last executing test programs: 4m10.681275482s ago: executing program 32 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r2, 0x0, 0x4) 4m4.594536018s ago: executing program 33 (id=265): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) accept4(r0, 0x0, 0x0, 0x0) 2m40.829006133s ago: executing program 34 (id=3616): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000d00)=ANY=[], 0x0) 2m19.710163237s ago: executing program 35 (id=4560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) 2m18.746355566s ago: executing program 36 (id=4587): socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x2, 0x0, 0x8) 2m18.469383775s ago: executing program 37 (id=4599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2f, 0x4608, @void}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m48.375758747s ago: executing program 38 (id=5091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000001c80)=ANY=[@ANYRES32=0x0, @ANYBLOB="7390538f571ae6d3bbe5802f8074583471895a61cbafef94f0d3a3288e41b689c14cf69f801f6a14f724ed9b3ceb9daa570724c66f4aa5525f8f6b3adf1c16f164e3a8bb8a9aa32ba217b034fd98a6644daa36189e40b6c5582a74551e4031eb4194a408cc58b391443fd987fd81586c72a9a9c880d762795bddc8c8f8bc53582c6a80336899b9b690fc28457a0ec5fa6ff5bb3fe197723aecdb169aa3e1e73f080e2a69cd37cffdb631b50685f5f9197c3a135db2cec2a43d4f6ec66d80815f7f3c135851a22cc7668982e9c844aff5f05a260ec2f86670976d4972868ec691e5", @ANYRESHEX], 0xfe, 0x674, &(0x7f0000004040)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 1m41.832375419s ago: executing program 4 (id=5771): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) close(r1) 1m41.666948249s ago: executing program 4 (id=5774): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m41.583527498s ago: executing program 4 (id=5776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) 1m41.502121128s ago: executing program 4 (id=5779): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 1m41.444507288s ago: executing program 4 (id=5784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 1m41.214614658s ago: executing program 4 (id=5793): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000003000/0x2000)=nil) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x20, 0x0) 1m41.214372188s ago: executing program 39 (id=5793): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000003000/0x2000)=nil) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x20, 0x0) 1m41.084498258s ago: executing program 8 (id=5796): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108040, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x545, &(0x7f0000000ac0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1m40.996798538s ago: executing program 8 (id=5800): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PROB={0x7, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x16fc, 0x1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x174}}, 0x0) 1m40.918472328s ago: executing program 8 (id=5802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) 1m40.832173917s ago: executing program 8 (id=5804): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 1m40.755296547s ago: executing program 8 (id=5806): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x64, 0x0, 0xfe, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 1m40.215942607s ago: executing program 8 (id=5818): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1m40.215625587s ago: executing program 40 (id=5818): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1m24.455693627s ago: executing program 3 (id=6498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}}, 0x0) 1m24.282846126s ago: executing program 3 (id=6501): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020600) r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x40000001}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x48, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='./file0\x00'}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1m24.091125196s ago: executing program 3 (id=6505): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xe1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 1m24.002214896s ago: executing program 3 (id=6509): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m23.973770796s ago: executing program 3 (id=6512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) 1m23.787051646s ago: executing program 3 (id=6515): r0 = eventfd2(0x9, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendto$inet6(r3, &(0x7f0000000140)="ed93a07d63538c81d56746cd2dda09da45d75ad8632a5f08146d736d592236e235788582a43c70e4b7a8ff65e323b54f5bae06f0", 0x34, 0x4000011, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @mcast1, 0x94e}, 0x1c) 1m23.748478536s ago: executing program 41 (id=6515): r0 = eventfd2(0x9, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendto$inet6(r3, &(0x7f0000000140)="ed93a07d63538c81d56746cd2dda09da45d75ad8632a5f08146d736d592236e235788582a43c70e4b7a8ff65e323b54f5bae06f0", 0x34, 0x4000011, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @mcast1, 0x94e}, 0x1c) 1m14.847827725s ago: executing program 6 (id=6868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2, 0x80000001}) 1m14.826955625s ago: executing program 6 (id=6869): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x3}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 1m14.805675145s ago: executing program 6 (id=6870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m14.734242545s ago: executing program 6 (id=6872): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271) 1m14.720026345s ago: executing program 6 (id=6873): write$binfmt_script(0xffffffffffffffff, &(0x7f0000002800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x410cc4, &(0x7f0000000340), 0x1, 0x77e, &(0x7f0000000800)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1m14.534532665s ago: executing program 6 (id=6878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m14.534214184s ago: executing program 42 (id=6878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 59.161266875s ago: executing program 7 (id=7447): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x20, r3, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x80) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 58.175062994s ago: executing program 7 (id=7491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r0, 0xffffffffffffffff, 0x0) 58.113512964s ago: executing program 7 (id=7495): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000000380)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4840) 57.880517333s ago: executing program 7 (id=7497): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000240)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x101, 0x0) getdents(r0, &(0x7f0000002fc0)=""/4107, 0x100b) 57.680037473s ago: executing program 7 (id=7505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) 56.978661882s ago: executing program 7 (id=7528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 56.978524812s ago: executing program 43 (id=7528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 30.257395428s ago: executing program 0 (id=8356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='block_bio_remap\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 30.201671328s ago: executing program 0 (id=8358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0x1a6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, 0x0, 0x0) 30.161581648s ago: executing program 0 (id=8359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 28.700005086s ago: executing program 0 (id=8379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) 26.493696514s ago: executing program 5 (id=8428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 26.449854944s ago: executing program 5 (id=8430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) 26.270860724s ago: executing program 9 (id=8431): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 26.177779433s ago: executing program 9 (id=8433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) setreuid(0x0, 0xee00) inotify_init() 26.098957213s ago: executing program 9 (id=8434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) 25.950786453s ago: executing program 9 (id=8437): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) 25.857605043s ago: executing program 9 (id=8439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r2, 0x1, 0x3, 0xfffffffc, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x80) 25.818889333s ago: executing program 9 (id=8440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000440)="8d808be20faddb0007da9a036558", 0xe}], 0x2) 25.466885712s ago: executing program 5 (id=8446): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x17) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x72}, 0x18) fcntl$notify(r1, 0x402, 0x3) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 25.426606972s ago: executing program 5 (id=8447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) 24.568744781s ago: executing program 5 (id=8449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040), 0x4) sendmmsg$sock(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000000200)="54de9170f42838c0fd3fbbfd9c1ff09d49035619bf9d56338614daa118827877839e94090389a55ccd99844a65fcf8566535bfa3656cc8b68051d214c954d345b221e8db656de996a08204e62c59d7a51b26d6c4a59732f35ef01efdd90dc5d6afc8dc427867fa841a8f7a40409eced425b25401ba58b71a744165dd5bfc3014f9ecd7990ffe0d8f8ca68bd74f7803e15fbe0a72ba26097f95b7cb65c927745f7751f88e91bac2c373b95897b681d09efd428bbcf86821c786054d6c5402ad", 0xbf}, {&(0x7f0000004400)="e80f2b85107ecbd942677a2afc9ec38a238e98f0968b1bf7", 0x18}, {&(0x7f0000004440)="42d8b73f861c205fc9f03219fd7b72e24c837b3899e8eabe51e574612cac498a88936bcd03bade395b3c4d0b3a4c41264a0aedcae452964339a4dd5f7ad523b4d01a8f0bd8993b3f2d7fbb7b660ca42272bbed63f47b472d48c626178cf3c62c7bfcdb96869066fe93c05d5f3308ee8bca238fd7e29fcd77dfac9a8080c5c89b9c3c5139387eeb3424bf8085353bd99b37373b55f70af78c12a894", 0x9b}, {&(0x7f0000004500)="3fd3bc653efb2912876124a3257be88d8d1e3321192bfe099f6157b14992da6aba89abd8a8e69c763329b15889a690fd572064b371bab2dd084a70a444cc1b5f783a8ac6e76e43fcd37ef689e4c06c22c7a06579eb951c7fee204123f4d94a3ca1dd592f04", 0x65}, {&(0x7f0000004580)="35baf99e1b57e0b898ff12034de36adfbf87a5b7b79ff95b7e18561b4dc7df1cbadc28f3228296d4a41a4f2e8ecd636ca3dcf14c3b3b9be0f63d96cac233d7b8548429d900168285db5696ed55cb1a2deb0ae73a77c706c3634da596de867b890fcf0c", 0x63}, {&(0x7f0000004600)="9e4af11531436a85d3d800282d1682b764f549f0f289786e695393f6b0a0a9d93c7d61e78c39855590523e898a58459460d7545c14aebbdae9000e81316f752d2df3ca3ccb13cb73bbcc78f42adb24764dfc56e2f278d43b13d96e0d4bed51cb96c197146150f3cfbd601cca5ba5b67ac58ed764e63b623996f5566f44f4bed3475c9f16095eec9ac344b72b3511fe2625497ec3d07972d76cb58fec2dd1b09b65228c1ae03a8fc37e951d5bc47833d3224681c07472", 0xb6}, {&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="ded2257af45330279c63a9719b85446004c766e9dad2f9fc3b5eb2f6a78f14a490e06dacf7de121e8ea9f824f3861f9440493fb716bda73903204396a513e8cac7319e4ba85936e297e98cffe557d5595bca2e8b795c03c7", 0x58}], 0x8}}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000005840)="eb026edf4c90f4f3224f9cce24fb60707b4a7b8c157e08f06f65f32d41e7721c35d19782d0a1854a9eaf38a3baec9c0f0857e1ed2a53c692d17c833e2ea3a0f289b108b95e02d595d4354e9ed15776387bb9c4d63b0ff5769227c1b7590755f0ac45b6ab52a970d205f41f06fc5ad4af65dab227c20f00b280ca1b50204d3247c4d26e515adb49066c5cdaa1390117", 0x8f}, {&(0x7f0000005900)="f636492688c2e22d4758f1aa489f19df0fb00177c34193f52b57954828e00d707340b154ee144dcb2b5cdf7d3cd7dc86c4eb09679802eee538b5f47b8f766acf71a801f3183db1", 0x47}, {&(0x7f0000005980)="8ecc0b55fe377421e28cbc72e4e1a53423311e995d6d1e", 0x17}, {&(0x7f00000059c0)="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", 0x288}], 0x4}}], 0x2, 0x8000) 24.549318981s ago: executing program 5 (id=8450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000feffffff0a00000000000000060007000700000008000500", @ANYRES32=r3, @ANYBLOB="18000880140001"], 0x40}}, 0x0) 17.590926742s ago: executing program 0 (id=8455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="45f7000000000000000032000000040006"], 0x1c}}, 0x0) 17.544949462s ago: executing program 0 (id=8457): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) unshare(0x6a040000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2, 0x826f}}}, 0x32) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) 10.363260313s ago: executing program 44 (id=8440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000440)="8d808be20faddb0007da9a036558", 0xe}], 0x2) 9.362373672s ago: executing program 45 (id=8450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000feffffff0a00000000000000060007000700000008000500", @ANYRES32=r3, @ANYBLOB="18000880140001"], 0x40}}, 0x0) 8.800910661s ago: executing program 1 (id=8469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) fsetxattr$security_capability(r3, &(0x7f00000002c0), 0x0, 0x0, 0x1) 8.751797191s ago: executing program 1 (id=8471): socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x76c2, 0x80, 0x4, 0x2f6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0xfffffffc, 0x4, 0x0, 0x0) 8.686881391s ago: executing program 1 (id=8472): r0 = socket(0x200000000000011, 0x2, 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x2ee}, 0x1800, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.353043973s ago: executing program 46 (id=8457): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) unshare(0x6a040000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2, 0x826f}}}, 0x32) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) 785.783031ms ago: executing program 1 (id=8478): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) 617.600991ms ago: executing program 2 (id=8481): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) fchdir(r0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 492.961591ms ago: executing program 2 (id=8482): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 417.273911ms ago: executing program 2 (id=8483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r3 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) 386.798171ms ago: executing program 2 (id=8484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1, 0x0, 0x20000000000000}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 282.277891ms ago: executing program 2 (id=8485): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff4}, 0x0, 0xc8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781"], 0xfdef) 249.81214ms ago: executing program 2 (id=8486): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local, 0x1a, r2}) 145.40188ms ago: executing program 1 (id=8487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x101}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="f2c74e1f", 0x4}], 0x1}}], 0x2, 0x7c9ce320e12d300) 0s ago: executing program 1 (id=8488): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000a409feff04000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) kernel console output (not intermixed with test programs): state [ 203.496037][T19848] bond0: entered allmulticast mode [ 203.501168][T19848] bond_slave_0: entered allmulticast mode [ 203.506965][T19848] bond_slave_1: entered allmulticast mode [ 203.801692][T19884] netlink: 'syz.2.6802': attribute type 21 has an invalid length. [ 203.924233][T19900] block device autoloading is deprecated and will be removed. [ 204.577401][T19948] msdos: Unknown parameter '18446744073709551615OG5s+017777777777777777777773Pq{P [ 204.577401][T19948] n'|$@OO-+el' [ 204.664946][T19957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19957 comm=syz.2.6834 [ 204.725661][T19957] syz.2.6834[19957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.836418][T19974] validate_nla: 3 callbacks suppressed [ 204.836436][T19974] netlink: 'syz.0.6841': attribute type 3 has an invalid length. [ 204.969796][T19995] xt_CT: No such helper "snmp" [ 205.079152][T20004] __nla_validate_parse: 5 callbacks suppressed [ 205.079168][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6855'. [ 205.531520][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6877'. [ 205.540531][T20048] IPVS: Unknown mcast interface: vcan0 [ 205.557717][ T9930] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.611503][ T9930] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.689295][ T9930] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.752989][ T9930] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.775313][T20067] netlink: 664 bytes leftover after parsing attributes in process `syz.9.6883'. [ 205.840129][T20053] chnl_net:caif_netlink_parms(): no params data found [ 205.965904][ T9930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.977269][ T9930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.988882][ T9930] bond0 (unregistering): Released all slaves [ 206.029617][T20053] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.034080][T20091] loop1: detected capacity change from 0 to 8192 [ 206.036737][T20053] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.050558][T20053] bridge_slave_0: entered allmulticast mode [ 206.057402][T20053] bridge_slave_0: entered promiscuous mode [ 206.064121][T20053] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.071198][T20053] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.080757][T20091] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 206.087953][T20091] FAT-fs (loop1): Filesystem has been set read-only [ 206.101509][T20053] bridge_slave_1: entered allmulticast mode [ 206.114767][T20053] bridge_slave_1: entered promiscuous mode [ 206.128984][ T9930] hsr_slave_0: left promiscuous mode [ 206.136806][ T9930] hsr_slave_1: left promiscuous mode [ 206.169614][ T9930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.177174][ T9930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.192866][ T9930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.200511][ T9930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.210416][ T9930] veth1_macvtap: left promiscuous mode [ 206.216028][ T9930] veth0_macvtap: left promiscuous mode [ 206.221611][ T9930] veth1_vlan: left promiscuous mode [ 206.226866][ T9930] veth0_vlan: left promiscuous mode [ 206.310808][ T9930] team0 (unregistering): Port device team_slave_1 removed [ 206.322098][ T9930] team0 (unregistering): Port device team_slave_0 removed [ 206.366386][T20113] vlan2: entered promiscuous mode [ 206.371870][T20113] bond0: entered promiscuous mode [ 206.376964][T20113] bond_slave_0: entered promiscuous mode [ 206.382695][T20113] bond_slave_1: entered promiscuous mode [ 206.388428][T20113] team0: entered promiscuous mode [ 206.393530][T20113] team_slave_0: entered promiscuous mode [ 206.399235][T20113] team_slave_1: entered promiscuous mode [ 206.406585][T20113] bond0: left promiscuous mode [ 206.411406][T20113] bond_slave_0: left promiscuous mode [ 206.416871][T20113] bond_slave_1: left promiscuous mode [ 206.422362][T20113] team0: left promiscuous mode [ 206.427181][T20113] team_slave_0: left promiscuous mode [ 206.432655][T20113] team_slave_1: left promiscuous mode [ 206.450589][T20053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.461074][T20053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.551617][T20053] team0: Port device team_slave_0 added [ 206.560166][T20053] team0: Port device team_slave_1 added [ 206.579164][T20053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.586239][T20053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.612178][T20053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.623622][T20053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.630591][T20053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.656584][T20053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.700398][T20053] hsr_slave_0: entered promiscuous mode [ 206.718247][T20053] hsr_slave_1: entered promiscuous mode [ 206.727269][T20053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.737669][T20053] Cannot create hsr debugfs directory [ 206.836316][T20136] syzkaller0: entered allmulticast mode [ 206.844925][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 206.844937][ T29] audit: type=1400 audit(1736771945.127:8680): avc: denied { read write } for pid=20141 comm="syz.0.6909" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.874877][ T29] audit: type=1400 audit(1736771945.127:8681): avc: denied { open } for pid=20141 comm="syz.0.6909" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.898265][ T29] audit: type=1400 audit(1736771945.137:8682): avc: denied { ioctl } for pid=20141 comm="syz.0.6909" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.924333][T20136] syzkaller0 (unregistering): left allmulticast mode [ 207.047557][ T29] audit: type=1400 audit(1736771945.337:8683): avc: denied { write } for pid=20146 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 207.221707][T20053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.264083][T20053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.285509][T20053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 207.295579][ T29] audit: type=1326 audit(1736771945.577:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20153 comm="syz.9.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 207.297813][T20053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.319088][ T29] audit: type=1326 audit(1736771945.577:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20153 comm="syz.9.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 207.349683][ T29] audit: type=1326 audit(1736771945.637:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20153 comm="syz.9.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 207.373264][ T29] audit: type=1326 audit(1736771945.637:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20153 comm="syz.9.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 207.396798][ T29] audit: type=1326 audit(1736771945.637:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20153 comm="syz.9.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 207.446031][ T29] audit: type=1400 audit(1736771945.737:8689): avc: denied { create } for pid=20158 comm="syz.1.6920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.466996][T20053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.477834][T20161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20161 comm=syz.9.6916 [ 207.502992][T20161] netlink: 'syz.9.6916': attribute type 1 has an invalid length. [ 207.514973][T20053] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.534053][T20161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.561276][ T9981] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.568398][ T9981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.579948][ T9981] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.587041][ T9981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.607207][T20161] bond4: (slave ip6gretap1): making interface the new active one [ 207.615477][T20161] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.623256][T20161] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.631775][T20161] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 207.655540][T20172] geneve2: entered promiscuous mode [ 207.660824][T20172] geneve2: entered allmulticast mode [ 207.707151][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.715930][ T3371] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.729537][T20053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.897872][T20228] bpf_get_probe_write_proto: 2 callbacks suppressed [ 207.897889][T20228] syz.9.6941[20228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.904707][T20228] syz.9.6941[20228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.917015][T20053] veth0_vlan: entered promiscuous mode [ 207.918290][T20228] syz.9.6941[20228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.945184][T20053] veth1_vlan: entered promiscuous mode [ 207.980335][T20053] veth0_macvtap: entered promiscuous mode [ 207.988631][T20053] veth1_macvtap: entered promiscuous mode [ 208.004032][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.014705][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.024715][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.035241][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.045109][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.055637][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.066954][T20053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.075236][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.085930][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.095905][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.106458][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.107143][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.116323][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.134423][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.144270][T20053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.154749][T20053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.165434][T20053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.182147][T20053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.190980][T20053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.199873][T20053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.208655][T20053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.247155][T20245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6949'. [ 208.376421][T20271] geneve2: entered promiscuous mode [ 208.381679][T20271] geneve2: entered allmulticast mode [ 208.422691][T20275] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6960'. [ 208.432775][T20275] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6960'. [ 208.477212][T20288] loop1: detected capacity change from 0 to 256 [ 208.533599][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.541109][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.548569][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.556155][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.563639][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.571345][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.578222][T20302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20302 comm=syz.0.6973 [ 208.578770][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.596595][T20302] netlink: 'syz.0.6973': attribute type 1 has an invalid length. [ 208.598572][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.613915][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.621311][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.628815][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.636293][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.643699][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.651118][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.658586][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.666030][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.673433][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.680874][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.688329][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.695840][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.696165][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.703220][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.718452][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.725941][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.733324][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.740807][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.748241][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.755739][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.763148][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.770560][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.777957][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.785326][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.792723][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.800145][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.807608][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.815022][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.822594][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.829995][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.837429][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.844843][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.852224][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.859719][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.867113][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.874482][ T24] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 208.882847][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.883153][ T24] hid-generic 0000:0003:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 208.920601][T20302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.967489][T20305] bond1: (slave ip6gretap1): making interface the new active one [ 208.997471][T20305] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.005303][T20305] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.013746][T20305] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 209.068727][ T3373] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.077736][T20331] netlink: 'syz.0.6985': attribute type 13 has an invalid length. [ 209.102322][T20331] gretap0: refused to change device tx_queue_len [ 209.108765][T20331] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.188789][T20349] netlink: 'syz.1.6993': attribute type 1 has an invalid length. [ 209.219032][T20353] netlink: 'syz.9.6996': attribute type 1 has an invalid length. [ 209.233896][T20355] loop1: detected capacity change from 0 to 512 [ 209.265269][T20355] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #32: comm syz.1.6997: iget: special inode unallocated [ 209.281049][T20355] EXT4-fs (loop1): Remounting filesystem read-only [ 209.287747][T20355] EXT4-fs (loop1): no journal found [ 209.292999][T20355] EXT4-fs (loop1): can't get journal size [ 209.311822][T20355] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 209.321858][T20355] EXT4-fs (loop1): failed to initialize system zone (-117) [ 209.329229][T20355] EXT4-fs (loop1): mount failed [ 209.421481][T20371] netlink: 'syz.1.7005': attribute type 13 has an invalid length. [ 209.439777][T20371] gretap0: refused to change device tx_queue_len [ 209.446259][T20371] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.570958][T20393] syz.9.7015[20393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.571064][T20393] syz.9.7015[20393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.583110][T20393] syz.9.7015[20393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.599363][T20396] serio: Serial port ptm0 [ 210.054863][T20420] vlan2: entered promiscuous mode [ 210.069822][T20420] bond0: entered promiscuous mode [ 210.074930][T20420] bond_slave_0: entered promiscuous mode [ 210.080763][T20420] bond_slave_1: entered promiscuous mode [ 210.087512][T20420] bond0: left promiscuous mode [ 210.092370][T20420] bond_slave_0: left promiscuous mode [ 210.097922][T20420] bond_slave_1: left promiscuous mode [ 210.112153][T20426] vlan2: entered allmulticast mode [ 210.384916][T20447] 9pnet: Could not find request transport: f [ 210.441894][T20453] sctp: [Deprecated]: syz.2.7041 (pid 20453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.441894][T20453] Use struct sctp_sack_info instead [ 210.473452][T20393] syz.9.7015 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 210.487711][T20393] CPU: 1 UID: 0 PID: 20393 Comm: syz.9.7015 Not tainted 6.13.0-rc7-syzkaller #0 [ 210.496779][T20393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.506903][T20393] Call Trace: [ 210.510217][T20393] [ 210.513137][T20393] dump_stack_lvl+0xf2/0x150 [ 210.517769][T20393] dump_stack+0x15/0x1a [ 210.521924][T20393] dump_header+0x83/0x2d0 [ 210.526302][T20393] oom_kill_process+0x341/0x4c0 [ 210.531200][T20393] out_of_memory+0x9af/0xbe0 [ 210.535807][T20393] ? css_next_descendant_pre+0x11c/0x140 [ 210.541443][T20393] mem_cgroup_out_of_memory+0x13e/0x190 [ 210.546992][T20393] try_charge_memcg+0x508/0x7f0 [ 210.551953][T20393] obj_cgroup_charge_pages+0xbd/0x1a0 [ 210.557326][T20393] __memcg_kmem_charge_page+0x9d/0x170 [ 210.562905][T20393] __alloc_pages_noprof+0x1bc/0x340 [ 210.568176][T20393] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 210.573622][T20393] alloc_pages_noprof+0xe1/0x100 [ 210.578570][T20393] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 210.584387][T20393] __kvmalloc_node_noprof+0x121/0x170 [ 210.589833][T20393] ? ip_set_alloc+0x1f/0x30 [ 210.594341][T20393] ip_set_alloc+0x1f/0x30 [ 210.598740][T20393] hash_netiface_create+0x273/0x730 [ 210.603965][T20393] ? __nla_parse+0x40/0x60 [ 210.608443][T20393] ? __pfx_hash_netiface_create+0x10/0x10 [ 210.614315][T20393] ip_set_create+0x359/0x8a0 [ 210.618918][T20393] ? strnstr+0xe1/0x100 [ 210.623119][T20393] ? __nla_parse+0x40/0x60 [ 210.627544][T20393] nfnetlink_rcv_msg+0x4a9/0x570 [ 210.632498][T20393] netlink_rcv_skb+0x12c/0x230 [ 210.637316][T20393] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 210.642783][T20393] nfnetlink_rcv+0x16c/0x15d0 [ 210.647473][T20393] ? _raw_spin_unlock+0x26/0x50 [ 210.652321][T20393] ? sched_balance_rq+0x15d4/0x1bb0 [ 210.657550][T20393] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 210.662985][T20393] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 210.668792][T20393] ? __bpf_ringbuf_reserve+0x2c0/0x320 [ 210.674322][T20393] ? copy_from_kernel_nofault_allowed+0x75/0xa0 [ 210.680563][T20393] ? should_fail_ex+0x31/0x230 [ 210.685323][T20393] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 210.690693][T20393] ? __rcu_read_unlock+0x34/0x70 [ 210.695633][T20393] ? __netlink_lookup+0x253/0x290 [ 210.700657][T20393] netlink_unicast+0x599/0x670 [ 210.705427][T20393] netlink_sendmsg+0x5cc/0x6e0 [ 210.710192][T20393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.715523][T20393] __sock_sendmsg+0x140/0x180 [ 210.720228][T20393] ____sys_sendmsg+0x312/0x410 [ 210.725027][T20393] __sys_sendmsg+0x19d/0x230 [ 210.729622][T20393] __x64_sys_sendmsg+0x46/0x50 [ 210.734479][T20393] x64_sys_call+0x2734/0x2dc0 [ 210.739185][T20393] do_syscall_64+0xc9/0x1c0 [ 210.743776][T20393] ? clear_bhb_loop+0x55/0xb0 [ 210.748466][T20393] ? clear_bhb_loop+0x55/0xb0 [ 210.753216][T20393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.759108][T20393] RIP: 0033:0x7f823e525d29 [ 210.763521][T20393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.783330][T20393] RSP: 002b:00007f823cb97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.791779][T20393] RAX: ffffffffffffffda RBX: 00007f823e715fa0 RCX: 00007f823e525d29 [ 210.799745][T20393] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 210.807719][T20393] RBP: 00007f823e5a1b08 R08: 0000000000000000 R09: 0000000000000000 [ 210.815688][T20393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.823670][T20393] R13: 0000000000000000 R14: 00007f823e715fa0 R15: 00007fff73dbbdd8 [ 210.831684][T20393] [ 210.834786][T20393] memory: usage 307200kB, limit 307200kB, failcnt 188 [ 210.841876][T20393] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 210.849815][T20393] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 210.857230][T20393] Memory cgroup stats for /syz9: [ 210.874434][T20393] cache 0 [ 210.882756][T20393] rss 0 [ 210.885541][T20393] shmem 0 [ 210.888511][T20393] mapped_file 0 [ 210.891985][T20393] dirty 0 [ 210.894923][T20393] writeback 0 [ 210.898306][T20393] workingset_refault_anon 78 [ 210.902900][T20393] workingset_refault_file 0 [ 210.907561][T20393] swap 765952 [ 210.910882][T20393] swapcached 0 [ 210.914250][T20393] pgpgin 64342 [ 210.917649][T20393] pgpgout 64342 [ 210.921114][T20393] pgfault 112536 [ 210.924722][T20393] pgmajfault 20 [ 210.928261][T20393] inactive_anon 0 [ 210.931892][T20393] active_anon 0 [ 210.935345][T20393] inactive_file 0 [ 210.939072][T20393] active_file 0 [ 210.942538][T20393] unevictable 0 [ 210.946116][T20393] hierarchical_memory_limit 314572800 [ 210.951487][T20393] hierarchical_memsw_limit 9223372036854771712 [ 210.957699][T20393] total_cache 0 [ 210.961225][T20393] total_rss 0 [ 210.964505][T20393] total_shmem 0 [ 210.968012][T20393] total_mapped_file 0 [ 210.972004][T20393] total_dirty 0 [ 210.975459][T20393] total_writeback 0 [ 210.979309][T20393] total_workingset_refault_anon 78 [ 210.984407][T20393] total_workingset_refault_file 0 [ 210.989462][T20393] total_swap 765952 [ 210.993294][T20393] total_swapcached 0 [ 210.997360][T20393] total_pgpgin 64342 [ 211.001244][T20393] total_pgpgout 64342 [ 211.005208][T20393] total_pgfault 112536 [ 211.009381][T20393] total_pgmajfault 20 [ 211.013448][T20393] total_inactive_anon 0 [ 211.017740][T20393] total_active_anon 0 [ 211.021898][T20393] total_inactive_file 0 [ 211.026079][T20393] total_active_file 0 [ 211.030135][T20393] total_unevictable 0 [ 211.034114][T20393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.7015,pid=20392,uid=0 [ 211.048956][T20393] Memory cgroup out of memory: Killed process 20392 (syz.9.7015) total-vm:93516kB, anon-rss:788kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 211.210586][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7051'. [ 211.241517][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7051'. [ 211.294801][T20485] loop1: detected capacity change from 0 to 2048 [ 211.301644][T20485] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.308118][T20485] EXT4-fs: Ignoring removed i_version option [ 211.358291][T20485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.418362][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.580213][T20522] SELinux: policydb version 0 does not match my version range 15-33 [ 211.590160][T20525] syz.0.7072[20525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.590244][T20525] syz.0.7072[20525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.602283][T20522] SELinux: failed to load policy [ 211.604847][T20525] syz.0.7072[20525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.623831][T20528] syz.1.7074[20528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.675061][T20525] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.699397][T20534] loop1: detected capacity change from 0 to 2048 [ 211.719148][T20535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7076'. [ 211.737294][T20534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.762926][T20537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.778695][T20537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.853836][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 211.853849][ T29] audit: type=1326 audit(1736771950.137:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 211.895128][T20554] $H: renamed from bond0 (while UP) [ 211.913567][T20554] $H: entered promiscuous mode [ 211.918803][T20554] bond_slave_0: entered promiscuous mode [ 211.924589][T20554] bond_slave_1: entered promiscuous mode [ 211.930335][T20554] team0: entered promiscuous mode [ 211.935356][T20554] team_slave_0: entered promiscuous mode [ 211.941130][T20554] team_slave_1: entered promiscuous mode [ 211.950848][ T29] audit: type=1326 audit(1736771950.177:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 211.952511][T20552] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.974457][ T29] audit: type=1326 audit(1736771950.177:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 211.994972][T20552] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 212.012895][ T29] audit: type=1326 audit(1736771950.177:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.025332][T20552] EXT4-fs (loop1): This should not happen!! Data will be lost [ 212.025332][T20552] [ 212.048830][ T29] audit: type=1326 audit(1736771950.177:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.058372][T20552] EXT4-fs (loop1): Total free blocks count 0 [ 212.058387][T20552] EXT4-fs (loop1): Free/Dirty block details [ 212.081923][ T29] audit: type=1326 audit(1736771950.177:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.087792][T20552] EXT4-fs (loop1): free_blocks=2415919104 [ 212.093661][ T29] audit: type=1326 audit(1736771950.177:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.117143][T20552] EXT4-fs (loop1): dirty_blocks=8192 [ 212.122812][ T29] audit: type=1326 audit(1736771950.177:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.146282][T20552] EXT4-fs (loop1): Block reservation details [ 212.151499][ T29] audit: type=1326 audit(1736771950.177:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.175084][T20552] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 212.211780][ T29] audit: type=1326 audit(1736771950.177:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.2.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 212.220731][T20534] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 212.603037][T20597] xt_hashlimit: size too large, truncated to 1048576 [ 212.647510][ T9930] ip6_tnl_xmit_ctl: 13 callbacks suppressed [ 212.647526][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.696844][T20606] random: crng reseeded on system resumption [ 212.952944][T20634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7120'. [ 212.963844][T20636] loop7: detected capacity change from 0 to 164 [ 212.984460][T20636] syz.7.7121: attempt to access beyond end of device [ 212.984460][T20636] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 213.001066][T20636] syz.7.7121: attempt to access beyond end of device [ 213.001066][T20636] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 213.126806][T20654] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7125'. [ 213.150912][T20645] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7125'. [ 213.164049][T20658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7131'. [ 213.419537][T20688] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7146'. [ 213.430385][T20689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7145'. [ 213.526130][T20702] loop1: detected capacity change from 0 to 512 [ 213.533086][T20702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.549754][T20702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.563168][T20702] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.595756][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.671100][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.706626][T20713] macvlan0: entered promiscuous mode [ 213.720069][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.736563][T20713] ipvlan0: entered promiscuous mode [ 213.745920][T20713] ipvlan0: left promiscuous mode [ 213.752509][T20713] macvlan0: left promiscuous mode [ 213.807817][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.855391][T20724] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 213.896751][T20730] bpf_get_probe_write_proto: 5 callbacks suppressed [ 213.896768][T20730] syz.1.7164[20730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.903532][T20730] syz.1.7164[20730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.915255][T20730] syz.1.7164[20730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.048049][T20743] loop7: detected capacity change from 0 to 8192 [ 214.352512][T20774] team0 (unregistering): Port device team_slave_0 removed [ 214.370038][T20776] syz.7.7185[20776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.370130][T20776] syz.7.7185[20776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.383477][T20774] team0 (unregistering): Port device team_slave_1 removed [ 214.390482][T20776] syz.7.7185[20776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.415364][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7186'. [ 214.507127][T20785] pim6reg: entered allmulticast mode [ 214.554390][T20785] pim6reg: left allmulticast mode [ 214.595487][T20800] syz.2.7196[20800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.595557][T20800] syz.2.7196[20800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.607683][T20800] syz.2.7196[20800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.620089][T20801] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 214.641130][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.806323][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.878933][T20823] erspan0: entered promiscuous mode [ 214.884789][T20823] batadv_slave_1: entered promiscuous mode [ 214.891472][T20823] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 214.901554][T20823] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.916059][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.280324][T20861] 9pnet: p9_errstr2errno: server reported unknown error ` [ 215.367113][T20841] Set syz1 is full, maxelem 65536 reached [ 215.785504][T20893] random: crng reseeded on system resumption [ 215.834790][T20903] xt_hashlimit: max too large, truncated to 1048576 [ 215.976026][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.086304][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.446994][T20978] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 216.454483][T20978] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 216.624545][T20997] __nla_validate_parse: 8 callbacks suppressed [ 216.624560][T20997] netlink: 566 bytes leftover after parsing attributes in process `syz.7.7282'. [ 216.960859][T21017] random: crng reseeded on system resumption [ 217.021692][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 217.021709][ T29] audit: type=1326 audit(1736771955.277:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.031612][T21029] loop7: detected capacity change from 0 to 512 [ 217.051598][ T29] audit: type=1326 audit(1736771955.277:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.051656][ T29] audit: type=1326 audit(1736771955.277:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.051675][ T29] audit: type=1326 audit(1736771955.277:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.051694][ T29] audit: type=1326 audit(1736771955.277:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.061695][T21029] EXT4-fs: Ignoring removed orlov option [ 217.081454][ T29] audit: type=1326 audit(1736771955.277:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.081497][ T29] audit: type=1326 audit(1736771955.277:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.106491][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.129071][ T29] audit: type=1326 audit(1736771955.277:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.236560][ T29] audit: type=1326 audit(1736771955.277:9121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda9d2047df code=0x7ffc0000 [ 217.259948][ T29] audit: type=1326 audit(1736771955.277:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.7.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d205d29 code=0x7ffc0000 [ 217.287956][T21029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.324063][T21029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.348269][T21029] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.387919][T21029] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7295: bg 0: block 255: padding at end of block bitmap is not set [ 217.409794][T21029] EXT4-fs (loop7): Remounting filesystem read-only [ 217.445547][T21048] loop1: detected capacity change from 0 to 512 [ 217.479917][T20053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.525990][T21048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.538681][T21048] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.576728][T21069] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 217.628817][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.276233][ T9964] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 218.276248][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.346433][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.407957][T21156] syz.9.7348[21156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.409533][T21156] msdos: Unknown parameter '1844674407370955161501777777777777777777777X' [ 218.474573][T21161] loop7: detected capacity change from 0 to 512 [ 218.511289][T21161] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7353: bg 0: block 248: padding at end of block bitmap is not set [ 218.536140][T21171] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7357'. [ 218.564765][T21172] netlink: 'syz.9.7355': attribute type 2 has an invalid length. [ 218.565821][T21161] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.7353: Failed to acquire dquot type 1 [ 218.572585][T21172] netlink: 199412 bytes leftover after parsing attributes in process `syz.9.7355'. [ 218.632222][T21161] EXT4-fs (loop7): 1 truncate cleaned up [ 218.646155][T21161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.658981][T21161] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.763932][T20053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.901088][T21210] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 218.923730][T21210] SELinux: failed to load policy [ 218.942459][T21212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7375'. [ 218.969810][T21215] tipc: Enabling of bearer rejected, failed to enable media [ 219.193839][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7382'. [ 219.407666][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.517372][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.786101][T21265] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.812641][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7400'. [ 219.845207][T21268] hsr_slave_1 (unregistering): left promiscuous mode [ 219.881596][T21273] hub 9-0:1.0: USB hub found [ 219.886414][T21273] hub 9-0:1.0: 8 ports detected [ 220.106611][T21286] netlink: 'syz.2.7409': attribute type 3 has an invalid length. [ 220.129695][T21288] bpf_get_probe_write_proto: 2 callbacks suppressed [ 220.129734][T21288] syz.2.7410[21288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.136550][T21288] syz.2.7410[21288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.148188][T21288] syz.2.7410[21288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.230363][T21296] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 220.248304][T21296] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 220.256252][T21296] vhci_hcd vhci_hcd.0: Device attached [ 220.264099][T21299] vhci_hcd: connection closed [ 220.264233][ T9964] vhci_hcd: stop threads [ 220.273269][ T9964] vhci_hcd: release socket [ 220.277764][ T9964] vhci_hcd: disconnect device [ 220.389932][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7421'. [ 220.446690][T21321] loop7: detected capacity change from 0 to 1024 [ 220.453403][T21321] EXT4-fs: Ignoring removed bh option [ 220.477761][T21321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.505434][T20053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.526082][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.588183][T21335] syz.7.7430[21335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.588361][T21335] syz.7.7430[21335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.600010][T21335] syz.7.7430[21335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.636928][T21335] loop7: detected capacity change from 0 to 8192 [ 220.638994][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.799174][T21346] netlink: 'syz.7.7435': attribute type 21 has an invalid length. [ 220.807196][T21346] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7435'. [ 220.872520][T21356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.971358][T21372] tipc: Started in network mode [ 220.976280][T21372] tipc: Node identity 1, cluster identity 4711 [ 220.982439][T21372] tipc: Node number set to 1 [ 221.157792][T21376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21376 comm=syz.2.7448 [ 221.332401][T21398] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.404177][T21404] netlink: 'syz.2.7463': attribute type 1 has an invalid length. [ 221.482347][T21418] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 221.543837][T21428] loop5: detected capacity change from 0 to 7 [ 221.550420][T21428] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.558451][T21428] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.566350][T21428] loop5: unable to read partition table [ 221.572086][T21428] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 221.572086][T21428] ) failed (rc=-5) [ 221.638047][T21442] syz.2.7481[21442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.638130][T21442] syz.2.7481[21442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.650944][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.668281][T21442] syz.2.7481[21442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.755860][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.775935][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.802607][T21449] netlink: 'syz.0.7484': attribute type 1 has an invalid length. [ 221.810452][T21449] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7484'. [ 221.827092][T21451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7485'. [ 221.837406][T21449] netlink: 'syz.0.7484': attribute type 1 has an invalid length. [ 221.845160][T21449] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7484'. [ 221.969907][T21464] syz.7.7491[21464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.986697][T21466] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7492'. [ 222.025912][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 222.025926][ T29] audit: type=1326 audit(1736771960.297:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.055637][ T29] audit: type=1326 audit(1736771960.297:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.079263][ T29] audit: type=1326 audit(1736771960.307:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.102865][ T29] audit: type=1326 audit(1736771960.307:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.126775][ T29] audit: type=1326 audit(1736771960.307:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.150420][ T29] audit: type=1326 audit(1736771960.307:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.173920][ T29] audit: type=1326 audit(1736771960.307:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.197436][ T29] audit: type=1326 audit(1736771960.307:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.220973][ T29] audit: type=1326 audit(1736771960.307:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.248685][T21475] loop7: detected capacity change from 0 to 128 [ 222.257683][ T29] audit: type=1326 audit(1736771960.417:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.0.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7029ca5d29 code=0x7ffc0000 [ 222.299477][T21479] wireguard0: entered promiscuous mode [ 222.304964][T21479] wireguard0: entered allmulticast mode [ 222.319297][T21475] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.338876][T21484] Invalid ELF header magic: != ELF [ 222.357649][T21475] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.395770][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.447978][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 222.472912][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 222.493838][T20053] EXT4-fs error (device loop7): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 222.510145][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 222.537669][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 222.557068][T20053] EXT4-fs error (device loop7): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 222.573017][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 222.591585][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 222.608080][T20053] EXT4-fs error (device loop7): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 222.622717][T20053] EXT4-fs error (device loop7): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 222.683655][T21514] loop1: detected capacity change from 0 to 512 [ 222.690659][T21514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.702548][T21514] EXT4-fs (loop1): 1 truncate cleaned up [ 222.708591][T21514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.731592][T21514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.764641][T21521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7517'. [ 222.830030][T21530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.968187][T21530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.052689][T20053] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.154046][T21532] Set syz1 is full, maxelem 65536 reached [ 223.155025][ T9981] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.237961][T21530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.260425][ T9981] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.306576][T21530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.328621][T21558] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7532'. [ 223.329327][ T9981] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.388152][T21530] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.401402][T21530] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.414182][T21530] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.430197][ T9981] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.454269][T21530] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.512595][T21548] chnl_net:caif_netlink_parms(): no params data found [ 223.565362][ T9981] bridge_slave_1: left allmulticast mode [ 223.571135][ T9981] bridge_slave_1: left promiscuous mode [ 223.576935][ T9981] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.613973][ T9981] bridge_slave_0: left allmulticast mode [ 223.619800][ T9981] bridge_slave_0: left promiscuous mode [ 223.625502][ T9981] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.771692][ T9981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.787332][ T9981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.798813][ T9981] bond0 (unregistering): Released all slaves [ 223.817874][T21548] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.825062][T21548] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.832860][T21548] bridge_slave_0: entered allmulticast mode [ 223.843245][T21548] bridge_slave_0: entered promiscuous mode [ 223.867596][T21548] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.874720][T21548] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.885089][T21548] bridge_slave_1: entered allmulticast mode [ 223.891952][T21548] bridge_slave_1: entered promiscuous mode [ 223.925038][ T9981] tipc: Left network mode [ 223.987660][ T9981] IPVS: stopping backup sync thread 20801 ... [ 223.995443][T21548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.004685][ T9967] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 224.004696][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.005832][T21548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.051967][ T9981] hsr_slave_0: left promiscuous mode [ 224.067091][ T9981] hsr_slave_1: left promiscuous mode [ 224.073207][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.080726][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.092490][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.099984][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.115813][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.131492][ T9981] veth1_macvtap: left promiscuous mode [ 224.137099][ T9981] veth0_macvtap: left promiscuous mode [ 224.142772][ T9981] veth1_vlan: left promiscuous mode [ 224.148110][ T9981] veth0_vlan: left promiscuous mode [ 224.266484][T21631] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.328647][ T9981] team0 (unregistering): Port device team_slave_1 removed [ 224.349474][ T9981] team0 (unregistering): Port device team_slave_0 removed [ 224.372019][T21646] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 224.391993][T21548] team0: Port device team_slave_0 added [ 224.410891][T21548] team0: Port device team_slave_1 added [ 224.457928][T21548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.464997][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.491171][T21548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.509664][T21653] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 224.556536][T21548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.563566][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.589656][T21548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.687827][T21548] hsr_slave_0: entered promiscuous mode [ 224.706033][T21548] hsr_slave_1: entered promiscuous mode [ 224.713389][T21548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.724993][T21548] Cannot create hsr debugfs directory [ 224.732306][T21669] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7575'. [ 224.849919][T21678] xt_CT: No such helper "snmp_trap" [ 225.112675][T21548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.119620][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.129175][T21696] tipc: Started in network mode [ 225.134084][T21696] tipc: Node identity ac14140f, cluster identity 4711 [ 225.141091][T21696] tipc: New replicast peer: 255.255.255.255 [ 225.147223][T21696] tipc: Enabled bearer , priority 10 [ 225.153456][T21548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.164269][T21548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.173209][T21548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.177677][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7588'. [ 225.213263][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7589'. [ 225.229736][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.237219][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.243154][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.255091][ T9981] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.262198][ T9981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.278973][ T9981] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.286168][ T9981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.351861][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.397981][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7593'. [ 225.411835][T21717] bond1: entered promiscuous mode [ 225.417004][T21717] bond1: entered allmulticast mode [ 225.422274][T21717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.512804][T21548] veth0_vlan: entered promiscuous mode [ 225.519668][T21728] Cannot find del_set index 0 as target [ 225.521353][T21548] veth1_vlan: entered promiscuous mode [ 225.553081][T21548] veth0_macvtap: entered promiscuous mode [ 225.560467][T21548] veth1_macvtap: entered promiscuous mode [ 225.570776][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.581379][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.591389][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.601965][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.611846][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.622302][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.633785][T21548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.648644][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.659166][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.669068][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.679599][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.689457][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.700034][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.710018][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.720613][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.731528][T21548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.760407][T21548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.769203][T21548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.778127][T21548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.787008][T21548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.799015][T21742] syz.1.7600: attempt to access beyond end of device [ 225.799015][T21742] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 225.886205][T21754] Cannot find add_set index 0 as target [ 225.906192][T21758] serio: Serial port ptm0 [ 225.966585][T21761] wireguard0: entered promiscuous mode [ 225.972086][T21761] wireguard0: entered allmulticast mode [ 225.978173][T21765] xt_hashlimit: size too large, truncated to 1048576 [ 226.265721][ T24] tipc: Node number set to 2886997007 [ 226.295844][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.406936][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.491169][T21812] xt_HMARK: spi-set and port-set can't be combined [ 226.739209][T21833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21833 comm=syz.2.7637 [ 226.751964][T21833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21833 comm=syz.2.7637 [ 227.178219][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 227.178234][ T29] audit: type=1400 audit(1736771965.467:9563): avc: denied { ioctl } for pid=21865 comm="syz.2.7653" path="socket:[66758]" dev="sockfs" ino=66758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.254835][ T29] audit: type=1400 audit(1736771965.537:9564): avc: denied { watch watch_reads } for pid=21869 comm="syz.2.7655" path="/523/file1" dev="tmpfs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.300897][T21872] loop5: detected capacity change from 0 to 2048 [ 227.316552][ T29] audit: type=1400 audit(1736771965.577:9565): avc: denied { append } for pid=21873 comm="syz.1.7656" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.426146][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.434323][T21872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.535453][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.544508][ T29] audit: type=1400 audit(1736771965.817:9566): avc: denied { cpu } for pid=21889 comm="syz.2.7663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 227.544591][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.598705][T21897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.647512][T21903] __nla_validate_parse: 3 callbacks suppressed [ 227.647529][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7668'. [ 227.675601][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.683246][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.690792][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.698357][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.705666][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 227.750708][ T29] audit: type=1400 audit(1736771966.037:9567): avc: denied { create } for pid=21908 comm="syz.9.7672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.795901][ T29] audit: type=1326 audit(1736771966.037:9568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 227.819518][ T29] audit: type=1326 audit(1736771966.037:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 227.843396][ T29] audit: type=1326 audit(1736771966.057:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 227.867167][ T29] audit: type=1326 audit(1736771966.057:9571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 227.890851][ T29] audit: type=1326 audit(1736771966.057:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 227.958796][T21927] netlink: 120 bytes leftover after parsing attributes in process `syz.9.7679'. [ 228.000528][T21929] tipc: Started in network mode [ 228.005413][T21929] tipc: Node identity 1, cluster identity 4711 [ 228.011628][T21929] tipc: Node number set to 1 [ 228.289448][T21931] bpf_get_probe_write_proto: 8 callbacks suppressed [ 228.289463][T21931] syz.9.7682[21931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.306350][T21931] syz.9.7682[21931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.334154][T21931] syz.9.7682[21931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.494424][T21946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7688'. [ 228.586429][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.649948][T21972] syz.0.7698[21972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.649995][T21972] syz.0.7698[21972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.673186][T21972] syz.0.7698[21972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.727562][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7702'. [ 228.755828][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.787562][T21976] Cannot find del_set index 0 as target [ 229.079806][T22026] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.401336][T22042] syz.9.7732: attempt to access beyond end of device [ 229.401336][T22042] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 229.448825][T22046] Invalid option length (303) for dns_resolver key [ 229.619859][T22068] xt_hashlimit: size too large, truncated to 1048576 [ 229.645298][T22070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7744'. [ 229.706661][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.736038][T22078] syz.1.7748[22078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.736222][T22078] syz.1.7748[22078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.785815][T22078] syz.1.7748[22078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.866198][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.113111][T22095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.131703][T22096] netlink: 133492 bytes leftover after parsing attributes in process `syz.1.7754'. [ 230.188861][T22095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.248532][T22099] smc: net device bond0 applied user defined pnetid SYZ0 [ 230.265673][T22099] smc: net device bond0 erased user defined pnetid SYZ0 [ 230.275873][T22095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.388583][T22095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.404944][T22109] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 230.481917][T22095] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.496761][T22095] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.520643][T22095] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.540177][T22095] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.653528][T22136] netlink: 'syz.0.7774': attribute type 21 has an invalid length. [ 230.661422][T22136] netlink: 'syz.0.7774': attribute type 20 has an invalid length. [ 230.669405][T22136] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.750085][T22146] xt_hashlimit: size too large, truncated to 1048576 [ 230.801580][T22153] netlink: 'syz.2.7781': attribute type 1 has an invalid length. [ 230.917227][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.026857][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.368156][T22148] Set syz1 is full, maxelem 65536 reached [ 231.425281][T22178] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 231.581175][ T3362] kernel write not supported for file /486/attr/exec (pid: 3362 comm: kworker/1:2) [ 231.594158][T22188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22188 comm=syz.9.7794 [ 231.616618][T22188] netlink: 'syz.9.7794': attribute type 1 has an invalid length. [ 231.636009][T22188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.657236][T22188] bond5: (slave bridge2): making interface the new active one [ 231.665436][T22188] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 232.002477][T22205] xt_hashlimit: size too large, truncated to 1048576 [ 232.045982][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.157345][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.171049][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7807'. [ 232.193226][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7807'. [ 232.399675][T22240] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 232.440749][T22242] loop5: detected capacity change from 0 to 2048 [ 232.460096][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 232.460111][ T29] audit: type=1326 audit(1736771970.737:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.9.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 232.490027][ T29] audit: type=1326 audit(1736771970.737:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.9.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 232.513481][ T29] audit: type=1326 audit(1736771970.737:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.9.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 232.537017][ T29] audit: type=1326 audit(1736771970.737:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.9.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 232.565094][T22242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.595508][T22242] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 232.612671][T22242] EXT4-fs (loop5): Remounting filesystem read-only [ 232.629888][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.678166][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7823'. [ 232.728780][ T29] audit: type=1400 audit(1736771971.017:9718): avc: denied { connect } for pid=22260 comm="syz.9.7825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.758837][ T29] audit: type=1400 audit(1736771971.037:9719): avc: denied { write } for pid=22260 comm="syz.9.7825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.770654][T22265] Cannot find del_set index 0 as target [ 232.875559][T22281] syz.9.7833[22281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.878224][T22282] xt_hashlimit: size too large, truncated to 1048576 [ 232.960892][ T29] audit: type=1326 audit(1736771971.247:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.5.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 232.996648][ T29] audit: type=1326 audit(1736771971.277:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.5.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 233.020352][ T29] audit: type=1326 audit(1736771971.277:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.5.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 233.043849][ T29] audit: type=1326 audit(1736771971.277:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22288 comm="syz.5.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 233.178438][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.212555][T22302] random: crng reseeded on system resumption [ 233.292409][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.500987][T22326] Unknown options in mask 5 [ 233.582638][T22338] syz_tun: entered allmulticast mode [ 233.591917][T22338] syz_tun: left allmulticast mode [ 233.668996][T22355] loop1: detected capacity change from 0 to 128 [ 233.985897][T22384] bpf_get_probe_write_proto: 2 callbacks suppressed [ 233.985958][T22384] syz.0.7880[22384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.992638][T22384] syz.0.7880[22384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.004618][T22384] syz.0.7880[22384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.234529][T22401] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7888'. [ 234.290514][T22405] vlan3: entered allmulticast mode [ 234.305878][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.417218][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.445582][T22415] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7895'. [ 234.472622][T22418] netlink: 'syz.9.7896': attribute type 4 has an invalid length. [ 234.489644][T22418] netlink: 'syz.9.7896': attribute type 4 has an invalid length. [ 234.501615][T22424] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7899'. [ 234.515326][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7900'. [ 234.534720][T22426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.542268][T22426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.555431][T22426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.563271][T22426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.828143][T22451] netlink: 'syz.9.7911': attribute type 21 has an invalid length. [ 234.848811][T22449] random: crng reseeded on system resumption [ 235.386658][T22479] Set syz1 is full, maxelem 65536 reached [ 235.456742][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.545668][T22493] loop1: detected capacity change from 0 to 2048 [ 235.565959][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.587496][T22493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.604816][T22504] IPv6: Can't replace route, no match found [ 235.700656][T22493] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.725304][T22493] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 768 with max blocks 2 with error 28 [ 235.737788][T22493] EXT4-fs (loop1): This should not happen!! Data will be lost [ 235.737788][T22493] [ 235.747564][T22493] EXT4-fs (loop1): Total free blocks count 0 [ 235.753578][T22493] EXT4-fs (loop1): Free/Dirty block details [ 235.759635][T22493] EXT4-fs (loop1): free_blocks=2415919104 [ 235.765422][T22493] EXT4-fs (loop1): dirty_blocks=16 [ 235.770578][T22493] EXT4-fs (loop1): Block reservation details [ 235.776586][T22493] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 235.862282][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.357809][T22583] futex_wake_op: syz.0.7967 tries to shift op by 144; fix this program [ 236.456567][T22589] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.464847][T22589] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.473068][T22589] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.481625][T22589] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.491374][T22589] vxlan0: entered promiscuous mode [ 236.496588][T22589] vxlan0: entered allmulticast mode [ 236.562706][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7976'. [ 236.567213][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.666332][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.680195][T22614] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7982'. [ 236.735621][T22623] usb usb1: usbfs: process 22623 (syz.5.7986) did not claim interface 0 before use [ 236.827576][T22636] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7992'. [ 236.887997][T22643] syz.9.7995[22643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.888161][T22643] syz.9.7995[22643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.888232][T22643] syz.9.7995[22643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.929268][T22645] loop5: detected capacity change from 0 to 1024 [ 236.949536][T22645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.974489][T22653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7999'. [ 236.996556][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.013095][T22653] geneve0: entered allmulticast mode [ 237.039386][T22655] netlink: 'syz.9.8001': attribute type 3 has an invalid length. [ 237.047199][T22655] netlink: 'syz.9.8001': attribute type 3 has an invalid length. [ 237.063451][T22655] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8001'. [ 237.069577][T22661] loop5: detected capacity change from 0 to 512 [ 237.097076][T22661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.115244][T22661] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.142434][T22657] vlan2: entered allmulticast mode [ 237.148885][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.180583][T22667] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.180775][T22667] smc: net device bond0 erased user defined pnetid SYZ0 [ 237.418185][T22686] loop1: detected capacity change from 0 to 1024 [ 237.445282][T22686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.538241][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 237.538252][ T29] audit: type=1326 audit(1736771975.827:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.568172][ T29] audit: type=1326 audit(1736771975.827:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.591694][ T29] audit: type=1326 audit(1736771975.857:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.615133][ T29] audit: type=1326 audit(1736771975.857:9891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.638819][ T29] audit: type=1326 audit(1736771975.857:9892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.662338][ T29] audit: type=1326 audit(1736771975.857:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.685884][ T29] audit: type=1326 audit(1736771975.857:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.709511][ T29] audit: type=1326 audit(1736771975.857:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.733020][ T29] audit: type=1326 audit(1736771975.857:9896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.755910][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.756635][ T29] audit: type=1326 audit(1736771975.857:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.5.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0911315d29 code=0x7ffc0000 [ 237.764274][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.796384][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.805203][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.881325][T22714] __nla_validate_parse: 1 callbacks suppressed [ 237.881342][T22714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8025'. [ 237.906549][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.931923][T22721] vlan2: entered allmulticast mode [ 237.945080][T22722] netlink: 'syz.0.8029': attribute type 1 has an invalid length. [ 238.065045][T22739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8038'. [ 238.179673][T22754] hub 6-0:1.0: USB hub found [ 238.184500][T22754] hub 6-0:1.0: 8 ports detected [ 238.465918][T22787] Falling back ldisc for ttyS3. [ 238.563877][T22801] loop5: detected capacity change from 0 to 512 [ 238.570942][T22801] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.583391][T22801] EXT4-fs (loop5): 1 truncate cleaned up [ 238.589709][T22801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.619105][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.905812][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.909070][T22843] loop5: detected capacity change from 0 to 1024 [ 238.927559][T22843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.969812][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.015908][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.256782][T22893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22893 comm=syz.2.8104 [ 239.269793][T22893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8104'. [ 239.312348][T22893] bond0: entered promiscuous mode [ 239.317468][T22893] bond0: entered allmulticast mode [ 239.385484][T22893] batadv1: entered allmulticast mode [ 239.395212][T22893] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.402682][T22893] batadv1: entered promiscuous mode [ 239.408411][T22893] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 239.443560][T22910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.455467][T22912] xt_hashlimit: max too large, truncated to 1048576 [ 239.480767][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8115'. [ 239.523800][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8115'. [ 239.559008][T22910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.580759][T22924] serio: Serial port ptm0 [ 239.611928][T22910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.623951][T22926] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 239.659749][T22910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.722618][T22910] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.745251][T22935] can0: slcan on ptm0. [ 239.758073][T22910] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.777198][T22910] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.786021][T22938] netlink: 'syz.9.8125': attribute type 3 has an invalid length. [ 239.806017][T22910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.835890][T22934] can0 (unregistered): slcan off ptm0. [ 239.904075][T22943] bond2 (unregistering): Released all slaves [ 239.965604][T22949] syz.2.8127[22949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.965782][T22949] syz.2.8127[22949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.977547][T22949] syz.2.8127[22949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.996057][T22951] batadv_slave_1: entered promiscuous mode [ 240.114646][T22966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.123363][T22966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.132840][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8137'. [ 240.141776][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8137'. [ 240.150677][T22966] netlink: 'syz.1.8137': attribute type 18 has an invalid length. [ 240.158708][T22950] batadv_slave_1: left promiscuous mode [ 240.233332][T22975] loop5: detected capacity change from 0 to 1024 [ 240.256725][T22975] EXT4-fs: Ignoring removed orlov option [ 240.278612][T22975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.300090][T22975] Invalid option length (303) for dns_resolver key [ 240.672450][T23011] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8155'. [ 240.746152][T23019] msdos: Unknown parameter '1844674407370955161501777777777777777777777X' [ 241.156175][ T9967] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 241.156191][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.217537][T23059] 9pnet_fd: Insufficient options for proto=fd [ 241.223840][T23044] Set syz1 is full, maxelem 65536 reached [ 241.243977][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.268127][T23061] loop5: detected capacity change from 0 to 164 [ 241.276393][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.528856][T23093] syz.5.8194[23093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.528918][T23093] syz.5.8194[23093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.540762][T23093] syz.5.8194[23093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.778591][T23099] xt_hashlimit: max too large, truncated to 1048576 [ 242.158850][T23103] Set syz1 is full, maxelem 65536 reached [ 242.486981][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.596315][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.705577][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 242.705593][ T29] audit: type=1326 audit(1736771980.987:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23139 comm="syz.9.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 242.753888][ T29] audit: type=1326 audit(1736771981.027:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23139 comm="syz.9.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 242.777550][ T29] audit: type=1326 audit(1736771981.027:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23139 comm="syz.9.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 242.801249][ T29] audit: type=1326 audit(1736771981.027:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.9.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f823e5585e5 code=0x7ffc0000 [ 242.824879][ T29] audit: type=1326 audit(1736771981.027:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23139 comm="syz.9.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 242.893735][ T29] audit: type=1326 audit(1736771981.177:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.9.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 243.172230][ T29] audit: type=1326 audit(1736771981.457:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23163 comm="syz.9.8223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 243.254297][ T29] audit: type=1326 audit(1736771981.487:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23163 comm="syz.9.8223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 243.278053][ T29] audit: type=1326 audit(1736771981.487:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23163 comm="syz.9.8223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 243.301689][ T29] audit: type=1326 audit(1736771981.487:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23163 comm="syz.9.8223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 243.494338][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8226'. [ 243.575097][T23173] loop5: detected capacity change from 0 to 1024 [ 243.600278][T23173] EXT4-fs: Ignoring removed orlov option [ 243.606165][T23173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.655833][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.675280][T23173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0082] [ 243.693719][T23173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.766724][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.816283][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.873628][T23185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8233'. [ 243.925544][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 243.934662][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 243.981066][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 244.040017][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 244.049167][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 244.079818][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 244.113715][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 244.122804][T23189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8234'. [ 244.518249][T23223] bridge0: entered promiscuous mode [ 244.543778][T23223] macvlan2: entered promiscuous mode [ 244.569675][T23223] bridge0: port 3(macvlan2) entered blocking state [ 244.576274][T23223] bridge0: port 3(macvlan2) entered disabled state [ 244.630169][T23223] macvlan2: entered allmulticast mode [ 244.635600][T23223] bridge0: entered allmulticast mode [ 244.681374][T23223] macvlan2: left allmulticast mode [ 244.686636][T23223] bridge0: left allmulticast mode [ 244.726736][T23223] bridge0: left promiscuous mode [ 244.757437][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.869309][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.913826][T23239] loop1: detected capacity change from 0 to 1024 [ 244.948718][T23239] EXT4-fs: Ignoring removed orlov option [ 244.973482][T23239] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 245.019066][T23239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.084227][T23239] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff184467440737095516153Pq{P [ 245.084227][T23239] n'|$@OO-+el' [ 245.211572][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.461654][T23270] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 245.876448][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.985920][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.295518][T23311] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 246.416306][T23317] syz.0.8288[23317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.416419][T23317] syz.0.8288[23317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.473954][T23317] syz.0.8288[23317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.520070][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.539095][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.546563][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.564966][T23326] netlink: 'syz.0.8288': attribute type 21 has an invalid length. [ 246.640024][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.647887][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.655316][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.662834][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.670238][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.677700][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.685076][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.692479][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.699877][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.707278][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.714687][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 246.813444][T23334] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 247.058646][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.087411][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.094946][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.102584][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.110079][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.117575][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.124980][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.132529][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.140018][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.147495][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.154870][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.162346][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.169846][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.177257][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.184785][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.192182][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.199637][ T3362] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 247.207646][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.726235][ T3362] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 247.754161][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 247.754176][ T29] audit: type=1400 audit(1736771986.037:10154): avc: denied { lock } for pid=23373 comm="syz.5.8314" path="socket:[72278]" dev="sockfs" ino=72278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 247.854140][T23376] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 247.882016][T23380] IPVS: Error connecting to the multicast addr [ 247.971178][T23385] loop5: detected capacity change from 0 to 1024 [ 248.040270][T23387] ALSA: seq fatal error: cannot create timer (-19) [ 248.075012][T23385] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 248.161421][T23398] lo speed is unknown, defaulting to 1000 [ 248.179507][T23385] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 248.194116][T23398] lo speed is unknown, defaulting to 1000 [ 248.212080][T23385] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.222244][T23398] lo speed is unknown, defaulting to 1000 [ 248.228187][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.251349][T23385] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 248.268275][T23398] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 248.303230][T23385] EXT4-fs (loop5): Remounting filesystem read-only [ 248.313911][T23398] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 248.336905][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.355797][T23385] Quota error (device loop5): write_blk: dquota write failed [ 248.363252][T23385] Quota error (device loop5): write_blk: dquota write failed [ 248.370657][T23385] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 248.418290][T23398] lo speed is unknown, defaulting to 1000 [ 248.424379][T23398] lo speed is unknown, defaulting to 1000 [ 248.444618][T23398] lo speed is unknown, defaulting to 1000 [ 248.476096][T23398] lo speed is unknown, defaulting to 1000 [ 248.481867][T23385] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 248.504153][T23412] loop1: detected capacity change from 0 to 512 [ 248.518005][T23398] lo speed is unknown, defaulting to 1000 [ 248.533923][T23385] EXT4-fs (loop5): 1 orphan inode deleted [ 248.544408][T23398] lo speed is unknown, defaulting to 1000 [ 248.552567][T23412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.582021][T23398] lo speed is unknown, defaulting to 1000 [ 248.590132][T23412] EXT4-fs (loop1): orphan cleanup on readonly fs [ 248.610200][T23398] lo speed is unknown, defaulting to 1000 [ 248.620000][T23412] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 248.629470][T23412] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 248.639081][T23412] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.8330: Failed to acquire dquot type 1 [ 248.656176][T23398] lo speed is unknown, defaulting to 1000 [ 248.678131][T23398] lo speed is unknown, defaulting to 1000 [ 248.704575][T23398] lo speed is unknown, defaulting to 1000 [ 248.738758][T23412] EXT4-fs (loop1): 1 truncate cleaned up [ 248.791648][ T29] audit: type=1400 audit(1736771987.077:10155): avc: denied { execmod } for pid=23397 comm="syz.0.8324" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=72436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 249.169319][ T29] audit: type=1326 audit(1736771987.457:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23441 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 249.265643][ T29] audit: type=1326 audit(1736771987.487:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23441 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 249.366381][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.436105][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.454834][T23483] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 250.475895][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.605827][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.747942][T23492] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 251.007498][T23385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 251.026249][T23412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.116515][T23385] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 251.123533][T23385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.149242][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.200955][T23506] __nla_validate_parse: 7 callbacks suppressed [ 251.200971][T23506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8372'. [ 251.485414][T23527] loop1: detected capacity change from 0 to 1764 [ 251.509839][T23527] ISOFS: unable to read i-node block [ 251.515170][T23527] isofs_fill_super: get root inode failed [ 251.607656][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.716569][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.234237][T23579] loop5: detected capacity change from 0 to 512 [ 252.254199][T23579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.282690][T23579] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 252.331102][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.371294][T23589] hsr_slave_0: left promiscuous mode [ 252.380878][T23589] hsr_slave_1: left promiscuous mode [ 252.628313][T23604] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 252.706282][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.758720][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 252.758747][ T29] audit: type=1400 audit(1736771991.047:10201): avc: denied { open } for pid=23607 comm="syz.9.8416" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 252.816586][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.901331][ T29] audit: type=1400 audit(1736771991.187:10202): avc: denied { bind } for pid=23613 comm="syz.9.8418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.920970][ T29] audit: type=1400 audit(1736771991.187:10203): avc: denied { name_bind } for pid=23613 comm="syz.9.8418" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 252.942016][ T29] audit: type=1400 audit(1736771991.187:10204): avc: denied { node_bind } for pid=23613 comm="syz.9.8418" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 252.963135][ T29] audit: type=1400 audit(1736771991.187:10205): avc: denied { setopt } for pid=23613 comm="syz.9.8418" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.058900][T23612] loop5: detected capacity change from 0 to 8192 [ 253.081631][T23612] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff18446744073709551615' [ 253.108412][ T29] audit: type=1326 audit(1736771991.287:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.9.8420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f823e525d29 code=0x0 [ 253.131578][ T29] audit: type=1400 audit(1736771991.367:10207): avc: denied { mounton } for pid=23611 comm="syz.5.8417" path="/166/file2/bus" dev="loop5" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 253.265283][T23632] loop5: detected capacity change from 0 to 512 [ 253.377962][T23632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.391080][T23632] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.417806][T21548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.452794][T23637] loop5: detected capacity change from 0 to 512 [ 253.468656][T23637] EXT4-fs: dax option not supported [ 253.577365][T23640] xt_hashlimit: max too large, truncated to 1048576 [ 253.875954][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.909803][ T29] audit: type=1400 audit(1736771992.197:10208): avc: denied { create } for pid=23653 comm="syz.2.8432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.985766][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.998776][ T29] audit: type=1400 audit(1736771992.227:10209): avc: denied { write } for pid=23653 comm="syz.2.8432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 254.194369][ T29] audit: type=1326 audit(1736771992.477:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz.9.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823e525d29 code=0x7ffc0000 [ 254.228170][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8437'. [ 254.503563][T23680] rdma_op ffff888116640580 conn xmit_rdma 0000000000000000 [ 254.986092][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.096015][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.086340][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.195925][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.186433][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.295997][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.286532][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.396060][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.386482][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.496089][ T9986] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.486303][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.595949][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.368725][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 261.368740][ T29] audit: type=1326 audit(1736771999.657:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.2.8452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x0 [ 261.586352][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.695984][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.214284][T23703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8453'. [ 262.244924][ T29] audit: type=1400 audit(1736772000.527:10228): avc: denied { name_bind } for pid=23704 comm="syz.2.8454" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 262.640706][T23716] loop1: detected capacity change from 0 to 1024 [ 262.649984][T23716] EXT4-fs: Ignoring removed nobh option [ 262.655562][T23716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.662486][T23716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.675072][T23716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.694728][ T29] audit: type=1400 audit(1736772000.977:10229): avc: denied { mounton } for pid=23715 comm="syz.1.8459" path="/502/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.726399][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.741938][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.829074][T23722] loop1: detected capacity change from 0 to 164 [ 262.836561][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.889643][T23727] loop1: detected capacity change from 0 to 512 [ 262.908924][T23727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.921839][T23727] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.938888][T23727] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.8462: corrupted inode contents [ 262.953291][T23727] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.8462: mark_inode_dirty error [ 262.965627][T23727] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.8462: corrupted inode contents [ 262.979620][T23727] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.8462: mark_inode_dirty error [ 262.994805][T23727] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.8462: corrupted inode contents [ 263.008648][ T29] audit: type=1400 audit(1736772001.277:10230): avc: denied { setattr } for pid=23726 comm="syz.1.8462" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.032637][T23727] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.8462: mark_inode_dirty error [ 263.044168][T23727] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.8462: corrupted inode contents [ 263.059992][T23727] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.8462: corrupted inode contents [ 263.071979][T23727] EXT4-fs error (device loop1): add_dirent_to_buf:2180: inode #2: comm syz.1.8462: mark_inode_dirty error [ 263.128105][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.210189][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8466'. [ 263.826127][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.936234][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.925999][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.036206][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.026046][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.136574][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.126183][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.236458][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.835769][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.226230][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.326027][ T50] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 269.326045][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.436137][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.395768][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.435753][ T9964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.535950][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.147443][T23696] netlink: 'syz.5.8450': attribute type 1 has an invalid length. [ 271.159185][T23712] lo speed is unknown, defaulting to 1000 [ 271.179745][T23735] erspan0: entered promiscuous mode [ 271.185044][T23735] macvtap1: entered promiscuous mode [ 271.190595][T23735] macvtap1: entered allmulticast mode [ 271.196111][T23735] erspan0: entered allmulticast mode [ 271.239748][T23736] erspan0: left allmulticast mode [ 271.245004][T23736] erspan0: left promiscuous mode [ 271.458555][T23762] netlink: 'syz.1.8472': attribute type 10 has an invalid length. [ 271.498500][ T29] audit: type=1326 audit(1736772009.767:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.522259][ T29] audit: type=1326 audit(1736772009.767:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.546045][ T29] audit: type=1326 audit(1736772009.767:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.569653][ T29] audit: type=1326 audit(1736772009.767:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.593255][ T29] audit: type=1326 audit(1736772009.767:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.617002][ T29] audit: type=1326 audit(1736772009.767:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.641004][ T29] audit: type=1326 audit(1736772009.767:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.664747][ T29] audit: type=1326 audit(1736772009.767:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.688498][ T29] audit: type=1326 audit(1736772009.767:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.712060][ T29] audit: type=1326 audit(1736772009.767:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.2.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0534795d29 code=0x7ffc0000 [ 271.754398][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.875777][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.855759][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.975767][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.955810][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.055767][ T9967] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 275.055785][ T9967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.175788][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.165975][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.275904][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.265983][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.375967][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.366038][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.476077][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.190112][ T9964] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.203298][T23762] syz_tun: entered promiscuous mode [ 279.219911][T23762] syz_tun: entered allmulticast mode [ 279.235724][T23762] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 279.246493][ T9964] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.261480][T23771] veth0_to_team: entered promiscuous mode [ 279.267435][T23771] veth0_to_team: entered allmulticast mode [ 279.406798][ T9964] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.438239][T23740] lo speed is unknown, defaulting to 1000 [ 279.476053][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.486527][ T9964] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.517157][T23744] lo speed is unknown, defaulting to 1000 [ 279.590822][T23799] loop1: detected capacity change from 0 to 1024 [ 279.599950][T23773] lo speed is unknown, defaulting to 1000 [ 279.719735][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.769415][T23744] chnl_net:caif_netlink_parms(): no params data found [ 279.843237][T23799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.875052][T23799] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.893397][T23799] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 279.905828][T23799] EXT4-fs (loop1): This should not happen!! Data will be lost [ 279.905828][T23799] [ 279.915545][T23799] EXT4-fs (loop1): Total free blocks count 0 [ 279.921635][T23799] EXT4-fs (loop1): Free/Dirty block details [ 279.927719][T23799] EXT4-fs (loop1): free_blocks=0 [ 279.932665][T23799] EXT4-fs (loop1): dirty_blocks=0 [ 279.937720][T23799] EXT4-fs (loop1): Block reservation details [ 279.943713][T23799] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 279.988623][T17336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.022470][ T9964] bridge_slave_1: left allmulticast mode [ 280.028220][ T9964] bridge_slave_1: left promiscuous mode [ 280.033935][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.052709][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 280.052723][ T29] audit: type=1400 audit(1736772018.337:10246): avc: denied { write } for pid=23822 comm="syz.1.8487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 280.085931][ T9964] bridge_slave_0: left allmulticast mode [ 280.091589][ T9964] bridge_slave_0: left promiscuous mode [ 280.097405][ T9964] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.220074][ T9964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.232715][ T9964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.245270][ T9964] bond0 (unregistering): Released all slaves [ 280.736065][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.846085][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.836048][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.945957][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.936012][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.045986][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.036096][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.146035][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.555768][ C1] ================================================================== [ 284.563871][ C1] BUG: KCSAN: data-race in can_receive / can_stat_update [ 284.570912][ C1] [ 284.573231][ C1] read-write to 0xffff888117941118 of 8 bytes by interrupt on cpu 0: [ 284.581291][ C1] can_receive+0x1b6/0x1f0 [ 284.585725][ C1] can_rcv+0xe7/0x180 [ 284.589721][ C1] __netif_receive_skb+0x123/0x280 [ 284.594847][ C1] process_backlog+0x22e/0x440 [ 284.599627][ C1] __napi_poll+0x63/0x3c0 [ 284.603964][ C1] net_rx_action+0x3a1/0x7f0 [ 284.608565][ C1] handle_softirqs+0xbf/0x280 [ 284.613260][ C1] run_ksoftirqd+0x1c/0x30 [ 284.617679][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 284.622633][ C1] kthread+0x1d1/0x210 [ 284.626701][ C1] ret_from_fork+0x4b/0x60 [ 284.631123][ C1] ret_from_fork_asm+0x1a/0x30 [ 284.635892][ C1] [ 284.638209][ C1] read to 0xffff888117941118 of 8 bytes by interrupt on cpu 1: [ 284.645747][ C1] can_stat_update+0x33a/0x6b0 [ 284.650516][ C1] call_timer_fn+0x3a/0x300 [ 284.655024][ C1] __run_timer_base+0x417/0x640 [ 284.659879][ C1] run_timer_softirq+0x31/0x70 [ 284.664651][ C1] handle_softirqs+0xbf/0x280 [ 284.669340][ C1] __irq_exit_rcu+0x3a/0xc0 [ 284.673854][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 284.679498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.685482][ C1] acpi_safe_halt+0x21/0x30 [ 284.689991][ C1] acpi_idle_do_entry+0x1d/0x30 [ 284.694848][ C1] acpi_idle_enter+0x96/0xb0 [ 284.699446][ C1] cpuidle_enter_state+0xc5/0x260 [ 284.704474][ C1] cpuidle_enter+0x40/0x70 [ 284.708907][ C1] do_idle+0x192/0x230 [ 284.712984][ C1] cpu_startup_entry+0x25/0x30 [ 284.717756][ C1] start_secondary+0x96/0xa0 [ 284.722350][ C1] common_startup_64+0x12c/0x137 [ 284.727295][ C1] [ 284.729613][ C1] value changed: 0x000000000059e50b -> 0x000000000059e50d [ 284.736712][ C1] [ 284.739027][ C1] Reported by Kernel Concurrency Sanitizer on: [ 284.745178][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc7-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.753763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.763901][ C1] ================================================================== [ 284.786832][ T29] audit: type=1400 audit(1736772023.057:10247): avc: denied { write } for pid=3285 comm="syz-executor" path="pipe:[1565]" dev="pipefs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 284.848455][ T29] audit: type=1400 audit(1736772023.137:10248): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 284.870632][ T29] audit: type=1400 audit(1736772023.137:10249): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.892330][ T29] audit: type=1400 audit(1736772023.137:10250): avc: denied { append } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.914674][ T29] audit: type=1400 audit(1736772023.137:10251): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.937467][ T29] audit: type=1400 audit(1736772023.137:10252): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 285.406718][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.516073][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.506310][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.616042][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.606349][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.716042][ T9986] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.706583][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.816028][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.806626][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.916076][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.906578][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.016040][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.006535][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.115929][T10000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.106527][ T9986] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.215946][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.206383][ T9930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.315916][ T3382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!