T3467] uprobe: syz.3.4:3467 failed to unregister, leaking uprobe [ 30.840256][ T3494] syz.2.17[3494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.840335][ T3494] syz.2.17[3494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.859254][ T3494] syz.2.17[3494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.956150][ T3512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 30.976524][ T3514] netlink: 'syz.1.27': attribute type 4 has an invalid length. [ 30.999407][ T3508] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 31.020719][ T3516] vhci_hcd: invalid port number 86 [ 31.025868][ T3516] vhci_hcd: default hub control req: a00b v0080 i0056 l0 [ 31.095836][ T3524] syz.4.33[3524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.095892][ T3524] syz.4.33[3524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.108424][ T3524] syz.4.33[3524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.134947][ T3527] wireguard0: entered promiscuous mode [ 31.151803][ T3527] wireguard0: entered allmulticast mode [ 31.158598][ T3530] process 'syz.0.29' launched '/dev/fd/7' with NULL argv: empty string added [ 31.188652][ T3536] loop3: detected capacity change from 0 to 164 [ 31.195153][ T3536] ======================================================= [ 31.195153][ T3536] WARNING: The mand mount option has been deprecated and [ 31.195153][ T3536] and is ignored by this kernel. Remove the mand [ 31.195153][ T3536] option from the mount to silence this warning. [ 31.195153][ T3536] ======================================================= [ 31.231864][ T3538] serio: Serial port ptm0 [ 31.254127][ T3542] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.278354][ T3536] Unable to read rock-ridge attributes [ 31.289262][ T3536] Unable to read rock-ridge attributes [ 31.358161][ T3547] loop4: detected capacity change from 0 to 256 [ 31.372717][ T3550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 31.392228][ T3547] FAT-fs (loop4): Directory bread(block 64) failed [ 31.395295][ T3550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 31.399075][ T3547] FAT-fs (loop4): Directory bread(block 65) failed [ 31.415183][ T3547] FAT-fs (loop4): Directory bread(block 66) failed [ 31.423308][ T3552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 31.428386][ T3550] Zero length message leads to an empty skb [ 31.432168][ T3552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 31.450499][ T3547] FAT-fs (loop4): Directory bread(block 67) failed [ 31.457206][ T3547] FAT-fs (loop4): Directory bread(block 68) failed [ 31.470041][ T3547] FAT-fs (loop4): Directory bread(block 69) failed [ 31.478506][ T3552] geneve2: entered allmulticast mode [ 31.486058][ T3547] FAT-fs (loop4): Directory bread(block 70) failed [ 31.498385][ T3547] FAT-fs (loop4): Directory bread(block 71) failed [ 31.508893][ T3547] FAT-fs (loop4): Directory bread(block 72) failed [ 31.515549][ T3547] FAT-fs (loop4): Directory bread(block 73) failed [ 31.899240][ T3566] loop0: detected capacity change from 0 to 512 [ 31.933084][ T3566] EXT4-fs: dax option not supported [ 31.936115][ T3568] syz.3.48[3568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.946626][ T3568] syz.3.48[3568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.976566][ T3568] syz.3.48[3568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.038538][ T3573] ref_ctr increment failed for inode: 0x46 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810335aa00 [ 32.108394][ T3566] syz.0.47 (3566) used greatest stack depth: 10744 bytes left [ 32.116653][ T3573] ref_ctr increment failed for inode: 0x46 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810335aa00 [ 32.174417][ T3571] uprobe: syz.2.50:3571 failed to unregister, leaking uprobe [ 32.246795][ T3571] uprobe: syz.2.50:3571 failed to unregister, leaking uprobe [ 32.364881][ T3582] tmpfs: Bad value for 'mpol' [ 32.375339][ T3586] loop2: detected capacity change from 0 to 512 [ 32.395094][ T3582] netlink: 'syz.0.54': attribute type 13 has an invalid length. [ 32.404929][ T3586] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.418032][ T3586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.464352][ T3586] EXT4-fs (loop2): 1 orphan inode deleted [ 32.470284][ T3586] EXT4-fs (loop2): 1 truncate cleaned up [ 32.498007][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.616673][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.623938][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.641985][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.875412][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.896199][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.949901][ T3582] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.958886][ T3582] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.967993][ T3582] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.976891][ T3582] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.009856][ T3614] hsr_slave_0: left promiscuous mode [ 33.028969][ T3614] hsr_slave_1: left promiscuous mode [ 33.086370][ T3582] syz.0.54 (3582) used greatest stack depth: 10400 bytes left [ 33.112654][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 33.121474][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 33.144139][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 33.171928][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 33.180810][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 33.265515][ T3639] Driver unsupported XDP return value 0 on prog (id 81) dev N/A, expect packet loss! [ 33.291347][ T3644] capability: warning: `syz.2.77' uses 32-bit capabilities (legacy support in use) [ 33.410482][ T3658] pim6reg1: entered promiscuous mode [ 33.415833][ T3658] pim6reg1: entered allmulticast mode [ 33.502940][ T3672] loop2: detected capacity change from 0 to 2048 [ 33.527930][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.564729][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.622337][ T3681] syz.2.93 (3681) used greatest stack depth: 10040 bytes left [ 34.099175][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.108431][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.585858][ T3729] pim6reg1: entered promiscuous mode [ 34.591212][ T3729] pim6reg1: entered allmulticast mode [ 34.658298][ T3731] syz.1.114[3731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.718878][ T3738] loop0: detected capacity change from 0 to 512 [ 34.748193][ T3738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.762493][ T3738] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.841975][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.848649][ T3746] tipc: Started in network mode [ 34.855876][ T3746] tipc: Node identity 92d9b8fd0617, cluster identity 4711 [ 34.855939][ T3746] tipc: Enabled bearer , priority 0 [ 34.935127][ T3746] syzkaller0: entered promiscuous mode [ 34.940786][ T3746] syzkaller0: entered allmulticast mode [ 34.947279][ T3746] tipc: Resetting bearer [ 34.955893][ T3752] veth2: entered allmulticast mode [ 34.968908][ T3745] tipc: Resetting bearer [ 34.990712][ T3745] tipc: Disabling bearer [ 35.082915][ T3765] loop2: detected capacity change from 0 to 256 [ 35.089945][ T3765] vfat: Bad value for 'fmask' [ 35.266992][ T3773] vlan2: entered allmulticast mode [ 35.661923][ T3804] loop1: detected capacity change from 0 to 1024 [ 35.685365][ T3804] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.696329][ T3804] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.706295][ T3804] JBD2: no valid journal superblock found [ 35.712079][ T3804] EXT4-fs (loop1): Could not load journal inode [ 35.883852][ T3811] bpf_get_probe_write_proto: 5 callbacks suppressed [ 35.883867][ T3811] syz.1.148[3811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.901625][ T3811] syz.1.148[3811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.913360][ T3811] syz.1.148[3811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.036336][ T3816] pim6reg1: entered promiscuous mode [ 36.053158][ T3816] pim6reg1: entered allmulticast mode [ 36.143829][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 36.143843][ T29] audit: type=1326 audit(1737166493.351:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.173777][ T29] audit: type=1326 audit(1737166493.351:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.197181][ T29] audit: type=1326 audit(1737166493.351:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.220574][ T29] audit: type=1326 audit(1737166493.351:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.244006][ T29] audit: type=1326 audit(1737166493.351:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.267594][ T29] audit: type=1400 audit(1737166493.411:486): avc: denied { block_suspend } for pid=3822 comm="syz.4.154" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.288893][ T29] audit: type=1326 audit(1737166493.411:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.312259][ T29] audit: type=1326 audit(1737166493.411:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 36.341701][ T29] audit: type=1400 audit(1737166493.551:489): avc: denied { getopt } for pid=3825 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.362547][ T3828] netlink: 'syz.4.156': attribute type 10 has an invalid length. [ 36.367113][ T29] audit: type=1326 audit(1737166493.581:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dd0e5d29 code=0x7ffc0000 [ 36.393951][ T3828] geneve1: entered promiscuous mode [ 36.404543][ T3828] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 36.413395][ T3826] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 36.509028][ T3837] __nla_validate_parse: 7 callbacks suppressed [ 36.509043][ T3837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 36.574585][ T3843] syz.3.162[3843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.574723][ T3843] syz.3.162[3843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.586429][ T3843] syz.3.162[3843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.598751][ T3834] loop2: detected capacity change from 0 to 128 [ 36.618617][ T3843] syz.3.162[3843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.618727][ T3843] syz.3.162[3843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.630644][ T3843] syz.3.162[3843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.643847][ T3834] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.670735][ T3834] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.765757][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.811913][ T3854] loop3: detected capacity change from 0 to 128 [ 36.842451][ T3854] syz.3.166: attempt to access beyond end of device [ 36.842451][ T3854] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 36.865251][ T3854] syz.3.166: attempt to access beyond end of device [ 36.865251][ T3854] loop3: rw=524288, sector=529, nr_sectors = 256 limit=128 [ 36.879141][ T3854] syz.3.166: attempt to access beyond end of device [ 36.879141][ T3854] loop3: rw=0, sector=657, nr_sectors = 8 limit=128 [ 36.892319][ T3854] syz.3.166: attempt to access beyond end of device [ 36.892319][ T3854] loop3: rw=0, sector=657, nr_sectors = 8 limit=128 [ 37.012238][ C1] hrtimer: interrupt took 42968 ns [ 37.303678][ T3873] tipc: Started in network mode [ 37.308608][ T3873] tipc: Node identity ac14140f, cluster identity 4711 [ 37.316021][ T3873] tipc: New replicast peer: 255.255.255.255 [ 37.322137][ T3873] tipc: Enabled bearer , priority 10 [ 37.457992][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 37.467738][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 37.541676][ T3899] delete_channel: no stack [ 37.577918][ T3907] loop3: detected capacity change from 0 to 512 [ 37.585191][ T3907] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.596117][ T3907] EXT4-fs (loop3): 1 truncate cleaned up [ 37.602214][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.743309][ T3914] loop2: detected capacity change from 0 to 2048 [ 37.777020][ T3914] loop2: p1 < > p4 [ 37.781781][ T3914] loop2: p4 size 8388608 extends beyond EOD, truncated [ 37.939015][ T3922] loop0: detected capacity change from 0 to 2048 [ 37.958538][ T3922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.973682][ T3922] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.196: bg 0: block 234: padding at end of block bitmap is not set [ 37.989424][ T3922] EXT4-fs (loop0): Remounting filesystem read-only [ 37.998206][ T3922] syz.0.196 (3922) used greatest stack depth: 9800 bytes left [ 38.008758][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.436627][ T3373] tipc: Node number set to 2886997007 [ 38.482762][ T3946] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 38.491227][ T3946] ref_ctr increment failed for inode: 0x9e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888100054540 [ 38.572426][ T3953] ip6gretap0: entered promiscuous mode [ 38.579795][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.590152][ T3953] batadv_slave_0: entered promiscuous mode [ 38.618484][ T3953] ip6gretap0: left promiscuous mode [ 38.622611][ T3955] loop1: detected capacity change from 0 to 2048 [ 38.631788][ T3953] batadv_slave_0: left promiscuous mode [ 38.642492][ T3955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.657566][ T3955] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.210'. [ 38.674908][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.727779][ T3971] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 38.728666][ T3970] syzkaller0: entered allmulticast mode [ 38.746978][ T3972] syz.1.213[3972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.753496][ T3970] syzkaller0 (unregistering): left allmulticast mode [ 38.764158][ T3974] loop3: detected capacity change from 0 to 2048 [ 38.806994][ T3974] loop3: p1 < > p4 [ 38.811679][ T3974] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.881890][ T3978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.929884][ T3978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.996839][ T3985] loop4: detected capacity change from 0 to 512 [ 39.008198][ T3985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.021017][ T3985] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.033598][ T3978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.054036][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.122115][ T3978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.201964][ T3978] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213041][ T3978] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223948][ T3978] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.235379][ T3978] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.035096][ T4023] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 40.123078][ T4030] syzkaller0: entered promiscuous mode [ 40.128656][ T4030] syzkaller0: entered allmulticast mode [ 40.430954][ T3417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.511211][ T3417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.601219][ T3417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.660223][ T3417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.702833][ T4058] chnl_net:caif_netlink_parms(): no params data found [ 40.742616][ T3417] bridge_slave_1: left allmulticast mode [ 40.748426][ T3417] bridge_slave_1: left promiscuous mode [ 40.754158][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.763061][ T3417] bridge_slave_0: left allmulticast mode [ 40.768838][ T3417] bridge_slave_0: left promiscuous mode [ 40.774675][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.882911][ T3417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.898983][ T3417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.910046][ T3417] bond0 (unregistering): Released all slaves [ 40.972037][ T3417] hsr_slave_0: left promiscuous mode [ 40.977766][ T3417] hsr_slave_1: left promiscuous mode [ 40.983647][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.991241][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.999087][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.006521][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.015858][ T3417] veth1_macvtap: left promiscuous mode [ 41.021565][ T3417] veth0_macvtap: left promiscuous mode [ 41.027186][ T3417] veth1_vlan: left promiscuous mode [ 41.032465][ T3417] veth0_vlan: left promiscuous mode [ 41.117671][ T3417] team0 (unregistering): Port device team_slave_1 removed [ 41.131904][ T3417] team0 (unregistering): Port device team_slave_0 removed [ 41.172748][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.179904][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.189104][ T4058] bridge_slave_0: entered allmulticast mode [ 41.196125][ T4058] bridge_slave_0: entered promiscuous mode [ 41.203490][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.210613][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.218823][ T4058] bridge_slave_1: entered allmulticast mode [ 41.225791][ T4058] bridge_slave_1: entered promiscuous mode [ 41.240584][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 41.240598][ T29] audit: type=1400 audit(1737166498.451:981): avc: denied { create } for pid=4090 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.266687][ T29] audit: type=1400 audit(1737166498.471:982): avc: denied { write } for pid=4090 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.311278][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.329523][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.352423][ T4058] team0: Port device team_slave_0 added [ 41.359798][ T4058] team0: Port device team_slave_1 added [ 41.378424][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.385406][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.411398][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.422892][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.430055][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.456086][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.487725][ T4058] hsr_slave_0: entered promiscuous mode [ 41.494140][ T4058] hsr_slave_1: entered promiscuous mode [ 41.500203][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.507919][ T4058] Cannot create hsr debugfs directory [ 41.598343][ T4100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.632627][ T4058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.641502][ T4058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.650877][ T4058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.659739][ T4058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.671737][ T4100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.705154][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.719422][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.730780][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.737885][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.746390][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.753501][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.764447][ T4100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.839608][ T4100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.854065][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.914190][ T4100] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.925397][ T4100] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.936386][ T4100] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.947489][ T4100] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.017673][ T4058] veth0_vlan: entered promiscuous mode [ 42.026279][ T4058] veth1_vlan: entered promiscuous mode [ 42.045886][ T4058] veth0_macvtap: entered promiscuous mode [ 42.053834][ T4058] veth1_macvtap: entered promiscuous mode [ 42.065724][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.076383][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.086251][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.096697][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.106555][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.116994][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.128547][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.142756][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.153526][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.163463][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.173946][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.183793][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.194407][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.208700][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.219537][ T4058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.226947][ T29] audit: type=1326 audit(1737166499.431:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b675d29 code=0x7ffc0000 [ 42.228294][ T4058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.251483][ T29] audit: type=1326 audit(1737166499.431:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b675d29 code=0x7ffc0000 [ 42.260143][ T4058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.283281][ T29] audit: type=1326 audit(1737166499.431:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb21b675d29 code=0x7ffc0000 [ 42.291945][ T4058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.315074][ T29] audit: type=1326 audit(1737166499.431:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b675d29 code=0x7ffc0000 [ 42.347625][ T29] audit: type=1326 audit(1737166499.431:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b675d29 code=0x7ffc0000 [ 42.370858][ T29] audit: type=1326 audit(1737166499.431:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb21b67473c code=0x7ffc0000 [ 42.394374][ T29] audit: type=1326 audit(1737166499.431:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b675d29 code=0x7ffc0000 [ 42.417628][ T29] audit: type=1326 audit(1737166499.431:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb21b67473c code=0x7ffc0000 [ 42.515644][ T4136] ref_ctr increment failed for inode: 0x17 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103358000 [ 42.527610][ T4135] uprobe: syz.5.272:4135 failed to unregister, leaking uprobe [ 43.094783][ T4154] ÿÿÿÿÿÿ: renamed from vlan1 [ 43.305772][ T3417] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.348457][ T3417] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.421136][ T3417] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.451247][ T4178] pim6reg1: entered promiscuous mode [ 43.456699][ T4178] pim6reg1: entered allmulticast mode [ 43.464372][ T3417] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.552907][ T3417] bridge_slave_1: left allmulticast mode [ 43.558836][ T3417] bridge_slave_1: left promiscuous mode [ 43.564530][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.572441][ T3417] bridge_slave_0: left allmulticast mode [ 43.578242][ T3417] bridge_slave_0: left promiscuous mode [ 43.583891][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.668796][ T3417] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.677631][ T3417] bond_slave_0: left promiscuous mode [ 43.683997][ T3417] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.692840][ T3417] bond_slave_1: left promiscuous mode [ 43.699083][ T3417] $Hÿ (unregistering): Released all slaves [ 43.740584][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 43.778858][ T3417] tipc: Left network mode [ 43.788384][ T3417] hsr_slave_0: left promiscuous mode [ 43.794076][ T3417] hsr_slave_1: left promiscuous mode [ 43.800000][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.807462][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.814989][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.822593][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.833081][ T3417] veth1_macvtap: left promiscuous mode [ 43.839370][ T3417] veth0_macvtap: left promiscuous mode [ 43.844966][ T3417] veth1_vlan: left promiscuous mode [ 43.850234][ T3417] veth0_vlan: left promiscuous mode [ 43.901699][ T3417] team0 (unregistering): Port device team_slave_1 removed [ 43.910884][ T3417] team0 (unregistering): Port device team_slave_0 removed [ 43.942639][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.949750][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.957015][ T4168] bridge_slave_0: entered allmulticast mode [ 43.963494][ T4168] bridge_slave_0: entered promiscuous mode [ 43.970184][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.977343][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.984573][ T4168] bridge_slave_1: entered allmulticast mode [ 43.990994][ T4168] bridge_slave_1: entered promiscuous mode [ 44.007992][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.018426][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.048846][ T4168] team0: Port device team_slave_0 added [ 44.055895][ T4168] team0: Port device team_slave_1 added [ 44.076233][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.083343][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.109308][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.122987][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.130149][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.156349][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.192361][ T4168] hsr_slave_0: entered promiscuous mode [ 44.198810][ T4168] hsr_slave_1: entered promiscuous mode [ 44.292648][ T4168] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 44.316776][ T4168] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 44.337133][ T4168] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 44.349080][ T4168] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 44.367283][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.374363][ T4168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.381775][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.388859][ T4168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.427877][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.440569][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.448511][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.456357][ T4214] loop4: detected capacity change from 0 to 2048 [ 44.467556][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.476930][ T2107] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.484020][ T2107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.495386][ T2107] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.497147][ T4214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.502513][ T2107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.519974][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.532945][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.551482][ T4214] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.296: bg 0: block 234: padding at end of block bitmap is not set [ 44.566141][ T4214] EXT4-fs (loop4): Remounting filesystem read-only [ 44.597287][ T4214] syz.4.296 (4214) used greatest stack depth: 9640 bytes left [ 44.606127][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.640387][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.862649][ T4168] veth0_vlan: entered promiscuous mode [ 44.871890][ T4168] veth1_vlan: entered promiscuous mode [ 44.888482][ T4168] veth0_macvtap: entered promiscuous mode [ 44.908958][ T4168] veth1_macvtap: entered promiscuous mode [ 44.935962][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.946508][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.956391][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.967015][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.976864][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.987339][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.998244][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.008461][ T4246] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.022849][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.033486][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.043352][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.053874][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.063756][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.074467][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.085144][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.094038][ T4168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.102928][ T4168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.112341][ T4168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.121199][ T4168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.136662][ T4246] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.168267][ T4249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.304'. [ 45.179173][ T4246] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.190937][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.198425][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.212745][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.220494][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.249068][ T4246] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.260941][ T4254] bpf_get_probe_write_proto: 8 callbacks suppressed [ 45.260957][ T4254] syz.6.284[4254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.269920][ T4254] syz.6.284[4254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.281734][ T4254] syz.6.284[4254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.341220][ T4261] bridge0: entered allmulticast mode [ 45.395594][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 45.423493][ T4269] loop6: detected capacity change from 0 to 512 [ 45.429489][ T4267] bridge_slave_1: left allmulticast mode [ 45.435844][ T4267] bridge_slave_1: left promiscuous mode [ 45.441608][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.449127][ T4269] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 45.460210][ T4267] bridge_slave_0: left allmulticast mode [ 45.461205][ T4269] EXT4-fs (loop6): 1 truncate cleaned up [ 45.465929][ T4267] bridge_slave_0: left promiscuous mode [ 45.477232][ T4269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.477434][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.510799][ T4267] bridge0 (unregistering): left allmulticast mode [ 45.558428][ T4272] loop1: detected capacity change from 0 to 2048 [ 45.579433][ T4272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.593979][ T4272] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.608434][ T4272] syz.1.313[4272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.608501][ T4272] syz.1.313[4272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.619923][ T4272] syz.1.313[4272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.752485][ T4276] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.313: bg 0: block 345: padding at end of block bitmap is not set [ 45.788591][ T4276] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 45.801185][ T4276] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.801185][ T4276] [ 45.821627][ T4276] syz.1.313 (4276) used greatest stack depth: 9176 bytes left [ 45.835741][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 45.848407][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.848407][ T28] [ 45.874918][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 45.887712][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.887712][ T28] [ 45.897430][ T28] EXT4-fs (loop1): Total free blocks count 0 [ 45.903438][ T28] EXT4-fs (loop1): Free/Dirty block details [ 45.909357][ T28] EXT4-fs (loop1): free_blocks=0 [ 46.288555][ T4168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.297762][ T4246] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.310430][ T4246] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.326845][ T4246] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.340205][ T4246] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.425733][ T4292] syz.4.319[4292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.425853][ T4292] syz.4.319[4292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.437620][ T4292] syz.4.319[4292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.559553][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 46.611538][ T4302] loop4: detected capacity change from 0 to 256 [ 46.619810][ T4302] vfat: Bad value for 'fmask' [ 46.632572][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 46.632639][ T29] audit: type=1326 audit(1737166503.841:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.666581][ T29] audit: type=1326 audit(1737166503.841:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.689953][ T29] audit: type=1326 audit(1737166503.841:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.713430][ T29] audit: type=1326 audit(1737166503.851:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.736918][ T29] audit: type=1326 audit(1737166503.851:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.760356][ T29] audit: type=1326 audit(1737166503.851:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.783593][ T29] audit: type=1326 audit(1737166503.851:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.807025][ T29] audit: type=1326 audit(1737166503.851:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.830383][ T29] audit: type=1326 audit(1737166503.851:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 46.853773][ T29] audit: type=1326 audit(1737166503.851:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 47.099935][ T4314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.140204][ T4314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.301206][ T4314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.373322][ T4314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.385390][ T4329] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 47.441606][ T4314] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.461373][ T4314] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.461469][ T4333] loop0: detected capacity change from 0 to 256 [ 47.476197][ T4333] vfat: Bad value for 'fmask' [ 47.488504][ T4314] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.523889][ T4314] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.565083][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.341'. [ 47.630532][ T4347] loop6: detected capacity change from 0 to 512 [ 47.637539][ T4347] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 47.649714][ T4347] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.353: invalid indirect mapped block 4294967295 (level 0) [ 47.663961][ T4347] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.353: invalid indirect mapped block 4294967295 (level 1) [ 47.700049][ T4347] EXT4-fs (loop6): 1 orphan inode deleted [ 47.705906][ T4347] EXT4-fs (loop6): 1 truncate cleaned up [ 47.720249][ T4347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.559322][ T4168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.591962][ T4368] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 48.646650][ T4372] loop5: detected capacity change from 0 to 256 [ 48.653316][ T4372] vfat: Bad value for 'fmask' [ 49.179988][ T4380] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.258838][ T4380] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.325433][ T4380] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.387440][ T4380] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.473106][ T4380] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.502435][ T4380] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.514689][ T4380] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526521][ T4380] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.536387][ T4394] loop1: detected capacity change from 0 to 4096 [ 49.567251][ T4394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.647561][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.746191][ T4404] loop1: detected capacity change from 0 to 512 [ 49.755427][ T4404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.769241][ T4404] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.362: invalid indirect mapped block 4294967295 (level 0) [ 49.786545][ T4404] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.362: invalid indirect mapped block 4294967295 (level 1) [ 49.807033][ T4404] EXT4-fs (loop1): 1 orphan inode deleted [ 49.812821][ T4404] EXT4-fs (loop1): 1 truncate cleaned up [ 49.836027][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.638722][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.664221][ T4432] vlan2: entered allmulticast mode [ 50.778703][ T4443] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.900160][ T4449] loop0: detected capacity change from 0 to 128 [ 50.942443][ T4443] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.002692][ T4443] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.048989][ T4449] syz.0.380: attempt to access beyond end of device [ 51.048989][ T4449] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 51.069259][ T4443] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.082116][ T4453] vhci_hcd: invalid port number 86 [ 51.087348][ T4453] vhci_hcd: default hub control req: a00b v0080 i0056 l0 [ 51.099859][ T4449] syz.0.380: attempt to access beyond end of device [ 51.099859][ T4449] loop0: rw=524288, sector=529, nr_sectors = 256 limit=128 [ 51.129073][ T4449] syz.0.380: attempt to access beyond end of device [ 51.129073][ T4449] loop0: rw=0, sector=657, nr_sectors = 8 limit=128 [ 51.131187][ T4457] loop4: detected capacity change from 0 to 512 [ 51.147807][ T4449] syz.0.380: attempt to access beyond end of device [ 51.147807][ T4449] loop0: rw=0, sector=657, nr_sectors = 8 limit=128 [ 51.162801][ T4457] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.168002][ T4443] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.182754][ T4457] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.384: invalid indirect mapped block 4294967295 (level 0) [ 51.184592][ T4443] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.216723][ T4457] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.384: invalid indirect mapped block 4294967295 (level 1) [ 51.236839][ T4457] EXT4-fs (loop4): 1 orphan inode deleted [ 51.242693][ T4457] EXT4-fs (loop4): 1 truncate cleaned up [ 51.256996][ T4457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.260638][ T4443] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.281957][ T4462] loop0: detected capacity change from 0 to 1024 [ 51.292871][ T4443] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.312548][ T4462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.353305][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.370693][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.383'. [ 51.379629][ T4455] bridge_slave_1: left allmulticast mode [ 51.385378][ T4455] bridge_slave_1: left promiscuous mode [ 51.391156][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.408974][ T4455] bridge_slave_0: left allmulticast mode [ 51.414652][ T4455] bridge_slave_0: left promiscuous mode [ 51.420342][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.637582][ T29] kauditd_printk_skb: 8116 callbacks suppressed [ 51.637599][ T29] audit: type=1326 audit(1737166508.851:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 51.667368][ T29] audit: type=1326 audit(1737166508.851:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097b195d29 code=0x7ffc0000 [ 51.691438][ T29] audit: type=1326 audit(1737166508.851:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f097b18cce7 code=0x7ffc0000 [ 51.714710][ T29] audit: type=1326 audit(1737166508.851:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f097b131f29 code=0x7ffc0000 [ 51.738054][ T29] audit: type=1326 audit(1737166508.851:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f097b18cce7 code=0x7ffc0000 [ 51.761333][ T29] audit: type=1326 audit(1737166508.851:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f097b131f29 code=0x7ffc0000 [ 51.784642][ T29] audit: type=1326 audit(1737166508.851:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f097b18cce7 code=0x7ffc0000 [ 51.807891][ T29] audit: type=1326 audit(1737166508.851:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f097b131f29 code=0x7ffc0000 [ 51.831196][ T29] audit: type=1326 audit(1737166508.851:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f097b18cce7 code=0x7ffc0000 [ 51.854529][ T29] audit: type=1326 audit(1737166508.851:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f097b131f29 code=0x7ffc0000 [ 52.041261][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.105490][ T4483] $Hÿ: renamed from bond0 (while UP) [ 52.115370][ T4483] $Hÿ: entered promiscuous mode [ 52.120495][ T4483] bond_slave_0: entered promiscuous mode [ 52.126207][ T4483] bond_slave_1: entered promiscuous mode [ 52.236599][ T4492] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.328489][ T4492] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.380090][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.387686][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.395134][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.403598][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.411136][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.418595][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.426097][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.433613][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.441070][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.448489][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.455879][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.463279][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.470686][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.478177][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.485664][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.493099][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.500593][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.508026][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.515429][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.522889][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.530359][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.537858][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.545236][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.552692][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.560081][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.567502][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.574908][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.582372][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.589806][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.597186][ T4428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.605052][ T4428] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 52.605582][ T4492] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.664028][ T4510] netlink: 28 bytes leftover after parsing attributes in process `syz.5.401'. [ 52.707850][ T4492] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.772331][ T4492] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.782997][ T4492] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.793777][ T4492] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.804745][ T4492] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.024348][ T4522] syz.0.416[4522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.024436][ T4522] syz.0.416[4522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.036456][ T4522] syz.0.416[4522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.609474][ T4538] ref_ctr increment failed for inode: 0x181 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103359a40 [ 54.633159][ T4541] loop4: detected capacity change from 0 to 512 [ 54.634389][ T4538] ref_ctr increment failed for inode: 0x181 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103359a40 [ 54.650818][ T4541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.670937][ T4536] uprobe: syz.0.423:4536 failed to unregister, leaking uprobe [ 54.686228][ T4541] EXT4-fs (loop4): 1 orphan inode deleted [ 54.692071][ T4541] EXT4-fs (loop4): 1 truncate cleaned up [ 54.699094][ T4541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.727304][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.730230][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.743921][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.751353][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.758812][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.766295][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.773718][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.781194][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.788651][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.796043][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.803438][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.810822][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.818206][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.825575][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.833120][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.840677][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.840854][ T4536] uprobe: syz.0.423:4536 failed to unregister, leaking uprobe [ 54.848085][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.863090][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.870617][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.878182][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.885654][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.893193][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.900640][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.908122][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.915491][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.922887][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.930384][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.937776][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.945190][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.952686][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.960167][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.967938][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 54.994023][ T4556] loop4: detected capacity change from 0 to 2048 [ 55.008532][ T4556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.023074][ T4556] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.415'. [ 55.055601][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.064816][ T4563] wireguard0: entered promiscuous mode [ 55.070345][ T4563] wireguard0: entered allmulticast mode [ 55.076867][ T4565] serio: Serial port ptm0 [ 55.087853][ T4567] loop4: detected capacity change from 0 to 512 [ 55.094262][ T4567] EXT4-fs: dax option not supported [ 55.109759][ T4568] loop0: detected capacity change from 0 to 164 [ 55.117205][ T4568] Unable to read rock-ridge attributes [ 55.124469][ T4568] Unable to read rock-ridge attributes [ 56.198402][ T4579] loop6: detected capacity change from 0 to 1024 [ 56.218433][ T4579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.245795][ T4168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.301946][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 56.654016][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 56.654032][ T29] audit: type=1326 audit(1737166513.861:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cf25fcce7 code=0x7ffc0000 [ 56.683749][ T29] audit: type=1326 audit(1737166513.861:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cf25a1f29 code=0x7ffc0000 [ 56.707215][ T29] audit: type=1326 audit(1737166513.861:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7cf2605d29 code=0x7ffc0000 [ 56.730666][ T29] audit: type=1326 audit(1737166513.871:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cf25fcce7 code=0x7ffc0000 [ 56.754097][ T29] audit: type=1326 audit(1737166513.871:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cf25a1f29 code=0x7ffc0000 [ 56.777378][ T29] audit: type=1326 audit(1737166513.871:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7cf2605d29 code=0x7ffc0000 [ 56.800829][ T29] audit: type=1326 audit(1737166513.881:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cf25fcce7 code=0x7ffc0000 [ 56.824124][ T29] audit: type=1326 audit(1737166513.881:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cf25a1f29 code=0x7ffc0000 [ 56.847409][ T29] audit: type=1326 audit(1737166513.881:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7cf2605d29 code=0x7ffc0000 [ 56.871351][ T29] audit: type=1326 audit(1737166513.891:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cf25fcce7 code=0x7ffc0000 [ 57.049702][ T4596] loop5: detected capacity change from 0 to 512 [ 57.064089][ T4596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.075616][ T4596] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.429: invalid indirect mapped block 4294967295 (level 0) [ 57.096259][ T4596] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.429: invalid indirect mapped block 4294967295 (level 1) [ 57.111399][ T4594] tmpfs: Bad value for 'mpol' [ 57.116536][ T4594] netlink: 'syz.1.441': attribute type 13 has an invalid length. [ 57.127805][ T4596] EXT4-fs (loop5): 1 orphan inode deleted [ 57.133609][ T4596] EXT4-fs (loop5): 1 truncate cleaned up [ 57.140801][ T4596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.199131][ T4594] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.206363][ T4594] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.233269][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.437'. [ 57.242257][ T4609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.437'. [ 57.261545][ T4594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.272363][ T4594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.287066][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 57.370175][ T4594] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.378642][ T4594] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.387041][ T4594] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.395535][ T4594] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.439380][ T4609] geneve2: entered allmulticast mode [ 57.656755][ T4621] loop1: detected capacity change from 0 to 164 [ 57.666356][ T4619] wireguard0: entered promiscuous mode [ 57.672057][ T4619] wireguard0: entered allmulticast mode [ 57.706924][ T4621] Unable to read rock-ridge attributes [ 57.714050][ T4621] Unable to read rock-ridge attributes [ 57.769659][ T4547] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.891907][ T4623] loop6: detected capacity change from 0 to 512 [ 57.963027][ T4058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.975556][ T4623] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.001251][ T4623] EXT4-fs (loop6): 1 orphan inode deleted [ 58.007092][ T4623] EXT4-fs (loop6): 1 truncate cleaned up [ 58.009512][ T4625] loop4: detected capacity change from 0 to 4096 [ 58.022859][ T4623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.058392][ T4625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.075640][ T4168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.239956][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.343557][ T4643] loop0: detected capacity change from 0 to 8192 [ 58.361490][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.452'. [ 58.524623][ T4643] ================================================================== [ 58.532773][ T4643] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 58.539990][ T4643] [ 58.542316][ T4643] write to 0xffff888106b7c814 of 4 bytes by task 4654 on cpu 0: [ 58.549948][ T4643] __xa_set_mark+0x182/0x1b0 [ 58.554556][ T4643] __folio_mark_dirty+0x3b5/0x4e0 [ 58.559605][ T4643] mark_buffer_dirty+0x134/0x230 [ 58.564558][ T4643] block_write_end+0x123/0x210 [ 58.569328][ T4643] generic_write_end+0x5c/0x160 [ 58.574193][ T4643] fat_write_end+0x4e/0x160 [ 58.578706][ T4643] generic_perform_write+0x33c/0x4a0 [ 58.584016][ T4643] __generic_file_write_iter+0xa1/0x120 [ 58.589570][ T4643] generic_file_write_iter+0x77/0x1c0 [ 58.594961][ T4643] iter_file_splice_write+0x5f1/0x980 [ 58.600352][ T4643] direct_splice_actor+0x160/0x2c0 [ 58.605470][ T4643] splice_direct_to_actor+0x302/0x670 [ 58.610855][ T4643] do_splice_direct+0xd7/0x150 [ 58.615629][ T4643] do_sendfile+0x398/0x660 [ 58.620052][ T4643] __x64_sys_sendfile64+0x110/0x150 [ 58.625266][ T4643] x64_sys_call+0xfbd/0x2dc0 [ 58.629861][ T4643] do_syscall_64+0xc9/0x1c0 [ 58.634364][ T4643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.640250][ T4643] [ 58.642562][ T4643] read to 0xffff888106b7c814 of 4 bytes by task 4643 on cpu 1: [ 58.650095][ T4643] xas_find_marked+0x60a/0x660 [ 58.654850][ T4643] find_get_entry+0x54/0x390 [ 58.659431][ T4643] filemap_get_folios_tag+0x9e/0x210 [ 58.664710][ T4643] file_write_and_wait_range+0x204/0x2f0 [ 58.670339][ T4643] __generic_file_fsync+0x46/0x140 [ 58.675447][ T4643] fat_file_fsync+0x46/0x100 [ 58.680036][ T4643] vfs_fsync_range+0x116/0x130 [ 58.684799][ T4643] generic_file_write_iter+0x185/0x1c0 [ 58.690252][ T4643] iter_file_splice_write+0x5f1/0x980 [ 58.695645][ T4643] direct_splice_actor+0x160/0x2c0 [ 58.700767][ T4643] splice_direct_to_actor+0x302/0x670 [ 58.706150][ T4643] do_splice_direct+0xd7/0x150 [ 58.710916][ T4643] do_sendfile+0x398/0x660 [ 58.715322][ T4643] __x64_sys_sendfile64+0x110/0x150 [ 58.720520][ T4643] x64_sys_call+0xfbd/0x2dc0 [ 58.725101][ T4643] do_syscall_64+0xc9/0x1c0 [ 58.729596][ T4643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.735480][ T4643] [ 58.737791][ T4643] value changed: 0x04000021 -> 0x0e000021 [ 58.743495][ T4643] [ 58.745805][ T4643] Reported by Kernel Concurrency Sanitizer on: [ 58.751953][ T4643] CPU: 1 UID: 0 PID: 4643 Comm: syz.0.449 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 58.762532][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.772587][ T4643] ================================================================== [ 59.031351][ T4654] ================================================================== [ 59.039458][ T4654] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 59.046584][ T4654] [ 59.048914][ T4654] write to 0xffff888106b7c814 of 4 bytes by task 4643 on cpu 0: [ 59.056547][ T4654] xas_set_mark+0x131/0x150 [ 59.061073][ T4654] tag_pages_for_writeback+0xa5/0x2a0 [ 59.066454][ T4654] writeback_iter+0x351/0x830 [ 59.071143][ T4654] write_cache_pages+0x4b/0x100 [ 59.076002][ T4654] mpage_writepages+0x72/0xf0 [ 59.080698][ T4654] fat_writepages+0x24/0x30 [ 59.085209][ T4654] do_writepages+0x1d8/0x480 [ 59.089816][ T4654] file_write_and_wait_range+0x168/0x2f0 [ 59.095449][ T4654] __generic_file_fsync+0x46/0x140 [ 59.100570][ T4654] fat_file_fsync+0x46/0x100 [ 59.105171][ T4654] vfs_fsync_range+0x116/0x130 [ 59.109951][ T4654] generic_file_write_iter+0x185/0x1c0 [ 59.115432][ T4654] iter_file_splice_write+0x5f1/0x980 [ 59.120822][ T4654] direct_splice_actor+0x160/0x2c0 [ 59.125946][ T4654] splice_direct_to_actor+0x302/0x670 [ 59.131330][ T4654] do_splice_direct+0xd7/0x150 [ 59.136115][ T4654] do_sendfile+0x398/0x660 [ 59.140538][ T4654] __x64_sys_sendfile64+0x110/0x150 [ 59.145761][ T4654] x64_sys_call+0xfbd/0x2dc0 [ 59.150369][ T4654] do_syscall_64+0xc9/0x1c0 [ 59.154894][ T4654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.160811][ T4654] [ 59.163145][ T4654] read to 0xffff888106b7c814 of 4 bytes by task 4654 on cpu 1: [ 59.170701][ T4654] xas_find_marked+0x60a/0x660 [ 59.175484][ T4654] find_get_entry+0x54/0x390 [ 59.180099][ T4654] filemap_get_folios_tag+0x9e/0x210 [ 59.185412][ T4654] file_write_and_wait_range+0x204/0x2f0 [ 59.191063][ T4654] __generic_file_fsync+0x46/0x140 [ 59.196201][ T4654] fat_file_fsync+0x46/0x100 [ 59.200829][ T4654] vfs_fsync_range+0x116/0x130 [ 59.205621][ T4654] generic_file_write_iter+0x185/0x1c0 [ 59.211103][ T4654] iter_file_splice_write+0x5f1/0x980 [ 59.216501][ T4654] direct_splice_actor+0x160/0x2c0 [ 59.221657][ T4654] splice_direct_to_actor+0x302/0x670 [ 59.227049][ T4654] do_splice_direct+0xd7/0x150 [ 59.231835][ T4654] do_sendfile+0x398/0x660 [ 59.236268][ T4654] __x64_sys_sendfile64+0x110/0x150 [ 59.241495][ T4654] x64_sys_call+0xfbd/0x2dc0 [ 59.246104][ T4654] do_syscall_64+0xc9/0x1c0 [ 59.250623][ T4654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.256530][ T4654] [ 59.258870][ T4654] value changed: 0x06000021 -> 0x0a000021 [ 59.264573][ T4654] [ 59.266885][ T4654] Reported by Kernel Concurrency Sanitizer on: [ 59.273023][ T4654] CPU: 1 UID: 0 PID: 4654 Comm: syz.0.449 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 59.283599][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.293646][ T4654] ==================================================================