last executing test programs: 3m31.833268799s ago: executing program 3 (id=612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) io_submit(0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m30.834025075s ago: executing program 3 (id=620): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f00000003c0), 0x1, 0x796, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) ftruncate(r0, 0x81ff) 3m30.371537844s ago: executing program 3 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x800004, &(0x7f0000002080), 0x1, 0x586, &(0x7f0000000f80)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000080)) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="c5", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 3m30.026660843s ago: executing program 3 (id=627): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000017008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000800)=ANY=[], 0xd, 0x2ad, &(0x7f0000001100)="$eJzs3U9rI2UYAPBn8q+jIgniRREc0IOnsvXqpVFWEHtSIqgHDe4uSBIWdiFgBeOe+gk8+j38CF68+A0Er4K39lAZmcxMk9KkLTWm0P39Tg/vO8/7Ppl32pzyzNdvTEYPHifx7PiPSNMkGvuxHydJ9KIRtR+jFQDA3XGS5/F3fpPMVmPz1QAA21B+/5duuxYAYDs+/fyLj/sHB/c/ybI0XuseTQdJREyOpoNyvv8ovo1xPIx70Y3TiPxMGX/40cH9aGWFXrw9mU0HRebkq9+q9ft/Rczz96IbvdX5e1lpKX82HbTjxcii/6hdl9qNV1fnv7siPwadeOetpfp3oxu/fxOPYxwPoshd5P+wl2Uf5D8df/9lsU2RnzRisDO/biFvbvNcAAAAAAAAAAAAAAAAAAAAAAC423azLCnb98z79xRDVf+d5ul8fjer9c735ynzk3qhsj9QHlWLnlkeP9f9de5lWZZXF04HnSqhFa+3vFgAAAAAAAAAAAAAAAAAAAAACk+/OxwNx+OHTzYS1N0A6p/133Sd/aWRN+NwNGyuX3Dn2nu9vNxtoKj10jKi1YoN3ZargheKeja+8s7icD+LMqgPZqN7vfJ+uejhaJhVU/VNHg2Tq/ZK64P7ZTGVRsR/LSyfPxKneTnSLh/1SM9KPZ/V2dDd6Ly0cuqfPM/PRooa1q7z3p/lGS3/NV3z2WhXwcoPWATpxbP4df2Csa45R3MD/3YAAAAAAAAAAAAAAAAAAIAVFj/6XTH57NLUxv9WFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs2eL9/3WQRsT5kQvBrEq+7Joq6MSTp7f8EQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgO/BsAAP//tI1Hsg==") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x60200, 0x20) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x14, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) 3m29.876297612s ago: executing program 3 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 3m29.23429402s ago: executing program 3 (id=636): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3m29.1907004s ago: executing program 32 (id=636): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 55.830302012s ago: executing program 4 (id=3180): r0 = socket(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x3, r2, 0x80000001}, 0xc) 55.767920542s ago: executing program 4 (id=3184): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000427bd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff0100004500000048002d800a00000002020202020204000a00000002020202020200000a000000010101010101000012000000d52430118dfeea3e2fd4e670eaf900000a00000001010101010100000400ff002d99660f293483ab44f286e92f71256d716bdd4e93e596f3b2541bcd566437c2a292e90613ad7e217f70ccb79e66e18a7064e217b7b700000000f1c7edfc3de2383d780099fe9d1be2fbcdd0e3e0c09996e277fe6aa99e9f18049e3d9917b2e2b44b8e3d6e820522617fae71fee6fc48311d1960dbf0"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="000068821e10939876dc0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) unshare(0x2a020480) io_uring_setup(0x548b, &(0x7f0000000400)={0x0, 0x631d, 0x8, 0x2, 0x2db}) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r9, @ANYBLOB="080001"], 0x24}}, 0x0) 55.704661732s ago: executing program 4 (id=3189): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80801}, 0x40) 55.576038302s ago: executing program 4 (id=3192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) sync_file_range(r1, 0xffff, 0xb, 0x2) 55.526294242s ago: executing program 4 (id=3195): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) 55.430742101s ago: executing program 4 (id=3201): r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 40.448312977s ago: executing program 33 (id=3201): r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 39.048505352s ago: executing program 5 (id=3631): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) open(0x0, 0x64842, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 38.954143391s ago: executing program 5 (id=3636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 38.913955011s ago: executing program 5 (id=3637): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072000103000000000000000007000000", @ANYRES32=r2, @ANYBLOB="080001"], 0x20}, 0x1, 0xf00}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38.840371381s ago: executing program 5 (id=3639): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 38.831765811s ago: executing program 5 (id=3641): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 38.352361089s ago: executing program 5 (id=3653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60083ff200140600feff02000000000000000000000000000100004e220000000000", @ANYRES32=0x41424344, @ANYBLOB="500b00009078"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(&(0x7f0000000a00)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x1, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) listen(r5, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x810) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 38.310750979s ago: executing program 34 (id=3653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60083ff200140600feff02000000000000000000000000000100004e220000000000", @ANYRES32=0x41424344, @ANYBLOB="500b00009078"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(&(0x7f0000000a00)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x1, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) listen(r5, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x810) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 20.265022014s ago: executing program 6 (id=4325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x3) mlockall(0x6) 20.210231873s ago: executing program 6 (id=4330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x1, &(0x7f00000004c0)) 20.173894563s ago: executing program 6 (id=4333): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) 20.099309743s ago: executing program 6 (id=4336): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x240) 19.978108773s ago: executing program 6 (id=4339): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x800, 0xa4018, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80880) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x1, 0x8, 0xffffff7e, {{0x1c, 0x4, 0x0, 0x34, 0x70, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x26, 0x3, [{0x2, 0x6, "918a074b"}, {0x5, 0x9, "01b349887e3008"}, {0x6, 0x7, "208f4d0261"}, {0x0, 0xa, "ad4116fef9e68586"}]}, @end, @timestamp_addr={0x44, 0x14, 0xcb, 0x1, 0x1, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}]}, @timestamp={0x44, 0x1c, 0xcf, 0x0, 0xf, [0x4, 0x101, 0x6, 0x1, 0x1000, 0x7]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0xffffff01}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @mcast2, 0xcc}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x20}}, 0x44009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x1ba7f32}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 19.778012762s ago: executing program 6 (id=4351): r0 = socket(0x2, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 19.771227002s ago: executing program 35 (id=4351): r0 = socket(0x2, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2.552309529s ago: executing program 7 (id=4941): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x77000, 0xfff0}]) 2.354284308s ago: executing program 7 (id=4948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x20000094, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ff80000}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) r2 = syz_genetlink_get_family_id$tipc(0x0, r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1fbcd13e}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400), 0x106, 0x4}}, 0x20) 2.328651949s ago: executing program 7 (id=4950): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0xffffefff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.962837907s ago: executing program 1 (id=4955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/79, 0x4f}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.752280186s ago: executing program 1 (id=4959): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x18, &(0x7f00000005c0)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) socket(0x13, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x800, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x810, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.726525356s ago: executing program 0 (id=4960): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000e40)=ANY=[], 0xfc, 0x257, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000005840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.500424866s ago: executing program 0 (id=4962): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000fb", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000073f9a7f503b4", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 1.381864215s ago: executing program 1 (id=4963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 1.150028584s ago: executing program 0 (id=4965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) finit_module(r0, 0x0, 0x3) 1.130777184s ago: executing program 1 (id=4967): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.101010214s ago: executing program 7 (id=4969): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x5}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0xc, r2}, 0x10) 1.048558164s ago: executing program 0 (id=4971): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff7fffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) 1.042991924s ago: executing program 1 (id=4972): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000e00)) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) 995.218544ms ago: executing program 7 (id=4976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESHEX=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) 901.485923ms ago: executing program 7 (id=4979): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0xffffefff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 800.020533ms ago: executing program 1 (id=4983): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 516.787292ms ago: executing program 8 (id=4991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 457.231142ms ago: executing program 2 (id=4993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="4a00ffff0000", 0x6}]) 454.090702ms ago: executing program 8 (id=4994): setitimer(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") 331.316941ms ago: executing program 8 (id=4995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 330.650811ms ago: executing program 2 (id=5005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x1, 0x0, 0x1001f0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) 276.975621ms ago: executing program 2 (id=4996): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r1, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 258.501821ms ago: executing program 8 (id=4997): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0xfd, 0x28f, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 213.804351ms ago: executing program 8 (id=4998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 175.741551ms ago: executing program 0 (id=4999): syz_open_dev$tty1(0xc, 0x4, 0x2) iopl(0x3) syz_clone3(&(0x7f0000000300)={0x100, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x39, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x1}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x36c6, &(0x7f0000000440)={0x0, 0x4608, 0x800, 0x1, 0x397}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 175.263471ms ago: executing program 2 (id=5000): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e7f0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000002880)=@sg0, 0x0, &(0x7f0000002a00)='./bus\x00') 62.62552ms ago: executing program 2 (id=5001): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r2, 0x1, 0x3, 0xfffffffc, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x80) 22.66868ms ago: executing program 8 (id=5002): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) personality(0x400000b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="98000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0008000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb", 0x4b}], 0x1}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={0x0, 0x58}) 21.56543ms ago: executing program 2 (id=5013): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r2}, 0x18) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) 0s ago: executing program 0 (id=5003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000001000000000000b40079616d30000000000000000000000000766574b7708ad56f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e000000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000a"]}, 0x1ad) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) kernel console output (not intermixed with test programs): 29 code=0x7ffc0000 [ 239.542762][ T29] audit: type=1326 audit(1734470179.380:26356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 239.566261][ T29] audit: type=1326 audit(1734470179.380:26357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 239.637963][ T29] audit: type=1326 audit(1734470179.500:26358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 239.661718][ T29] audit: type=1326 audit(1734470179.500:26359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 239.716394][T11937] hub 9-0:1.0: USB hub found [ 239.725702][T11941] SELinux: policydb version 0 does not match my version range 15-33 [ 239.734005][T11937] hub 9-0:1.0: 8 ports detected [ 239.734844][ T29] audit: type=1326 audit(1734470179.500:26360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 239.742852][T11941] SELinux: failed to load policy [ 239.762573][ T29] audit: type=1326 audit(1734470179.560:26361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 239.791101][ T29] audit: type=1326 audit(1734470179.560:26362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 239.814872][ T29] audit: type=1326 audit(1734470179.560:26363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 239.838551][ T29] audit: type=1326 audit(1734470179.560:26364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4525d29 code=0x7ffc0000 [ 240.147669][T11987] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2879'. [ 240.239033][T11993] netlink: 'syz.5.2880': attribute type 10 has an invalid length. [ 240.246959][T11993] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2880'. [ 240.256174][T11993] bridge0: port 3(ipvlan0) entered blocking state [ 240.262737][T11993] bridge0: port 3(ipvlan0) entered disabled state [ 240.277961][T11993] ipvlan0: entered allmulticast mode [ 240.283401][T11993] veth0_vlan: entered allmulticast mode [ 240.293378][T11993] ipvlan0: left allmulticast mode [ 240.298489][T11993] veth0_vlan: left allmulticast mode [ 240.304596][T11993] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 240.568884][T12021] SELinux: syz.5.2892 (12021) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 240.687311][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2894'. [ 240.751064][T12028] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 240.757712][T12028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.765266][T12028] vhci_hcd vhci_hcd.0: Device attached [ 240.786758][T12029] vhci_hcd: connection closed [ 240.786977][ T7866] vhci_hcd: stop threads [ 240.795964][ T7866] vhci_hcd: release socket [ 240.800421][ T7866] vhci_hcd: disconnect device [ 240.992691][T12043] syz.2.2901[12043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.992799][T12043] syz.2.2901[12043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.004867][T12043] syz.2.2901[12043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.635463][T12100] syz.5.2927[12100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.647799][T12100] syz.5.2927[12100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.660131][T12100] syz.5.2927[12100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.688853][T12100] ip6tnl1: entered promiscuous mode [ 241.705578][T12100] ip6tnl1: entered allmulticast mode [ 241.737093][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2929'. [ 241.859022][T12122] IPv6: Can't replace route, no match found [ 241.951732][T12137] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.134314][T12162] netlink: 'syz.5.2951': attribute type 32 has an invalid length. [ 242.181876][T12169] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 242.318676][T12193] netlink: 'syz.1.2963': attribute type 10 has an invalid length. [ 242.377781][T12204] netlink: 'syz.0.2968': attribute type 4 has an invalid length. [ 242.377825][T12205] syz.2.2971[12205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.556670][T12229] batadv_slave_1: entered promiscuous mode [ 242.630048][T12233] hub 9-0:1.0: USB hub found [ 242.635050][T12233] hub 9-0:1.0: 8 ports detected [ 242.650137][T12239] netlink: 'syz.0.2987': attribute type 3 has an invalid length. [ 242.926109][T12257] netlink: 'syz.0.2996': attribute type 10 has an invalid length. [ 242.937880][T12257] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 243.099330][T12278] hub 9-0:1.0: USB hub found [ 243.104121][T12278] hub 9-0:1.0: 8 ports detected [ 243.260109][T12295] __nla_validate_parse: 9 callbacks suppressed [ 243.260123][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 243.412917][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'. [ 243.422339][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3019'. [ 243.575581][T12324] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 243.585823][T12330] Invalid ELF header magic: != ELF [ 243.588044][T12322] hub 9-0:1.0: USB hub found [ 243.605177][T12322] hub 9-0:1.0: 8 ports detected [ 243.615880][T12324] bond0: entered promiscuous mode [ 243.621207][T12324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.822934][T12346] program syz.1.3036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.975409][T12373] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3049'. [ 244.005695][T12365] hub 9-0:1.0: USB hub found [ 244.011312][T12365] hub 9-0:1.0: 8 ports detected [ 244.133433][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 244.155291][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 244.310529][T12423] bpf_get_probe_write_proto: 5 callbacks suppressed [ 244.310550][T12423] syz.5.3070[12423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.321013][T12423] syz.5.3070[12423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.333271][T12423] syz.5.3070[12423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.381304][T12430] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3076'. [ 244.402699][T12430] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3076'. [ 244.411897][T12430] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3076'. [ 244.433884][T12432] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.666875][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 244.666893][ T29] audit: type=1326 audit(1734470184.530:26817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 244.728065][T12456] hub 9-0:1.0: USB hub found [ 244.732966][T12456] hub 9-0:1.0: 8 ports detected [ 244.742114][ T29] audit: type=1326 audit(1734470184.530:26818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 244.766087][ T29] audit: type=1326 audit(1734470184.530:26819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 244.789836][ T29] audit: type=1326 audit(1734470184.530:26820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 244.813583][ T29] audit: type=1326 audit(1734470184.530:26821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 244.837329][ T29] audit: type=1326 audit(1734470184.540:26822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 244.861009][ T29] audit: type=1326 audit(1734470184.540:26823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 244.885030][ T29] audit: type=1326 audit(1734470184.540:26824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 244.908683][ T29] audit: type=1326 audit(1734470184.570:26825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 244.932398][ T29] audit: type=1326 audit(1734470184.580:26826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 245.066508][T12471] netlink: 'syz.0.3094': attribute type 10 has an invalid length. [ 245.074498][T12471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3094'. [ 245.101256][T12471] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 245.197351][T12486] tmpfs: Bad value for 'mpol' [ 245.282211][T12490] hub 9-0:1.0: USB hub found [ 245.287337][T12490] hub 9-0:1.0: 8 ports detected [ 245.492036][T12509] Cannot find del_set index 0 as target [ 245.609675][T12523] netlink: 'syz.0.3117': attribute type 11 has an invalid length. [ 246.232700][T12579] IPv6: Can't replace route, no match found [ 246.259043][T12583] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 246.827590][T12664] bridge0: port 1(vlan0) entered blocking state [ 246.834154][T12664] bridge0: port 1(vlan0) entered disabled state [ 246.841134][T12664] vlan0: entered allmulticast mode [ 246.854722][T12664] vlan0: left allmulticast mode [ 246.911254][T12674] vcan0: entered allmulticast mode [ 247.061791][T12697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 247.220492][T12715] program syz.5.3197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.611233][T12731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.625120][T12731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.675777][T12749] futex_wake_op: syz.2.3213 tries to shift op by -1; fix this program [ 247.822075][T12763] bridge0: port 3(vlan2) entered blocking state [ 247.825020][T12761] netlink: 'syz.2.3219': attribute type 10 has an invalid length. [ 247.828495][T12763] bridge0: port 3(vlan2) entered disabled state [ 247.844067][T12763] vlan2: entered allmulticast mode [ 247.866753][T12763] vlan2: left allmulticast mode [ 248.493490][T12810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.391904][T12853] hub 9-0:1.0: USB hub found [ 249.401942][T12853] hub 9-0:1.0: 8 ports detected [ 249.906755][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 249.941411][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 249.965528][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 249.986729][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 249.999817][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 250.019011][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 250.036007][T12884] netlink: 'syz.5.3274': attribute type 29 has an invalid length. [ 250.173532][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 250.173548][ T29] audit: type=1326 audit(1734470190.030:27238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.245841][T12894] hub 9-0:1.0: USB hub found [ 250.250728][ T29] audit: type=1326 audit(1734470190.070:27239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.275586][ T29] audit: type=1326 audit(1734470190.070:27240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.300285][ T29] audit: type=1326 audit(1734470190.070:27241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.324865][ T29] audit: type=1326 audit(1734470190.080:27242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.349387][ T29] audit: type=1326 audit(1734470190.080:27243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.373883][ T29] audit: type=1326 audit(1734470190.080:27244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.398396][ T29] audit: type=1326 audit(1734470190.080:27245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.422731][ T29] audit: type=1326 audit(1734470190.080:27246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.447240][ T29] audit: type=1326 audit(1734470190.080:27247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.0.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 250.511543][T12894] hub 9-0:1.0: 8 ports detected [ 251.322992][T12943] __nla_validate_parse: 8 callbacks suppressed [ 251.323026][T12943] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3302'. [ 251.387218][T12943] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3302'. [ 252.277790][T12990] hub 9-0:1.0: USB hub found [ 252.287866][T12990] hub 9-0:1.0: 8 ports detected [ 252.489664][T12994] ebtables: ebtables: counters copy to user failed while replacing table [ 252.672676][T13014] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 253.305779][T13056] netlink: 'syz.5.3351': attribute type 8 has an invalid length. [ 253.395403][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3354'. [ 253.528622][T13066] ebtables: ebtables: counters copy to user failed while replacing table [ 254.095617][T13113] syz.5.3377[13113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.095753][T13113] syz.5.3377[13113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.134599][T13113] syz.5.3377[13113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.195143][T13120] program syz.1.3380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.443129][T13141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3390'. [ 254.631829][T13156] SELinux: syz.5.3396 (13156) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 254.695768][T13159] 9pnet_fd: Insufficient options for proto=fd [ 255.207208][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 255.207223][ T29] audit: type=1326 audit(1734470195.070:27487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.279715][ T29] audit: type=1326 audit(1734470195.110:27488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.304306][ T29] audit: type=1326 audit(1734470195.110:27489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.329120][ T29] audit: type=1326 audit(1734470195.110:27490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.353835][ T29] audit: type=1326 audit(1734470195.110:27491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.378294][ T29] audit: type=1326 audit(1734470195.110:27492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.402870][ T29] audit: type=1326 audit(1734470195.110:27493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.427174][ T29] audit: type=1326 audit(1734470195.110:27494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.451599][ T29] audit: type=1326 audit(1734470195.110:27495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 255.476143][ T29] audit: type=1326 audit(1734470195.110:27496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13171 comm="syz.5.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 256.319932][T13191] program syz.1.3410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.171725][T13217] 9pnet_fd: p9_fd_create_tcp (13217): problem connecting socket to 127.0.0.1 [ 257.453025][T13240] syz.5.3433[13240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.453152][T13240] syz.5.3433[13240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.495033][T13240] syz.5.3433[13240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.535813][T13244] syz.2.3435[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.570030][T13244] syz.2.3435[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.597576][T13246] 9pnet_fd: Insufficient options for proto=fd [ 257.650981][T13244] syz.2.3435[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.737228][T13250] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 258.159444][T13271] 9pnet_fd: p9_fd_create_tcp (13271): problem connecting socket to 127.0.0.1 [ 258.382567][T13280] tipc: Resetting bearer [ 258.389351][T13280] tipc: Resetting bearer [ 258.431612][T13280] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.455158][T13280] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.466132][T13283] Invalid ELF header magic: != ELF [ 258.479125][T13280] infiniband syz!: set down [ 258.579049][ T145] tipc: Resetting bearer [ 259.543733][T13334] binfmt_misc: register: failed to install interpreter file ./file0 [ 259.556175][T13339] SELinux: policydb version 0 does not match my version range 15-33 [ 259.579817][T13339] SELinux: failed to load policy [ 259.660144][T13350] program syz.5.3486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.722232][T13356] loop0: detected capacity change from 0 to 512 [ 259.746434][T13356] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.789631][T13362] hub 9-0:1.0: USB hub found [ 259.807982][T13362] hub 9-0:1.0: 8 ports detected [ 259.843979][T13370] program syz.5.3496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.259004][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 260.259018][ T29] audit: type=1326 audit(1734470200.120:27754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 260.310603][ T29] audit: type=1326 audit(1734470200.150:27755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 260.335022][ T29] audit: type=1326 audit(1734470200.150:27756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 260.358660][ T29] audit: type=1326 audit(1734470200.150:27757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 260.383063][ T29] audit: type=1326 audit(1734470200.150:27758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509a1a5d29 code=0x7ffc0000 [ 260.477612][ T29] audit: type=1326 audit(1734470200.340:27759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 260.677299][ T29] audit: type=1326 audit(1734470200.370:27760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 260.701697][ T29] audit: type=1326 audit(1734470200.500:27761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 260.725948][ T29] audit: type=1326 audit(1734470200.500:27762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 260.749625][ T29] audit: type=1326 audit(1734470200.500:27763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 260.776323][T13409] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 260.782925][T13409] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 260.790608][T13409] vhci_hcd vhci_hcd.0: Device attached [ 260.890537][T13414] vhci_hcd: connection closed [ 260.890864][ T145] vhci_hcd: stop threads [ 260.900068][ T145] vhci_hcd: release socket [ 260.904671][ T145] vhci_hcd: disconnect device [ 260.927537][T13421] loop0: detected capacity change from 0 to 512 [ 260.957568][T13421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.970517][T13421] ext4 filesystem being mounted at /706/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.998886][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.020645][T13428] IPv6: Can't replace route, no match found [ 261.179762][T13438] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 261.328505][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3526'. [ 261.467845][T13462] program syz.0.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.527386][T13471] random: crng reseeded on system resumption [ 261.835341][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 261.844273][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 261.888489][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 262.661836][T13557] syz.2.3578[13557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.661913][T13557] syz.2.3578[13557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.693773][T13557] syz.2.3578[13557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.750465][ T145] tipc: Subscription rejected, illegal request [ 262.759634][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 262.777857][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 262.786816][T13575] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3584'. [ 262.920713][T13528] Q6\bY4 speed is unknown, defaulting to 1000 [ 262.982602][T13528] lo speed is unknown, defaulting to 1000 [ 263.197218][T13528] chnl_net:caif_netlink_parms(): no params data found [ 263.248051][T13638] syz.2.3613[13638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.248195][T13638] syz.2.3613[13638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.262117][T13638] syz.2.3613[13638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.351445][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.370115][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.379273][T13528] bridge_slave_0: entered allmulticast mode [ 263.387582][T13528] bridge_slave_0: entered promiscuous mode [ 263.394782][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.401872][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.404499][T13656] netlink: 'syz.0.3619': attribute type 10 has an invalid length. [ 263.409946][T13528] bridge_slave_1: entered allmulticast mode [ 263.423508][T13528] bridge_slave_1: entered promiscuous mode [ 263.452401][T13658] binfmt_misc: register: failed to install interpreter file ./file0 [ 263.469312][T13660] SELinux: security policydb version 18 (MLS) not backwards compatible [ 263.481255][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.492519][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.501947][T13660] SELinux: failed to load policy [ 263.528132][T13528] team0: Port device team_slave_0 added [ 263.538248][T13528] team0: Port device team_slave_1 added [ 263.586683][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.593683][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.620484][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.633639][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.640711][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.666821][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.704474][T13528] hsr_slave_0: entered promiscuous mode [ 263.711860][T13528] hsr_slave_1: entered promiscuous mode [ 263.718809][T13528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.726401][T13528] Cannot create hsr debugfs directory [ 263.863525][T13528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.893526][T13528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.905714][T13528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.922842][T13528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.987323][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.005254][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3644'. [ 264.005812][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.037138][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.044356][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.065406][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.072560][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.177772][T13725] loop0: detected capacity change from 0 to 512 [ 264.177996][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.191425][T13725] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.200578][T13725] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 264.211435][T13725] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 264.220770][T13725] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 264.229041][T13725] System zones: 0-2, 18-18, 34-34 [ 264.238414][T13725] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 264.285354][T13725] EXT4-fs (loop0): 1 truncate cleaned up [ 264.311493][T13725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.356876][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.368473][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 264.377517][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 264.470534][T13528] veth0_vlan: entered promiscuous mode [ 264.479040][T13528] veth1_vlan: entered promiscuous mode [ 264.513399][T13528] veth0_macvtap: entered promiscuous mode [ 264.521551][T13528] veth1_macvtap: entered promiscuous mode [ 264.541351][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.560479][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.570192][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.580825][T13528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.589656][T13528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.598660][T13528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.607419][T13528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.616821][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.774703][T13756] Q6\bY4 speed is unknown, defaulting to 1000 [ 264.809178][T13756] lo speed is unknown, defaulting to 1000 [ 264.936916][T13756] chnl_net:caif_netlink_parms(): no params data found [ 265.015574][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.022719][T13756] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.030121][T13756] bridge_slave_0: entered allmulticast mode [ 265.036574][T13756] bridge_slave_0: entered promiscuous mode [ 265.043448][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.049722][T13809] syz.6.3675[13809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.050577][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.050642][T13809] syz.6.3675[13809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.062228][T13756] bridge_slave_1: entered allmulticast mode [ 265.069923][T13809] syz.6.3675[13809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.081391][T13756] bridge_slave_1: entered promiscuous mode [ 265.246301][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.266991][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.302146][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 265.302163][ T29] audit: type=1400 audit(1734470205.160:28245): avc: denied { read } for pid=13820 comm="syz.1.3679" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.307299][T13756] team0: Port device team_slave_0 added [ 265.335211][ T29] audit: type=1326 audit(1734470205.200:28246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 265.362319][T13756] team0: Port device team_slave_1 added [ 265.419443][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.424814][ T29] audit: type=1326 audit(1734470205.230:28247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 265.427170][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.450158][ T29] audit: type=1326 audit(1734470205.230:28248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 265.476897][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.499804][ T29] audit: type=1400 audit(1734470205.250:28249): avc: denied { create } for pid=13824 comm="syz.2.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.521319][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.530167][ T29] audit: type=1400 audit(1734470205.250:28250): avc: denied { connect } for pid=13824 comm="syz.2.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.537791][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.583705][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.668887][T13838] netlink: 'syz.2.3686': attribute type 2 has an invalid length. [ 265.676727][T13838] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 265.696926][T13756] hsr_slave_0: entered promiscuous mode [ 265.723200][T13756] hsr_slave_1: entered promiscuous mode [ 265.732910][T13756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.747133][T13756] Cannot create hsr debugfs directory [ 265.814827][ T29] audit: type=1326 audit(1734470205.660:28251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 265.839190][ T29] audit: type=1326 audit(1734470205.660:28252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 265.863011][ T29] audit: type=1326 audit(1734470205.660:28253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 265.887130][ T29] audit: type=1326 audit(1734470205.660:28254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 265.942736][T13851] 9pnet_fd: Insufficient options for proto=fd [ 266.107061][T13756] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.134225][T13756] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.150643][T13756] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 266.172606][T13756] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.303067][T13756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.318226][T13867] loop6: detected capacity change from 0 to 8192 [ 266.340423][T13756] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.365728][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.366949][T13867] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 266.372836][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.381377][T13867] FAT-fs (loop6): Filesystem has been set read-only [ 266.455516][T13756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.465996][T13756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.501227][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.508348][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.546667][T13878] netlink: 'syz.6.3701': attribute type 2 has an invalid length. [ 266.554462][T13878] netlink: 'syz.6.3701': attribute type 1 has an invalid length. [ 266.612693][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.909053][T13756] veth0_vlan: entered promiscuous mode [ 266.917974][T13756] veth1_vlan: entered promiscuous mode [ 266.934572][T13756] veth0_macvtap: entered promiscuous mode [ 266.941819][T13756] veth1_macvtap: entered promiscuous mode [ 266.955493][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.966050][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.977347][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.985580][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.996115][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.007631][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.016251][T13756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.025004][T13756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.033929][T13756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.043575][T13756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.134156][T13914] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 3 [ 267.238652][T13916] loop0: detected capacity change from 0 to 8192 [ 267.277776][T13916] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 267.286727][T13916] FAT-fs (loop0): Filesystem has been set read-only [ 267.429076][T13941] __nla_validate_parse: 1 callbacks suppressed [ 267.429100][T13941] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3723'. [ 267.692886][T13979] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 267.699461][T13979] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 267.707304][T13979] vhci_hcd vhci_hcd.0: Device attached [ 267.724145][T13980] vhci_hcd: connection closed [ 267.724696][ T145] vhci_hcd: stop threads [ 267.733860][ T145] vhci_hcd: release socket [ 267.738379][ T145] vhci_hcd: disconnect device [ 267.832822][T13991] IPv6: Can't replace route, no match found [ 268.088752][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 268.125069][ T3376] kernel write not supported for file /1854/attr/current (pid: 3376 comm: kworker/0:4) [ 268.172463][T14027] netlink: 'syz.1.3761': attribute type 10 has an invalid length. [ 268.203038][T14034] xt_hashlimit: max too large, truncated to 1048576 [ 268.278978][T14046] loop6: detected capacity change from 0 to 512 [ 268.306152][T14046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 268.314188][T14046] System zones: 1-12 [ 268.327628][T14053] netlink: 'syz.2.3773': attribute type 13 has an invalid length. [ 268.328047][T14046] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3770: corrupted in-inode xattr: invalid ea_ino [ 268.335512][T14053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3773'. [ 268.358555][T14056] netlink: 'syz.7.3774': attribute type 1 has an invalid length. [ 268.378529][T14046] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3770: couldn't read orphan inode 15 (err -117) [ 268.403527][T14046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.423075][T14046] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3770: invalid indirect mapped block 234881024 (level 0) [ 268.437436][T14060] syz.2.3777[14060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.437510][T14060] syz.2.3777[14060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.451002][T14060] syz.2.3777[14060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.476928][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.617938][T14097] netlink: 'syz.7.3792': attribute type 3 has an invalid length. [ 268.625816][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3792'. [ 268.667005][T14102] loop0: detected capacity change from 0 to 512 [ 268.675819][T14103] netlink: 'syz.2.3795': attribute type 10 has an invalid length. [ 268.676219][T14102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.683659][T14103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3795'. [ 268.693113][T14103] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 268.719719][T14105] SELinux: syz.6.3797 (14105) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 268.734661][T14102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.760689][T14102] ext4 filesystem being mounted at /765/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.782981][T14112] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3798'. [ 268.818560][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.873491][T14124] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 268.921527][T14127] syz.0.3805[14127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.921653][T14127] syz.0.3805[14127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.937189][T14127] syz.0.3805[14127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.971923][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.998011][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.020084][T14135] syz.7.3809[14135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.020142][T14135] syz.7.3809[14135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.031861][T14135] syz.7.3809[14135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.111088][T14146] block device autoloading is deprecated and will be removed. [ 269.131626][T14150] futex_wake_op: syz.6.3816 tries to shift op by 144; fix this program [ 269.304629][ T8] kernel write not supported for file /38/attr/current (pid: 8 comm: kworker/0:0) [ 269.547036][T14184] loop6: detected capacity change from 0 to 128 [ 269.572906][T14184] syz.6.3833: attempt to access beyond end of device [ 269.572906][T14184] loop6: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 269.608237][T14184] syz.6.3833: attempt to access beyond end of device [ 269.608237][T14184] loop6: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 269.621998][T14184] Buffer I/O error on dev loop6, logical block 147, lost async page write [ 269.646837][T14184] syz.6.3833: attempt to access beyond end of device [ 269.646837][T14184] loop6: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 269.660995][T14184] Buffer I/O error on dev loop6, logical block 148, lost async page write [ 269.690337][T14184] syz.6.3833: attempt to access beyond end of device [ 269.690337][T14184] loop6: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 269.704010][T14184] Buffer I/O error on dev loop6, logical block 149, lost async page write [ 269.714849][T14184] syz.6.3833: attempt to access beyond end of device [ 269.714849][T14184] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 269.728969][T14184] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 269.737770][T14184] syz.6.3833: attempt to access beyond end of device [ 269.737770][T14184] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 269.751290][T14184] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 269.788108][T14184] syz.6.3833: attempt to access beyond end of device [ 269.788108][T14184] loop6: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 269.801593][T14184] Buffer I/O error on dev loop6, logical block 152, lost async page write [ 269.811456][T14184] syz.6.3833: attempt to access beyond end of device [ 269.811456][T14184] loop6: rw=2049, sector=153, nr_sectors = 81 limit=128 [ 269.840296][T14201] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3840'. [ 269.920574][T14214] netlink: 'syz.6.3846': attribute type 1 has an invalid length. [ 269.937420][T14215] loop7: detected capacity change from 0 to 512 [ 269.959728][T14215] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 269.993997][T14226] syz.0.3850[14226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.994282][T14215] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.3853: bad orphan inode 16 [ 270.019615][T14215] ext4_test_bit(bit=15, block=4) = 0 [ 270.024987][T14215] EXT4-fs (loop7): 1 orphan inode deleted [ 270.031283][T14215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.072112][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.173766][T14246] netlink: 'syz.1.3860': attribute type 1 has an invalid length. [ 270.307871][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 270.307890][ T29] audit: type=1400 audit(1734470210.170:28684): avc: denied { create } for pid=14263 comm="syz.1.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 270.366849][ T29] audit: type=1326 audit(1734470210.230:28685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 270.415580][ T29] audit: type=1326 audit(1734470210.230:28686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 270.439215][ T29] audit: type=1326 audit(1734470210.260:28687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 270.454504][T14268] loop6: detected capacity change from 0 to 2048 [ 270.463390][ T29] audit: type=1326 audit(1734470210.260:28688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 270.493449][ T29] audit: type=1326 audit(1734470210.260:28689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 270.517691][ T29] audit: type=1326 audit(1734470210.270:28690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 270.541348][ T29] audit: type=1326 audit(1734470210.270:28691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22eef65d63 code=0x7ffc0000 [ 270.565562][ T29] audit: type=1326 audit(1734470210.270:28692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22eef647df code=0x7ffc0000 [ 270.589797][ T29] audit: type=1326 audit(1734470210.290:28693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.6.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22eef65db7 code=0x7ffc0000 [ 270.625798][T14268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.655741][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.958497][T14337] loop6: detected capacity change from 0 to 512 [ 270.966209][T14337] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.985345][T14337] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.3902: bad orphan inode 16 [ 271.014678][T14337] ext4_test_bit(bit=15, block=4) = 0 [ 271.020086][T14337] EXT4-fs (loop6): 1 orphan inode deleted [ 271.021516][T14345] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3905'. [ 271.032879][T14337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.035205][T14345] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3905'. [ 271.035223][T14345] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3905'. [ 271.093509][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.362636][T14378] netlink: 'syz.7.3920': attribute type 2 has an invalid length. [ 271.398609][T14380] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 271.548392][T14396] tipc: Started in network mode [ 271.553366][T14396] tipc: Node identity ac1414aa, cluster identity 4711 [ 271.561147][T14394] loop7: detected capacity change from 0 to 1024 [ 271.562556][ T8] IPVS: starting estimator thread 0... [ 271.568710][T14394] EXT4-fs: Ignoring removed orlov option [ 271.574345][T14396] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.578774][T14394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.586423][T14396] tipc: Enabled bearer , priority 10 [ 271.599204][T14399] netlink: 'syz.6.3931': attribute type 3 has an invalid length. [ 271.608939][T14394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.661994][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.684906][T14397] IPVS: using max 2304 ests per chain, 115200 per kthread [ 271.704865][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.854830][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.934751][T14455] loop7: detected capacity change from 0 to 128 [ 271.965587][T14455] EXT4-fs error (device loop7): __ext4_fill_super:5505: inode #2: comm syz.7.3957: iget: checksum invalid [ 271.982861][T14455] EXT4-fs (loop7): get root inode failed [ 271.988625][T14455] EXT4-fs (loop7): mount failed [ 271.995441][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.135453][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.274819][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.308195][T14486] loop0: detected capacity change from 0 to 8192 [ 272.415874][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.482354][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3983'. [ 272.528398][T14510] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3982'. [ 272.554811][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.611880][T14529] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.653145][T14535] loop0: detected capacity change from 0 to 512 [ 272.661523][T14535] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.664643][T14537] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3995'. [ 272.681859][T14529] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.692382][T14535] netlink: 'syz.0.4003': attribute type 10 has an invalid length. [ 272.700407][T14535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4003'. [ 272.705604][ T8] tipc: Node number set to 2886997162 [ 272.715945][T14535] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 272.747921][T14529] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.796311][T14529] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.842371][T14529] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.856287][T14529] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.869973][T14529] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.885094][T14529] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.912393][T14544] loop7: detected capacity change from 0 to 1024 [ 272.932101][T14544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.970342][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.085606][T14565] loop7: detected capacity change from 0 to 512 [ 273.092579][T14565] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.120658][T14565] netlink: 'syz.7.4008': attribute type 10 has an invalid length. [ 273.128618][T14565] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4008'. [ 273.140643][T14565] bridge0: port 3(ipvlan0) entered blocking state [ 273.147219][T14565] bridge0: port 3(ipvlan0) entered disabled state [ 273.153893][T14565] ipvlan0: entered allmulticast mode [ 273.159283][T14565] veth0_vlan: entered allmulticast mode [ 273.166232][T14565] ipvlan0: left allmulticast mode [ 273.171302][T14565] veth0_vlan: left allmulticast mode [ 273.404053][T14578] loop7: detected capacity change from 0 to 512 [ 273.428797][T14578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.516579][T14578] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.636552][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.654066][T14601] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4022'. [ 273.669471][T14601] 0X: renamed from caif0 [ 273.673268][T14603] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 273.682149][T14603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4025'. [ 273.693827][T14593] loop6: detected capacity change from 0 to 512 [ 273.702171][T14601] 0X: entered allmulticast mode [ 273.703499][T14593] EXT4-fs: Ignoring removed orlov option [ 273.708301][T14601] net_ratelimit: 4 callbacks suppressed [ 273.708324][T14601] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 273.725397][T14593] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 273.745443][T14603] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 273.766428][T14593] EXT4-fs (loop6): 1 orphan inode deleted [ 273.772263][T14593] EXT4-fs (loop6): 1 truncate cleaned up [ 273.779551][T14593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.790960][T14613] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4029'. [ 273.796541][T14593] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 273.853219][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.885252][T14607] hub 1-0:1.0: USB hub found [ 273.890037][T14607] hub 1-0:1.0: 8 ports detected [ 273.918514][T14623] tipc: Started in network mode [ 273.923535][T14623] tipc: Node identity ac1414aa, cluster identity 4711 [ 273.943010][T14623] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.950099][T14623] tipc: Enabled bearer , priority 10 [ 273.956096][ T3374] IPVS: starting estimator thread 0... [ 274.012950][T14637] vlan0: entered promiscuous mode [ 274.018572][T14637] .: entered promiscuous mode [ 274.024429][T14637] .: left promiscuous mode [ 274.045976][T14626] IPVS: using max 2352 ests per chain, 117600 per kthread [ 274.074890][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.119281][T14645] bond1: entered promiscuous mode [ 274.124392][T14645] bond1: entered allmulticast mode [ 274.138097][T14645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.154138][T14645] bond1 (unregistering): Released all slaves [ 274.214833][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.354916][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.494825][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.505824][T14692] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4057'. [ 274.514960][T14692] 0X: renamed from caif0 [ 274.525573][T14692] 0X: entered allmulticast mode [ 274.530858][T14692] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 274.634827][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.664862][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.700003][T14705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.883697][T14707] Q6\bY4 speed is unknown, defaulting to 1000 [ 275.017528][T14707] lo speed is unknown, defaulting to 1000 [ 275.054895][ T3374] tipc: Node number set to 2886997162 [ 275.176836][T14750] loop7: detected capacity change from 0 to 1764 [ 275.303326][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4087'. [ 275.321371][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 275.321388][ T29] audit: type=1326 audit(1734470215.180:29070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.361746][ T29] audit: type=1326 audit(1734470215.180:29071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.391032][ T29] audit: type=1326 audit(1734470215.260:29072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.414905][ T29] audit: type=1326 audit(1734470215.260:29073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.438669][ T29] audit: type=1326 audit(1734470215.260:29074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.462522][ T29] audit: type=1326 audit(1734470215.260:29075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.486289][ T29] audit: type=1326 audit(1734470215.260:29076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.509910][ T29] audit: type=1326 audit(1734470215.260:29077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.533640][ T29] audit: type=1326 audit(1734470215.260:29078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.574227][ T29] audit: type=1326 audit(1734470215.430:29079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eef65d29 code=0x7ffc0000 [ 275.713529][T14780] 0X: renamed from caif0 [ 275.754939][T14780] 0X: entered allmulticast mode [ 275.809186][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.849798][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.995355][T14807] binfmt_misc: register: failed to install interpreter file ./file0 [ 276.066192][T14818] 1X: renamed from 60X [ 276.385746][T14835] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 276.409962][T14835] SELinux: failed to load policy [ 276.418560][T14839] syzkaller1: entered allmulticast mode [ 276.451544][T14843] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 276.520148][T14850] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 276.685163][T14868] loop0: detected capacity change from 0 to 764 [ 276.699013][T14870] futex_wake_op: syz.7.4139 tries to shift op by 144; fix this program [ 276.715461][T14868] devtmpfs: Unknown parameter 'dirsync{k$?7(~M꭮oݟ<18߿"*6_IYw:' [ 277.180024][T14908] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 277.186594][T14908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.194118][T14908] vhci_hcd vhci_hcd.0: Device attached [ 277.196697][T14912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.233913][T14909] vhci_hcd: connection closed [ 277.234058][ T3413] vhci_hcd: stop threads [ 277.243367][ T3413] vhci_hcd: release socket [ 277.243719][T14912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.247864][ T3413] vhci_hcd: disconnect device [ 277.528067][T14939] Q6\bY4 speed is unknown, defaulting to 1000 [ 277.577849][T14939] lo speed is unknown, defaulting to 1000 [ 277.650670][T14947] loop6: detected capacity change from 0 to 1024 [ 277.658322][T14947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.697479][T14947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.719483][T14954] tmpfs: Unknown parameter 'nolazytimeun' [ 277.726315][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.839180][T14968] x_tables: ip_tables: udp match: only valid for protocol 17 [ 278.101872][T15002] loop7: detected capacity change from 0 to 512 [ 278.128242][T15002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.168868][T15002] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.263845][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.348923][T15019] program syz.6.4203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.566601][T15040] usb usb8: usbfs: process 15040 (syz.6.4212) did not claim interface 0 before use [ 278.671085][T15052] loop6: detected capacity change from 0 to 1024 [ 278.698895][T15054] bpf_get_probe_write_proto: 8 callbacks suppressed [ 278.698912][T15054] syz.2.4218[15054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.715858][T15052] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 278.719508][T15048] Q6\bY4 speed is unknown, defaulting to 1000 [ 278.727336][T15052] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 278.744847][T15054] syz.2.4218[15054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.770324][T15052] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 278.784266][T15054] syz.2.4218[15054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.794560][T15052] EXT4-fs error (device loop6): ext4_get_journal_inode:5809: inode #5: comm syz.6.4217: unexpected bad inode w/o EXT4_IGET_BAD [ 278.822149][T15052] EXT4-fs (loop6): no journal found [ 278.824817][ C0] net_ratelimit: 12 callbacks suppressed [ 278.824834][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.827412][T15052] EXT4-fs (loop6): can't get journal size [ 278.866921][T15052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.887926][T15048] lo speed is unknown, defaulting to 1000 [ 278.904329][T15052] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 278.976227][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.214815][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.232386][T15067] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 279.315509][T15074] usb usb8: usbfs: process 15074 (syz.7.4225) did not claim interface 0 before use [ 279.465440][T15100] __nla_validate_parse: 3 callbacks suppressed [ 279.465461][T15100] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4238'. [ 279.864813][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.254809][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.317821][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4245'. [ 280.480894][T15133] loop6: detected capacity change from 0 to 512 [ 280.511966][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 280.511983][ T29] audit: type=1400 audit(1734470220.370:29475): avc: denied { read write } for pid=15137 comm="syz.7.4251" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 280.546413][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.553927][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.561626][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.569132][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.576592][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.583988][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.591606][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.599279][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.606723][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.614124][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.621595][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.629208][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.636823][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.643050][T15150] netlink: 'syz.1.4256': attribute type 21 has an invalid length. [ 280.644364][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.652874][T15150] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4256'. [ 280.659765][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659795][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659864][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659890][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659916][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659938][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659962][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.659987][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660053][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660078][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660110][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660142][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660169][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660195][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660335][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660362][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660386][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660412][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.660438][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.734878][ T29] audit: type=1400 audit(1734470220.410:29476): avc: denied { open } for pid=15137 comm="syz.7.4251" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 280.736399][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.745647][T15133] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.4248: casefold flag without casefold feature [ 280.751231][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.765086][T15133] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4248: couldn't read orphan inode 15 (err -117) [ 280.765964][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.778463][T15133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.780711][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.900763][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.900791][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.900816][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.900839][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.900860][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.900918][T14002] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 280.904890][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.904923][T14002] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 280.968981][ T29] audit: type=1326 audit(1734470220.830:29477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.969056][ T29] audit: type=1326 audit(1734470220.830:29478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.973032][ T29] audit: type=1326 audit(1734470220.830:29479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.973172][ T29] audit: type=1326 audit(1734470220.830:29480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.973202][ T29] audit: type=1326 audit(1734470220.830:29481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.973545][ T29] audit: type=1326 audit(1734470220.830:29482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.973883][ T29] audit: type=1326 audit(1734470220.830:29483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 280.974015][ T29] audit: type=1326 audit(1734470220.830:29484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfddc5d29 code=0x7ffc0000 [ 281.045063][T15166] syz.2.4262[15166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.254273][T15166] syz.2.4262[15166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.284068][T15166] syz.2.4262[15166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.294860][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.323152][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.374161][T15188] tls_set_device_offload_rx: netdev not found [ 281.506999][T15209] loop6: detected capacity change from 0 to 512 [ 281.548012][T15209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.561007][T15209] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.584359][T15219] Cannot find del_set index 0 as target [ 281.628510][T15226] syz.7.4285[15226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.628653][T15226] syz.7.4285[15226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.640404][T15226] syz.7.4285[15226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.693328][T13528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.782757][T15232] loop6: detected capacity change from 0 to 2048 [ 281.815530][T15232] loop6: p1 < > p4 [ 281.820375][T15232] loop6: p4 size 8388608 extends beyond EOD, truncated [ 281.849546][T15238] loop7: detected capacity change from 0 to 1764 [ 281.910754][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4294'. [ 281.935706][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.970973][T15257] SELinux: failed to load policy [ 282.013813][T15263] loop7: detected capacity change from 0 to 764 [ 282.023428][T15263] Symlink component flag not implemented [ 282.032062][T15263] Symlink component flag not implemented (129) [ 282.039320][T15263] rock: directory entry would overflow storage [ 282.045517][T15263] rock: sig=0x4f50, size=4, remaining=3 [ 282.051076][T15263] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 282.147577][T15270] loop0: detected capacity change from 0 to 2048 [ 282.182596][T15281] SELinux: syz.6.4308 (15281) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 282.196924][T15270] loop0: p1 < > p4 [ 282.201242][T15270] loop0: p4 size 8388608 extends beyond EOD, truncated [ 282.248112][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4310'. [ 282.334829][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.388248][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4323'. [ 282.397439][T15307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4323'. [ 282.433804][T15309] netlink: 'syz.7.4322': attribute type 7 has an invalid length. [ 282.582073][T15326] infiniband syz1: set active [ 282.586956][T15326] infiniband syz1: added team_slave_0 [ 282.592637][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 282.613123][T15326] RDS/IB: syz1: added [ 282.622899][T15326] smc: adding ib device syz1 with port count 1 [ 282.632228][T15326] smc: ib device syz1 port 1 has pnetid [ 282.984817][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.089725][T15384] loop7: detected capacity change from 0 to 2048 [ 283.115764][T15384] loop7: p1 < > p4 [ 283.120394][T15384] loop7: p4 size 8388608 extends beyond EOD, truncated [ 283.142052][T15387] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4359'. [ 283.180748][T15368] Q6\bY4 speed is unknown, defaulting to 1000 [ 283.239756][T15368] lo speed is unknown, defaulting to 1000 [ 283.339701][T15411] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.348489][T15411] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.357424][T15411] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.366910][T15411] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.374875][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.384052][T15411] vxlan0: entered promiscuous mode [ 283.389407][T15411] vxlan0: entered allmulticast mode [ 283.397581][T15411] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.406609][T15411] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.415491][T15411] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.424451][T15411] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.586807][T15368] chnl_net:caif_netlink_parms(): no params data found [ 283.689406][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.696707][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.713140][T15368] bridge_slave_0: entered allmulticast mode [ 283.720922][T15368] bridge_slave_0: entered promiscuous mode [ 283.731731][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.739120][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.775865][T15368] bridge_slave_1: entered allmulticast mode [ 283.782812][T15368] bridge_slave_1: entered promiscuous mode [ 283.785052][T15466] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQNd% [ 283.806847][T15468] SELinux: Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped). [ 283.807810][T15464] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.824881][T15464] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.833127][T15464] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.842132][T15464] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.850799][T15464] vxlan0: entered promiscuous mode [ 283.851458][T15470] netlink: 'syz.2.4395': attribute type 1 has an invalid length. [ 283.855947][T15464] vxlan0: entered allmulticast mode [ 283.869195][T15464] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.878320][T15464] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.886805][T15464] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.895270][T15464] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.916118][T15368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.932899][T15368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.972770][T15368] team0: Port device team_slave_0 added [ 283.988215][T15368] team0: Port device team_slave_1 added [ 284.014910][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.035427][T15368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.042410][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.069133][T15368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.082612][T15368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.089633][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.116949][T15368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.128208][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4404'. [ 284.171911][T15494] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.180773][T15494] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.189664][T15494] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.198419][T15494] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.220027][T15494] vxlan0: entered promiscuous mode [ 284.225306][T15494] vxlan0: entered allmulticast mode [ 284.234396][T15494] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.243632][T15494] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.253173][T15494] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.262166][T15494] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.317154][T15368] hsr_slave_0: entered promiscuous mode [ 284.334608][T15368] hsr_slave_1: entered promiscuous mode [ 284.351976][T15368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.369783][T15368] Cannot create hsr debugfs directory [ 284.414829][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.505549][T15520] program syz.0.4417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.521327][T15368] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 284.547246][T15520] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.557799][T15368] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 284.576671][T15368] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 284.603133][T15368] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 284.631043][T15528] __nla_validate_parse: 1 callbacks suppressed [ 284.631061][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 284.667098][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 284.718532][T15368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.747525][T15368] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.768579][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.775732][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.812229][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.819344][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.934045][T15568] syz.2.4438[15568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.934140][T15568] syz.2.4438[15568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.943772][T15570] loop7: detected capacity change from 0 to 512 [ 284.947249][T15568] syz.2.4438[15568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.980521][T15368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.017528][T15570] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.029056][T15570] netlink: 'syz.7.4440': attribute type 10 has an invalid length. [ 285.037147][T15570] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4440'. [ 285.054816][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.069344][T15570] bridge0: port 3(ipvlan0) entered blocking state [ 285.075959][T15570] bridge0: port 3(ipvlan0) entered disabled state [ 285.094566][T15570] ipvlan0: entered allmulticast mode [ 285.100180][T15570] veth0_vlan: entered allmulticast mode [ 285.127069][T15570] ipvlan0: left allmulticast mode [ 285.132253][T15570] veth0_vlan: left allmulticast mode [ 285.150511][T15570] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 285.286360][T15368] veth0_vlan: entered promiscuous mode [ 285.300530][T15368] veth1_vlan: entered promiscuous mode [ 285.343219][T15368] veth0_macvtap: entered promiscuous mode [ 285.360086][T15368] veth1_macvtap: entered promiscuous mode [ 285.389212][T15607] tipc: Enabling of bearer rejected, failed to enable media [ 285.402010][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.412537][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.422488][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.433661][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.454878][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.463404][T15368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.488002][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.499268][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.509242][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.519700][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.532035][T15368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.545677][T15368] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.554436][T15368] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.563967][T15368] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.572765][T15368] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.585402][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 285.585487][ T29] audit: type=1326 audit(1734470225.450:29710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 285.623802][ T29] audit: type=1326 audit(1734470225.490:29711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 285.647460][ T29] audit: type=1326 audit(1734470225.490:29712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 285.671239][ T29] audit: type=1326 audit(1734470225.490:29714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 285.695147][ T29] audit: type=1326 audit(1734470225.490:29713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15617 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb5a1b85e5 code=0x7ffc0000 [ 285.721851][T15612] Falling back ldisc for ttyS3. [ 285.736447][ T29] audit: type=1400 audit(1734470225.490:29715): avc: denied { mounton } for pid=15368 comm="syz-executor" path="/root/syzkaller.RnFcZ6/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 285.761154][ T29] audit: type=1400 audit(1734470225.490:29716): avc: denied { mount } for pid=15368 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 285.783533][ T29] audit: type=1326 audit(1734470225.490:29717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 285.807207][ T29] audit: type=1400 audit(1734470225.490:29718): avc: denied { mounton } for pid=15368 comm="syz-executor" path="/root/syzkaller.RnFcZ6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 285.834151][ T29] audit: type=1400 audit(1734470225.490:29719): avc: denied { mounton } for pid=15368 comm="syz-executor" path="/root/syzkaller.RnFcZ6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 285.919733][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4353'. [ 285.991852][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 286.094864][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.291625][T15655] Q6\bY4 speed is unknown, defaulting to 1000 [ 286.333742][T15655] lo speed is unknown, defaulting to 1000 [ 286.357897][T15675] loop0: detected capacity change from 0 to 512 [ 286.378984][T15675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.407226][T15675] ext4 filesystem being mounted at /898/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.482701][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.494840][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.920296][T15715] loop0: detected capacity change from 0 to 1764 [ 286.937479][T15717] vlan2: entered allmulticast mode [ 286.993152][T15723] 9pnet: p9_errstr2errno: server reported unknown error FcgKIeB$ [ 287.042563][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4502'. [ 287.135442][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.215131][T15745] netlink: 'syz.1.4510': attribute type 10 has an invalid length. [ 287.223049][T15745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4510'. [ 287.534839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.602022][T15757] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 287.625016][T15759] loop0: detected capacity change from 0 to 512 [ 287.664031][T15759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.676790][T15759] ext4 filesystem being mounted at /913/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.691247][T15759] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4516: corrupted xattr block 33: e_value out of bounds [ 287.716732][T15759] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 287.728497][T15759] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4516: corrupted xattr block 33: e_value out of bounds [ 287.751211][T15759] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 287.771111][T15773] loop8: detected capacity change from 0 to 512 [ 287.778702][T15773] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.787935][T15759] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.4516: corrupted xattr block 33: e_value out of bounds [ 287.806467][T15773] netlink: 'syz.8.4522': attribute type 10 has an invalid length. [ 287.814337][T15773] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4522'. [ 287.825340][T15759] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 287.830120][T15773] bridge0: port 3(ipvlan0) entered blocking state [ 287.840968][T15773] bridge0: port 3(ipvlan0) entered disabled state [ 287.855954][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.866305][T15773] ipvlan0: entered allmulticast mode [ 287.871632][T15773] veth0_vlan: entered allmulticast mode [ 287.877871][T15773] ipvlan0: left allmulticast mode [ 287.882950][T15773] veth0_vlan: left allmulticast mode [ 288.121292][T15793] binfmt_misc: register: failed to install interpreter file ./file0 [ 288.138489][T15798] loop0: detected capacity change from 0 to 1024 [ 288.156149][T15800] loop8: detected capacity change from 0 to 512 [ 288.163115][T15798] EXT4-fs: Ignoring removed orlov option [ 288.180279][T15798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.194036][T15800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.208191][T15800] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.253588][T15800] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.4534: corrupted inode contents [ 288.262274][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.273654][T15813] netlink: 'syz.1.4540': attribute type 10 has an invalid length. [ 288.282461][T15813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4540'. [ 288.291546][T15800] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.4534: mark_inode_dirty error [ 288.303775][T15800] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.4534: corrupted inode contents [ 288.333239][T15368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.386538][T15827] loop8: detected capacity change from 0 to 512 [ 288.415633][T15827] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 288.430991][T15827] EXT4-fs (loop8): mount failed [ 288.610504][T15850] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4553'. [ 288.692851][T15856] syz.8.4556[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.692994][T15856] syz.8.4556[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.704743][T15856] syz.8.4556[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.215407][ C0] net_ratelimit: 3 callbacks suppressed [ 289.215424][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.287386][T15903] loop7: detected capacity change from 0 to 512 [ 289.294498][T15903] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.316663][T15903] netlink: 'syz.7.4577': attribute type 10 has an invalid length. [ 289.325308][T15903] bridge0: port 3(ipvlan0) entered blocking state [ 289.331828][T15903] bridge0: port 3(ipvlan0) entered disabled state [ 289.339519][T15903] ipvlan0: entered allmulticast mode [ 289.344912][T15903] veth0_vlan: entered allmulticast mode [ 289.351745][T15903] ipvlan0: left allmulticast mode [ 289.356937][T15903] veth0_vlan: left allmulticast mode [ 289.387868][T15903] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 289.585770][T15926] loop0: detected capacity change from 0 to 2048 [ 289.592614][T15926] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.614862][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.634462][T15926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.661868][T15926] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4585: bg 0: block 234: padding at end of block bitmap is not set [ 289.677812][T15926] EXT4-fs (loop0): Remounting filesystem read-only [ 289.684991][T15926] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.0.4585: cleanup dec ref error -117 [ 289.751711][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.801225][T15954] netlink: 'syz.0.4595': attribute type 153 has an invalid length. [ 290.020147][T15972] loop7: detected capacity change from 0 to 16384 [ 290.179537][T15982] pim6reg: entered allmulticast mode [ 290.189730][T15982] pim6reg: left allmulticast mode [ 290.248344][T15977] loop7: detected capacity change from 16384 to 16383 [ 290.257369][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.312057][T15988] loop0: detected capacity change from 0 to 164 [ 290.654817][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.808109][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 290.808126][ T29] audit: type=1326 audit(1734470230.670:30022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16025 comm="syz.2.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 290.887769][ T29] audit: type=1326 audit(1734470230.680:30023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16025 comm="syz.2.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 290.912321][ T29] audit: type=1326 audit(1734470230.680:30024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16025 comm="syz.2.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 290.936057][ T29] audit: type=1326 audit(1734470230.680:30025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16025 comm="syz.2.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 290.960370][ T29] audit: type=1326 audit(1734470230.680:30026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16025 comm="syz.2.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a185d29 code=0x7ffc0000 [ 290.984186][ T29] audit: type=1326 audit(1734470230.720:30027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 291.008724][ T29] audit: type=1326 audit(1734470230.720:30028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 291.032309][ T29] audit: type=1326 audit(1734470230.720:30029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b23b55d29 code=0x7ffc0000 [ 291.139147][ T29] audit: type=1400 audit(1734470230.810:30030): avc: denied { read } for pid=16035 comm="syz.1.4633" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.148009][T16056] pim6reg: entered allmulticast mode [ 291.164306][ T29] audit: type=1400 audit(1734470230.810:30031): avc: denied { open } for pid=16035 comm="syz.1.4633" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.225201][T16061] netlink: 'syz.7.4643': attribute type 4 has an invalid length. [ 291.240064][T16061] netlink: 'syz.7.4643': attribute type 4 has an invalid length. [ 291.292218][T16056] pim6reg: left allmulticast mode [ 291.304848][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.637351][T16105] loop7: detected capacity change from 0 to 512 [ 291.653372][T16105] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.683569][T16105] netlink: 'syz.7.4659': attribute type 10 has an invalid length. [ 291.691477][T16105] __nla_validate_parse: 13 callbacks suppressed [ 291.691510][T16105] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4659'. [ 291.694815][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.719111][T16105] bridge0: port 3(ipvlan0) entered blocking state [ 291.725627][T16105] bridge0: port 3(ipvlan0) entered disabled state [ 291.750311][T16105] ipvlan0: entered allmulticast mode [ 291.756430][T16105] veth0_vlan: entered allmulticast mode [ 291.765994][T16105] ipvlan0: left allmulticast mode [ 291.771088][T16105] veth0_vlan: left allmulticast mode [ 291.793354][T16105] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 292.075600][T16139] syz.1.4666[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.075672][T16139] syz.1.4666[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.098686][T16139] syz.1.4666[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.208371][T16147] pimreg: entered allmulticast mode [ 292.245457][T16150] netlink: 'syz.2.4676': attribute type 10 has an invalid length. [ 292.253406][T16150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4676'. [ 292.274900][T16152] pimreg: left allmulticast mode [ 292.287908][T16153] loop7: detected capacity change from 0 to 4096 [ 292.294529][T16150] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 292.311018][T16153] EXT4-fs: Ignoring removed nobh option [ 292.334854][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.342715][T16153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.381443][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.588752][T16173] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4684'. [ 292.614645][T16173] 0XD: renamed from gretap0 [ 292.631257][T16173] 0XD: entered allmulticast mode [ 292.751975][T16184] netlink: 'syz.2.4689': attribute type 10 has an invalid length. [ 292.759914][T16184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4689'. [ 292.792585][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4690'. [ 293.521416][T16211] loop7: detected capacity change from 0 to 4096 [ 293.542513][T16211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.573759][T16214] loop1: detected capacity change from 0 to 512 [ 293.608979][T16214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.634030][T16214] ext4 filesystem being mounted at /900/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.694868][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.730335][T13756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.741379][T16224] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4704'. [ 293.769568][T16224] 0XD: renamed from gretap0 (while UP) [ 293.792623][T16224] 0XD: entered allmulticast mode [ 293.949872][T16243] syz.2.4712[16243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.949952][T16243] syz.2.4712[16243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.978742][T16245] hub 9-0:1.0: USB hub found [ 293.995062][T16243] syz.2.4712[16243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.996398][T16245] hub 9-0:1.0: 8 ports detected [ 294.082611][T16258] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4720'. [ 294.102971][T16258] 0XD: renamed from gretap0 (while UP) [ 294.120611][T16258] 0XD: entered allmulticast mode [ 294.317404][T16285] loop1: detected capacity change from 0 to 512 [ 294.327426][T16289] loop0: detected capacity change from 0 to 128 [ 294.334104][T16285] EXT4-fs: Ignoring removed bh option [ 294.341362][T16285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.378078][T16285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.404010][T16285] ext4 filesystem being mounted at /908/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.415226][ C0] net_ratelimit: 4 callbacks suppressed [ 294.415246][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.477014][T16295] Q6\bY4 speed is unknown, defaulting to 1000 [ 294.519149][T16295] lo speed is unknown, defaulting to 1000 [ 294.571474][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.624375][T16307] loop0: detected capacity change from 0 to 512 [ 294.647184][T16307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.665708][T16307] ext4 filesystem being mounted at /961/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.717902][T16307] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.4740: Failed to acquire dquot type 0 [ 294.789059][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.814859][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.835358][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4745'. [ 295.129487][T16355] loop1: detected capacity change from 0 to 512 [ 295.156903][T16355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.212934][T16355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.260226][T16355] ext4 filesystem being mounted at /914/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.301678][T16367] netlink: 'syz.8.4765': attribute type 2 has an invalid length. [ 295.309525][T16367] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4765'. [ 295.329257][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.423438][T16383] atomic_op ffff88810b0cd128 conn xmit_atomic 0000000000000000 [ 295.439928][T16384] wireguard0: entered promiscuous mode [ 295.445557][T16384] wireguard0: entered allmulticast mode [ 295.454825][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.622669][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4777'. [ 295.854823][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.863286][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 295.863303][ T29] audit: type=1326 audit(1734470235.720:30242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 295.986937][T16418] atomic_op ffff88810b0ccd28 conn xmit_atomic 0000000000000000 [ 296.037888][ T29] audit: type=1400 audit(1734470235.900:30243): avc: denied { watch watch_reads } for pid=16421 comm="syz.0.4786" path="/972/file0" dev="tmpfs" ino=5125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.065165][ T29] audit: type=1400 audit(1734470235.920:30244): avc: denied { execute } for pid=16421 comm="syz.0.4786" name="file1" dev="tmpfs" ino=5126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.088432][ T29] audit: type=1400 audit(1734470235.920:30245): avc: denied { execute_no_trans } for pid=16421 comm="syz.0.4786" path="/972/file1" dev="tmpfs" ino=5126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.142001][ T29] audit: type=1326 audit(1734470236.000:30246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.0.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 296.166587][ T29] audit: type=1326 audit(1734470236.000:30247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.0.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 296.190320][ T29] audit: type=1326 audit(1734470236.000:30248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.0.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 296.214676][ T29] audit: type=1326 audit(1734470236.000:30249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.0.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 296.238895][ T29] audit: type=1326 audit(1734470236.000:30250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.0.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 296.262487][ T29] audit: type=1326 audit(1734470236.000:30251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.0.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74595c5d29 code=0x7ffc0000 [ 296.366107][T16432] loop0: detected capacity change from 0 to 4096 [ 296.376493][T16432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.486708][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.495828][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.663216][T16475] loop1: detected capacity change from 0 to 2048 [ 296.859359][T16500] sd 0:0:1:0: device reset [ 296.894843][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.926612][T16504] wireguard0: entered promiscuous mode [ 296.932185][T16504] wireguard0: entered allmulticast mode [ 297.482078][T16535] loop7: detected capacity change from 0 to 2048 [ 297.534835][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.550879][T16541] sd 0:0:1:0: device reset [ 297.713107][T16565] __nla_validate_parse: 1 callbacks suppressed [ 297.713135][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4849'. [ 297.828825][T16583] loop8: detected capacity change from 0 to 2048 [ 297.860033][T16576] loop0: detected capacity change from 0 to 2048 [ 297.935029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.971180][T16576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.028711][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.217604][T16617] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4868'. [ 298.380432][T16637] loop0: detected capacity change from 0 to 128 [ 298.515832][T16652] syz.8.4886[16652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.515918][T16652] syz.8.4886[16652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.540809][T16652] syz.8.4886[16652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.585235][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.656317][T16664] loop8: detected capacity change from 0 to 1024 [ 298.671137][T16664] EXT4-fs: Ignoring removed bh option [ 298.702580][T16664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 298.763810][T15368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 298.802145][T16676] ALSA: seq fatal error: cannot create timer (-22) [ 298.974815][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.987615][T16697] loop8: detected capacity change from 0 to 2048 [ 299.005582][T16696] vhci_hcd: invalid port number 15 [ 299.010777][T16696] vhci_hcd: invalid port number 15 [ 299.017229][T16697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.035650][T16704] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4907'. [ 299.046351][T16704] 1X: renamed from 60X [ 299.052044][T15368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.092755][T16707] loop8: detected capacity change from 0 to 512 [ 299.104134][T16707] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.4908: iget: bad extended attribute block 1 [ 299.118099][T16707] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4908: couldn't read orphan inode 15 (err -117) [ 299.131144][T16707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.159364][T16707] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 299.197571][T15368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.556890][T16756] blktrace: Concurrent blktraces are not allowed on sg0 [ 299.588696][T16758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4932'. [ 299.597795][T16758] netem: unknown loss type 13 [ 299.602509][T16758] netem: change failed [ 299.615501][ C0] net_ratelimit: 1 callbacks suppressed [ 299.615521][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.014828][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.173545][T16785] loop7: detected capacity change from 0 to 128 [ 300.181744][T16785] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 300.213771][T16785] syz.7.4941: attempt to access beyond end of device [ 300.213771][T16785] loop7: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 300.227868][T16785] Buffer I/O error on dev loop7, logical block 216, lost async page write [ 300.237454][T16785] syz.7.4941: attempt to access beyond end of device [ 300.237454][T16785] loop7: rw=2049, sector=217, nr_sectors = 824 limit=128 [ 300.344931][ T145] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 300.372893][T16800] ALSA: seq fatal error: cannot create timer (-19) [ 300.546432][T16810] ebtables: ebtables: counters copy to user failed while replacing table [ 300.654847][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.876761][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 300.876779][ T29] audit: type=1326 audit(1734470240.740:30623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 300.926134][ T29] audit: type=1326 audit(1734470240.780:30624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 300.951078][ T29] audit: type=1326 audit(1734470240.780:30625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 300.974781][ T29] audit: type=1326 audit(1734470240.780:30626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 300.999056][ T29] audit: type=1326 audit(1734470240.780:30627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 301.022716][ T29] audit: type=1326 audit(1734470240.780:30628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 301.046936][ T29] audit: type=1326 audit(1734470240.780:30629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 301.054820][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.070559][ T29] audit: type=1326 audit(1734470240.780:30630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 301.070595][ T29] audit: type=1326 audit(1734470240.780:30631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.8.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c635d29 code=0x7ffc0000 [ 301.106415][T16833] loop0: detected capacity change from 0 to 128 [ 301.143638][T16835] loop8: detected capacity change from 0 to 2048 [ 301.151256][T16836] loop1: detected capacity change from 0 to 764 [ 301.176224][T16835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.184797][ T29] audit: type=1400 audit(1734470241.010:30632): avc: denied { mounton } for pid=16832 comm="syz.0.4960" path="/1020/file0" dev="tmpfs" ino=5373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 301.429073][T15368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.607063][T16857] Invalid ELF header magic: != ELF [ 301.701582][T16870] loop1: detected capacity change from 0 to 1024 [ 301.708041][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.745635][T16870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.758118][T16870] ext4 filesystem being mounted at /961/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.769018][T16876] loop8: detected capacity change from 0 to 2048 [ 301.781189][T16870] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 301.788105][T16876] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.793546][T16870] EXT4-fs (loop1): This should not happen!! Data will be lost [ 301.793546][T16870] [ 301.815918][T16870] EXT4-fs (loop1): Total free blocks count 0 [ 301.822001][T16870] EXT4-fs (loop1): Free/Dirty block details [ 301.827948][T16870] EXT4-fs (loop1): free_blocks=0 [ 301.832923][T16870] EXT4-fs (loop1): dirty_blocks=0 [ 301.837992][T16870] EXT4-fs (loop1): Block reservation details [ 301.843990][T16870] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 301.895151][T15368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.919249][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.949946][T16901] loop8: detected capacity change from 0 to 256 [ 302.094831][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.276651][T16931] syz.8.4994[16931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.276827][T16931] syz.8.4994[16931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.289075][T16931] syz.8.4994[16931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.307260][T16931] loop8: detected capacity change from 0 to 1024 [ 302.337829][T16931] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 302.348796][T16931] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 302.360063][T16931] JBD2: no valid journal superblock found [ 302.365902][T16931] EXT4-fs (loop8): Could not load journal inode [ 302.470806][T16939] loop8: detected capacity change from 0 to 128 [ 302.524140][T16941] loop8: detected capacity change from 0 to 256 [ 302.535687][T16941] FAT-fs (loop8): bogus number of FAT sectors [ 302.541825][T16941] FAT-fs (loop8): Can't find a valid FAT filesystem [ 302.734855][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.754555][T16953] ================================================================== [ 302.762694][T16953] BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach [ 302.770352][T16953] [ 302.772689][T16953] read-write to 0xffff88816a04b6a8 of 8 bytes by task 16955 on cpu 1: [ 302.780863][T16953] dequeue_signal+0x2e3/0x370 [ 302.785609][T16953] get_signal+0x376/0x1000 [ 302.790075][T16953] arch_do_signal_or_restart+0x95/0x4b0 [ 302.795639][T16953] syscall_exit_to_user_mode+0x62/0x120 [ 302.801203][T16953] do_syscall_64+0xd6/0x1c0 [ 302.805712][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.811621][T16953] [ 302.813942][T16953] read to 0xffff88816a04b6a8 of 8 bytes by task 16953 on cpu 0: [ 302.821569][T16953] ptrace_check_attach+0x7f/0x290 [ 302.826688][T16953] __se_sys_ptrace+0xd4/0x2b0 [ 302.831367][T16953] __x64_sys_ptrace+0x55/0x70 [ 302.836044][T16953] x64_sys_call+0x2225/0x2dc0 [ 302.840726][T16953] do_syscall_64+0xc9/0x1c0 [ 302.845230][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.851143][T16953] [ 302.853464][T16953] value changed: 0x0000000000000000 -> 0x0000000008010000 [ 302.860568][T16953] [ 302.862892][T16953] Reported by Kernel Concurrency Sanitizer on: [ 302.869038][T16953] CPU: 0 UID: 0 PID: 16953 Comm: syz.8.5002 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 302.879804][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.889863][T16953] ================================================================== [ 303.134867][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.784820][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.824851][ C0] net_ratelimit: 1 callbacks suppressed [ 304.824873][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.214895][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.864829][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.254854][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.894878][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.294887][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.934853][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.334842][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.974900][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.374841][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.014857][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.414876][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.054840][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.454872][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.104853][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.494825][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available