last executing test programs: 1m48.535354201s ago: executing program 4 (id=10449): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m48.438873221s ago: executing program 4 (id=10454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000379e7cafb1db00000010000000000000180100002032702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800df593c36a482113ffec7b9e3d8", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000f13c25863ecc194ab1aad4954136b385f2c3783bcd1d4142e08c9328a320b4be9cf31d68798bcb870a61c45611e29234287f369cb834558faedfbc89d814cb7b9572a972febce75616f843dc333b4112a9e4122af6c71478c9777eaab3b123844e8da6ae6a1273dae6dac9889dd37602d62e0bcbd8ad0709f85a7efdf6b2e4e6d3532c1f033d39ca", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e710ffcefda3fd7500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000b329e421c4321a08333aee300000003153bb0700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r13, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x5, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x32, r12, r13}, {0x7, 0xb, 0x0, 0x5, 0x8001, 0x7d, 0x7, 0x5}, {0xffffffffffff9a54, 0x1, 0x0, 0x100}, 0x3, 0x6e6bba, 0x2, 0x1, 0x1, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x3506, 0x0, 0x0, 0x4, 0x5, 0x8a, 0x5}}, 0xe8) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x612, &(0x7f0000000740)="$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") 1m47.441212003s ago: executing program 4 (id=10468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) unshare(0x2040600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001680), &(0x7f0000000040)=0x8) 1m47.055490313s ago: executing program 4 (id=10472): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) pipe2$9p(0x0, 0x80000) 1m46.970843343s ago: executing program 4 (id=10474): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461696c696f6368619615f9a9d8fc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8e380b24aa44b2a03f9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a8c3700"/241], 0x1, 0x368, &(0x7f0000000700)="$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") open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) 1m46.844345313s ago: executing program 4 (id=10477): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) 1m31.609918539s ago: executing program 32 (id=10477): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) 2.450569115s ago: executing program 2 (id=11763): r0 = epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, ','}, {0x20, 'ext4\x00'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '(%'}, {0x20, '\x00'}, {}, {0x20, ':@'}], 0xa, "dabd97b2a862e5e07bd0b2d995e0f1c39995e17151eda3b3bff1aedef43db1fbf08726e64f66c4f5c86fe23a8cd7e721b8a83f079b1e53d0059588691b5f767bc621c3ea458653da2df09c39d9cfb4322b5c3af0c5e9761cd111bf2a4869510f64d614a4dc42364ff3c8afda48aff3f1b2e8fa65b023bb45b62412"}, 0xa2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e23, @private=0xa010100}, @ib={0x1b, 0x0, 0x0, {"8f2100000001000000047d6f00"}, 0xffffffffffffffff, 0xfffffffffffffffd}}}, 0x118) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000000180), 0x80) write$qrtrtun(r1, &(0x7f00000005c0)="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", 0x1da) write$qrtrtun(r1, &(0x7f0000000c00)="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", 0x1e1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 2.418828345s ago: executing program 0 (id=11764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/118, &(0x7f00000002c0)=0x76) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x2, 0x0, 0x51, @mcast2, @loopback, 0x1, 0x0, 0x1, 0xf0e0000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) sched_setparam(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 2.324866175s ago: executing program 0 (id=11766): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgid(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r4, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) dup3(r3, r4, 0x147da90c9d99d384) truncate(&(0x7f0000000000)='./file2\x00', 0x3000) 2.324408365s ago: executing program 1 (id=11767): clock_adjtime(0x0, &(0x7f0000000b00)={0xfd3, 0x0, 0x4100}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x6c}, 0x1, 0xba01}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.323876145s ago: executing program 2 (id=11768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x70bd2a, 0x2, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0xfdef}}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r7, @ANYBLOB="05002f"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r7, 0x25, 0x1c, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32], 0x60}}, 0x0) 2.249056456s ago: executing program 2 (id=11769): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0xa, 0x40000000002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) ptrace$getregset(0x4204, r2, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/42, 0xffffff9b) 2.163700936s ago: executing program 2 (id=11770): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) read$eventfd(r5, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) 1.839326156s ago: executing program 5 (id=11775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cd9ae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESOCT, @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0xe, &(0x7f0000000000), 0x20000000) 1.750370556s ago: executing program 3 (id=11776): openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0xffffffffffffff48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.628718587s ago: executing program 3 (id=11777): socket$kcm(0x10, 0x2, 0x0) syz_read_part_table(0x5d2, &(0x7f0000000000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00), 0x80402, 0x0) write$cgroup_int(r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r5, 0x400, 0x1) 1.625940157s ago: executing program 3 (id=11778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x48542, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x900000d2) read(r5, 0x0, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1.492502047s ago: executing program 5 (id=11779): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x17, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), 0x0}, 0x20) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r3, 0x29, 0x2f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x4) 1.429113607s ago: executing program 5 (id=11780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x53, 0x3, 0x1, {0xfffe, 0x1}, {0x60, 0x2}, @cond=[{0x24, 0x9, 0xc, 0x6, 0x7, 0x3f61}, {0x4, 0x1, 0xff, 0x4, 0x7, 0x766d}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0xfffffffd}, {0xffff}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x1, 0x80000, 0x80, 0x5, 0x2, 0x40000009, 0x8}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(r1) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000080), &(0x7f0000000180)=0x4) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 1.401288327s ago: executing program 5 (id=11781): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 1.345048667s ago: executing program 5 (id=11782): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xf2002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, 0x0) r4 = socket$inet(0x2, 0x5, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) ppoll(&(0x7f00000027c0)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r6, &(0x7f0000002880), 0x8) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x42180) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000280)={'\x00', 0x2, 0x0, 0xb, 0x7, 0x7}) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000017c0)=ANY=[@ANYRES8=r4, @ANYBLOB="e9739590dc6ea5855396927e3af5212537b1d18960", @ANYBLOB="cd9b5facdb77e2c215805dd2d441986e1ed885f4f2db81eadd3cc3b617c2cbe56943ca912c501ba55f7f0018c83d19fb50502a1c38c4feff240bf99666ee07bdc604d0a824c14092206fedd739628c592cae8703f75325074841d4e89d8eb895031cb9c6399dbf9d16d97a467a666075f0478d399602bdfe2ff1724f16c427ed002ee20781c5441ec3be1bcf95c7e6444d12eb58aba03bee5116b966ec5ef4a0f84a55815712f54068e19c9f61845bd7cff13a68c97bbac879af9dd4ee8697861fb573af5c1ba5e97059f65719911d8a65db5df52c1e56faf77b1222864ed50f50", @ANYRES16=r3, @ANYRESHEX=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r8, r8, 0x0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.290447427s ago: executing program 2 (id=11783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00'}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10101, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x4, 0xe, 0x5, 0x2, 0x0, 0x7, 0x800, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x200, 0x20000002}, 0x80, 0x5, 0x6, 0x6, 0x6, 0x452f, 0xee27, 0x0, 0x3ff, 0x0, 0x5}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) dup3(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) sync() 1.279360048s ago: executing program 0 (id=11784): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, 0x0, 0x8202) close(r1) close(r0) 1.245278698s ago: executing program 1 (id=11785): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008090) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 1.183679327s ago: executing program 1 (id=11786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x1, 0x5, 0xdd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x0, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="88cced112b2e011aa52d0854dcf587f1ecaa3acd49af8b44e9c35a3da80de75b5336116e54064378c32ccdc23c4f95db541957b251b3b60cfe59be6567b2d2fe66da83f78a0f7913fc0b42aea2559e83b832ba748a7fadcf8c341e63bf09a503754fb2606b2be55413e94576557d1afffeb138d0f1a50df0ab238683a1591136f5e9e80c74da5feca70ceeb6aceec18ac4554b0760d9f6", @ANYRESOCT=r1], 0x20000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x690, 0x4) eventfd(0x4) 1.127564298s ago: executing program 2 (id=11787): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.052888828s ago: executing program 3 (id=11788): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_selinux(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) unshare(0x60600) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) 988.246048ms ago: executing program 1 (id=11789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)=r3}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x12) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x3000000) 958.155198ms ago: executing program 3 (id=11790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='S'], 0x67) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 440.928579ms ago: executing program 5 (id=11791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="28009c29822a7e88440fd728f630a8fec69cbc4a28b15dccd09fa3c4a4f1746d840b7447545ba13f2abdceceef61d42b232d33ff9f9572269ecbd4e71b735a18cd9c85a905046ff60854aed430505483a2f4558500"/98, @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf251a00000c040022ffffffff41620000000500920009000000ec4dbc090000000000000091eb1a"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000124bd7000fcdbdf25820000000c009900008000003f000000"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xa) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000380)='./file0\x00', 0x4000010) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000002c0)={0x1, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 439.733049ms ago: executing program 0 (id=11801): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7}}]}}]}, 0x45c}}, 0x0) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r4, @ANYBLOB="08001c00", @ANYRES32=r9], 0x24}}, 0x0) 439.079969ms ago: executing program 3 (id=11792): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xc, 0xa}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa495, 0x7ff, 0x0, 0x0, 0xffffffff}, 0x80, 0x1, 0x3, 0x4, 0x8, 0xd, 0x17, 0x1b, 0x1, 0x81, {0x9, 0x1f, 0x0, 0x2, 0xb, 0x1}}}}]}, 0x78}}, 0x4000) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003c40), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 241.529829ms ago: executing program 0 (id=11793): clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) name_to_handle_at(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@reiserfs_5={0x14}, &(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) utimes(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001140)={{r0, r1/1000+60000}, {r5, r6/1000+10000}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) read$char_usb(r7, &(0x7f0000000b00)=""/179, 0xb3) lstat(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240)) 83.18535ms ago: executing program 1 (id=11794): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x9) socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_setup(0x1336, &(0x7f00000000c0)={0x0, 0xff3b, 0x2, 0x1, 0x22c}, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 54.93838ms ago: executing program 1 (id=11795): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgid(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r4, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) dup3(r3, r4, 0x147da90c9d99d384) truncate(&(0x7f0000000000)='./file2\x00', 0x3000) 0s ago: executing program 0 (id=11796): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rpcgss_unwrap_failed\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18) ioperm(0x0, 0x4, 0x2) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}, {0x6, 0x1, 0x60, 0x6}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x103f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000340)={@loopback, @multicast1, 0xffffffffffffffff, "73f6ea92ac5dac79572f7c1f80b2991dc1ee828edc636d891ca3ad4879189052", 0x4, 0x62fb, 0x622e, 0x3}, 0x3c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) kernel console output (not intermixed with test programs): 0 [ 386.425160][T27349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10795,pid=27348,uid=0 [ 386.439994][T27349] Memory cgroup out of memory: Killed process 27348 (syz.0.10795) total-vm:95328kB, anon-rss:616kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 386.464667][T27393] syz.3.10802[27393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.464738][T27393] syz.3.10802[27393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.516263][T27393] syz.3.10802[27393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.846964][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 386.846983][ T29] audit: type=1400 audit(1733693129.391:1418514): avc: denied { write } for pid=27416 comm="syz.5.10811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.885351][ T29] audit: type=1400 audit(1733693129.391:1418515): avc: denied { nlmsg_read } for pid=27416 comm="syz.5.10811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.915903][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881185e6400: rx timeout, send abort [ 386.924160][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881185e6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 387.217161][T27428] lo speed is unknown, defaulting to 1000 [ 387.355885][ T29] audit: type=1326 audit(1733693129.891:1418516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.379917][ T29] audit: type=1326 audit(1733693129.891:1418517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.403771][ T29] audit: type=1326 audit(1733693129.891:1418518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.427713][ T29] audit: type=1326 audit(1733693129.891:1418519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.474604][ T29] audit: type=1326 audit(1733693129.991:1418520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.498685][ T29] audit: type=1326 audit(1733693130.011:1418521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.522613][ T29] audit: type=1326 audit(1733693130.011:1418522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.567322][ T29] audit: type=1326 audit(1733693130.011:1418523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.1.10816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 387.666611][T27445] SET target dimension over the limit! [ 387.669291][T27442] vlan2: entered promiscuous mode [ 387.677257][T27442] team0: entered promiscuous mode [ 387.682402][T27442] team_slave_0: entered promiscuous mode [ 387.688190][T27442] team_slave_1: entered promiscuous mode [ 387.696751][T27442] team0: Device vlan2 is already an upper device of the team interface [ 387.714109][T27442] team0: left promiscuous mode [ 387.719129][T27442] team_slave_0: left promiscuous mode [ 387.724669][T27442] team_slave_1: left promiscuous mode [ 387.819970][T27458] syz.5.10826[27458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.820121][T27458] syz.5.10826[27458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.832075][T27458] syz.5.10826[27458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.923324][T27463] ref_ctr going negative. vaddr: 0x20fe9002, curr val: -3596, delta: 1 [ 387.943138][T27463] ref_ctr increment failed for inode: 0x135 offset: 0x0 ref_ctr_offset: 0x2 of mm: 0xffff888116d879c0 [ 388.809245][T27474] netlink: '+}[@': attribute type 4 has an invalid length. [ 389.070616][T27476] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 389.122601][T27476] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 389.149752][T27481] bond1: entered promiscuous mode [ 389.154866][T27481] bond1: entered allmulticast mode [ 389.183577][T27481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.204916][T27481] bond1 (unregistering): Released all slaves [ 389.535798][T27494] loop3: detected capacity change from 0 to 512 [ 389.545458][T27494] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10838: bg 0: block 393: padding at end of block bitmap is not set [ 389.561729][T27494] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 389.570918][T27494] EXT4-fs (loop3): 2 truncates cleaned up [ 389.578432][T27494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.615974][T27494] loop3: detected capacity change from 512 to 0 [ 389.626165][T27494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.638936][T27499] loop2: detected capacity change from 0 to 512 [ 389.648982][T27501] __nla_validate_parse: 1 callbacks suppressed [ 389.649041][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10841'. [ 389.660378][T27494] syz.3.10838: attempt to access beyond end of device [ 389.660378][T27494] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 389.666608][T27499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.677748][T27494] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 389.698244][T27494] EXT4-fs (loop3): I/O error while writing superblock [ 389.740619][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.039420][T27530] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10851'. [ 390.061586][T27527] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10851'. [ 390.316908][T27557] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10864'. [ 390.578093][T27559] pim6reg1: entered promiscuous mode [ 390.583547][T27559] pim6reg1: entered allmulticast mode [ 390.714514][T27566] loop3: detected capacity change from 0 to 512 [ 390.722075][T27566] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.748319][T27566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.775624][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.801588][T27574] tipc: Started in network mode [ 390.806545][T27574] tipc: Node identity 8ecb39ffaafa, cluster identity 4711 [ 390.813915][T27574] tipc: Enabled bearer , priority 7 [ 390.822461][T27574] syz.3.10870[27574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.822526][T27574] syz.3.10870[27574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.834296][T27574] syz.3.10870[27574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.848121][T27574] ªªªªªª: renamed from syzkaller0 [ 390.865973][T27574] tipc: Disabling bearer [ 391.181420][T27590] vlan0: entered promiscuous mode [ 391.186587][T27590] team0: entered promiscuous mode [ 391.191716][T27590] team_slave_0: entered promiscuous mode [ 391.197489][T27590] team_slave_1: entered promiscuous mode [ 391.204747][T27590] team0: Device vlan0 is already an upper device of the team interface [ 391.215960][T27590] team0: left promiscuous mode [ 391.220778][T27590] team_slave_0: left promiscuous mode [ 391.226352][T27590] team_slave_1: left promiscuous mode [ 391.729624][T27608] loop2: detected capacity change from 0 to 256 [ 391.736649][T27608] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 391.755031][T27608] FAT-fs (loop2): Directory bread(block 64) failed [ 391.761994][T27608] FAT-fs (loop2): Directory bread(block 65) failed [ 391.768692][T27608] FAT-fs (loop2): Directory bread(block 66) failed [ 391.775358][T27608] FAT-fs (loop2): Directory bread(block 67) failed [ 391.784972][T27608] FAT-fs (loop2): Directory bread(block 68) failed [ 391.791951][T27608] FAT-fs (loop2): Directory bread(block 69) failed [ 391.798318][T27612] netlink: 'syz.3.10885': attribute type 4 has an invalid length. [ 391.799736][T27608] FAT-fs (loop2): Directory bread(block 70) failed [ 391.813353][T27608] FAT-fs (loop2): Directory bread(block 71) failed [ 391.821956][T27608] FAT-fs (loop2): Directory bread(block 72) failed [ 391.829213][T27608] FAT-fs (loop2): Directory bread(block 73) failed [ 391.859080][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 391.859096][ T29] audit: type=1326 audit(1733693134.401:1418705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27613 comm="syz.3.10886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x0 [ 391.897505][ T29] audit: type=1326 audit(1733693134.401:1418706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 391.921533][ T29] audit: type=1326 audit(1733693134.411:1418707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 391.945395][ T29] audit: type=1326 audit(1733693134.411:1418708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 391.969339][ T29] audit: type=1326 audit(1733693134.411:1418709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 391.993264][ T29] audit: type=1326 audit(1733693134.411:1418710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 392.017154][ T29] audit: type=1326 audit(1733693134.421:1418711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 392.041058][ T29] audit: type=1326 audit(1733693134.421:1418712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0d0f4ff13 code=0x7ffc0000 [ 392.064805][ T29] audit: type=1326 audit(1733693134.421:1418713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd0d0f4e98f code=0x7ffc0000 [ 392.088443][ T29] audit: type=1326 audit(1733693134.421:1418714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27607 comm="syz.2.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd0d0f4ff67 code=0x7ffc0000 [ 392.187299][T27622] loop2: detected capacity change from 0 to 2048 [ 392.220677][T27622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.270668][T27633] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 392.302652][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.409479][T27640] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.450786][T27640] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.529022][T27640] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.579171][T27640] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.645080][T27640] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.660817][T27640] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.681392][T27640] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.709690][T27640] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.289674][T27651] lo speed is unknown, defaulting to 1000 [ 393.451571][T27659] SET target dimension over the limit! [ 394.454738][T27679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.570309][T27684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10907'. [ 394.626592][T27688] ref_ctr going negative. vaddr: 0x20fe9002, curr val: -3596, delta: 1 [ 394.634893][T27688] ref_ctr increment failed for inode: 0x2c94 offset: 0x0 ref_ctr_offset: 0x2 of mm: 0xffff888108b98000 [ 394.651098][T27688] loop3: detected capacity change from 0 to 1024 [ 394.668139][T27688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.839597][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.995706][T27709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.004398][T27709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.062847][T27711] hub 6-0:1.0: USB hub found [ 395.067752][T27711] hub 6-0:1.0: 8 ports detected [ 396.130696][T27718] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 396.235833][T27723] loop3: detected capacity change from 0 to 512 [ 396.247679][T27723] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 396.256115][T27723] System zones: 0-2, 18-18, 34-34 [ 396.267244][T27723] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10917: bg 0: block 248: padding at end of block bitmap is not set [ 396.308762][T27723] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.10917: Failed to acquire dquot type 1 [ 396.336444][T27723] EXT4-fs (loop3): 1 truncate cleaned up [ 396.345986][T27723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.358997][T27723] ext4 filesystem being mounted at /2173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.454355][T27739] futex_wake_op: syz.1.10924 tries to shift op by -1; fix this program [ 396.607029][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.957798][T27766] loop3: detected capacity change from 0 to 2048 [ 396.983720][T27766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.073403][T27770] bond0: entered promiscuous mode [ 397.078616][T27770] bond0: entered allmulticast mode [ 397.095279][T27770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.116379][T27770] bond0 (unregistering): Released all slaves [ 397.132394][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 397.132410][ T29] audit: type=1326 audit(1733693139.671:1419220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27769 comm="syz.1.10935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 397.194322][ T29] audit: type=1326 audit(1733693139.721:1419221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27769 comm="syz.1.10935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 397.218252][ T29] audit: type=1326 audit(1733693139.721:1419222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27769 comm="syz.1.10935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x0 [ 397.285109][ T29] audit: type=1400 audit(1733693139.821:1419223): avc: denied { mounton } for pid=27775 comm="syz.2.10947" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 397.365213][ T1997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 397.397893][ T1997] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 397.410262][ T1997] EXT4-fs (loop3): This should not happen!! Data will be lost [ 397.410262][ T1997] [ 397.419965][ T1997] EXT4-fs (loop3): Total free blocks count 0 [ 397.420900][T27779] lo speed is unknown, defaulting to 1000 [ 397.425993][ T1997] EXT4-fs (loop3): Free/Dirty block details [ 397.437693][ T1997] EXT4-fs (loop3): free_blocks=2415919104 [ 397.443424][ T1997] EXT4-fs (loop3): dirty_blocks=8224 [ 397.448783][ T1997] EXT4-fs (loop3): Block reservation details [ 397.454779][ T1997] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 397.464919][ T1997] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 397.731006][ T29] audit: type=1400 audit(1733693140.271:1419224): avc: denied { setopt } for pid=27788 comm="syz.0.10939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.965687][ T29] audit: type=1400 audit(1733693140.501:1419225): avc: denied { prog_load } for pid=27795 comm="syz.2.10943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 397.999672][ T29] audit: type=1400 audit(1733693140.511:1419226): avc: denied { bpf } for pid=27795 comm="syz.2.10943" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.020728][ T29] audit: type=1400 audit(1733693140.531:1419227): avc: denied { map_create } for pid=27795 comm="syz.2.10943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.040417][ T29] audit: type=1400 audit(1733693140.541:1419228): avc: denied { write } for pid=27795 comm="syz.2.10943" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 398.063721][ T29] audit: type=1400 audit(1733693140.541:1419229): avc: denied { create } for pid=27795 comm="syz.2.10943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.095992][T27796] hub 1-0:1.0: USB hub found [ 398.105175][T27796] hub 1-0:1.0: 8 ports detected [ 398.449087][T27801] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 398.499882][T27805] bond1: entered promiscuous mode [ 398.504955][T27805] bond1: entered allmulticast mode [ 398.510550][T27805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.520878][T27805] bond1 (unregistering): Released all slaves [ 398.603650][T27805] loop3: detected capacity change from 0 to 1024 [ 398.611550][T27805] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 398.622321][T27805] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 398.632893][T27805] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #32: comm syz.3.10948: iget: special inode unallocated [ 398.647167][T27805] EXT4-fs (loop3): no journal found [ 398.652416][T27805] EXT4-fs (loop3): can't get journal size [ 398.659106][T27812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.659272][T27805] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.10948: iget: special inode unallocated [ 398.683617][T27805] EXT4-fs (loop3): failed to initialize system zone (-117) [ 398.699038][T27805] EXT4-fs (loop3): mount failed [ 398.722199][T27812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.733620][T27820] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.10953'. [ 398.748794][T27818] wg2: entered promiscuous mode [ 398.753722][T27818] wg2: entered allmulticast mode [ 398.761822][T27812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.789933][T27824] loop3: detected capacity change from 0 to 512 [ 398.797223][T27824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 398.809082][T27824] EXT4-fs (loop3): 1 truncate cleaned up [ 398.815179][T27824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.828909][T27812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.907176][T27812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.931031][T27812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.949876][T27832] futex_wake_op: syz.2.10958 tries to shift op by -1; fix this program [ 398.954554][T27812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.969794][T27812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.050610][T27830] lo speed is unknown, defaulting to 1000 [ 399.439122][T27849] bond0: entered promiscuous mode [ 399.444196][T27849] bond0: entered allmulticast mode [ 399.461925][T27849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.484292][T27849] bond0 (unregistering): Released all slaves [ 399.701774][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.816088][T27855] serio: Serial port ptm0 [ 399.844036][T27857] loop3: detected capacity change from 0 to 1024 [ 399.851090][T27857] EXT4-fs: Ignoring removed orlov option [ 399.856871][T27857] EXT4-fs: Ignoring removed orlov option [ 399.880814][T27857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.899742][T27857] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10966'. [ 399.910667][T27857] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.10966: corrupted in-inode xattr: bad magic number in in-inode xattr [ 399.927143][T27857] EXT4-fs (loop3): Remounting filesystem read-only [ 399.944522][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.061965][T27868] pim6reg1: entered promiscuous mode [ 400.067380][T27868] pim6reg1: entered allmulticast mode [ 400.208254][T27878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10973'. [ 400.242387][T27880] can0: slcan on ttyS3. [ 400.283474][T27884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10975'. [ 400.292944][T27884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10975'. [ 400.303414][T27880] can0 (unregistered): slcan off ttyS3. [ 400.484833][T27892] lo speed is unknown, defaulting to 1000 [ 400.526353][T27882] Set syz1 is full, maxelem 65536 reached [ 401.271970][T27902] lo speed is unknown, defaulting to 1000 [ 401.849837][T27932] ip6t_rpfilter: unknown options [ 401.943725][T27936] hub 6-0:1.0: USB hub found [ 401.948594][T27936] hub 6-0:1.0: 8 ports detected [ 402.104055][T27938] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.112498][T27938] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.120723][T27938] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.129052][T27938] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.181701][T27940] Cannot find del_set index 0 as target [ 402.277259][T27938] vxlan0: entered promiscuous mode [ 402.282424][T27938] vxlan0: entered allmulticast mode [ 402.296239][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 402.296256][ T29] audit: type=1400 audit(1733693144.831:1419392): avc: denied { name_bind } for pid=27937 comm="syz.5.10991" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 402.324786][T27938] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.333216][T27938] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.341620][T27938] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.350022][T27938] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.365910][ T29] audit: type=1400 audit(1733693144.901:1419393): avc: denied { mounton } for pid=27944 comm="syz.3.10993" path="/2192/file0" dev="tmpfs" ino=11526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 402.473624][ T29] audit: type=1400 audit(1733693145.011:1419394): avc: denied { read write } for pid=27948 comm="syz.5.10994" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 402.497866][ T29] audit: type=1400 audit(1733693145.011:1419395): avc: denied { open } for pid=27948 comm="syz.5.10994" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 402.658419][ T29] audit: type=1326 audit(1733693145.201:1419396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27956 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 402.696641][ T29] audit: type=1326 audit(1733693145.201:1419397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27956 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 402.720805][ T29] audit: type=1326 audit(1733693145.201:1419398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27956 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 402.744769][ T29] audit: type=1326 audit(1733693145.201:1419399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27956 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 402.768695][ T29] audit: type=1326 audit(1733693145.201:1419400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27956 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 402.792714][ T29] audit: type=1326 audit(1733693145.201:1419401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27956 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 403.267082][T27974] hub 5-0:1.0: USB hub found [ 403.271792][T27974] hub 5-0:1.0: 8 ports detected [ 403.296969][T27976] block device autoloading is deprecated and will be removed. [ 403.477921][T27985] vlan2: entered allmulticast mode [ 404.062222][T28004] ref_ctr_offset mismatch. inode: 0x2d18 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 404.501488][T28015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11016'. [ 404.516970][T28015] rdma_rxe: rxe_newlink: failed to add lo [ 404.648860][T28019] syzkaller0: entered promiscuous mode [ 404.654385][T28019] syzkaller0: entered allmulticast mode [ 404.897638][T28040] loop1: detected capacity change from 0 to 1024 [ 404.908185][T28040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.945212][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.085430][T28051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.099676][T28055] veth0_to_team: entered promiscuous mode [ 405.105521][T28055] veth0_to_team: entered allmulticast mode [ 405.117730][T28055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11031'. [ 405.130560][T28055] rdma_rxe: rxe_newlink: failed to add lo [ 405.152321][T28051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.242734][T28051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.309472][T28051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.385991][T28051] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.419170][T28051] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.450154][T28051] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.466500][T28051] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.485406][T28071] lo speed is unknown, defaulting to 1000 [ 405.549358][T28078] bridge0: entered promiscuous mode [ 405.557960][T28078] bridge0: left promiscuous mode [ 405.733797][T28090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11044'. [ 405.833947][T28097] netlink: 'syz.3.11046': attribute type 3 has an invalid length. [ 406.030904][T28103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11048'. [ 406.361863][T28106] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 406.420523][T28111] ref_ctr_offset mismatch. inode: 0x2e2e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 406.644073][T28122] lo speed is unknown, defaulting to 1000 [ 407.154960][T28145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11061'. [ 407.289515][T28147] hub 6-0:1.0: USB hub found [ 407.294445][T28147] hub 6-0:1.0: 8 ports detected [ 408.120813][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 408.120832][ T29] audit: type=1400 audit(1733693150.641:1419644): avc: denied { setopt } for pid=28148 comm="syz.2.11062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.149852][ T29] audit: type=1326 audit(1733693150.691:1419645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28150 comm="syz.3.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.173914][ T29] audit: type=1326 audit(1733693150.691:1419646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28150 comm="syz.3.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.201111][ T29] audit: type=1326 audit(1733693150.741:1419647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28150 comm="syz.3.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.225054][ T29] audit: type=1326 audit(1733693150.741:1419648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28150 comm="syz.3.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.280467][ T29] audit: type=1400 audit(1733693150.821:1419649): avc: denied { ioctl } for pid=28154 comm="syz.2.11065" path="socket:[84045]" dev="sockfs" ino=84045 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.461284][ T29] audit: type=1400 audit(1733693151.001:1419650): avc: denied { write } for pid=28175 comm="syz.3.11075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 408.574670][T28180] syzkaller0: entered promiscuous mode [ 408.580237][T28180] syzkaller0: entered allmulticast mode [ 408.602329][T28184] bond1: entered promiscuous mode [ 408.607583][T28184] bond1: entered allmulticast mode [ 408.612901][T28184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.622538][T28184] bond1 (unregistering): Released all slaves [ 408.634176][ T29] audit: type=1326 audit(1733693151.171:1419651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.3.11078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.658061][ T29] audit: type=1326 audit(1733693151.181:1419652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.3.11078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.681906][ T29] audit: type=1326 audit(1733693151.181:1419653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.3.11078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 408.835237][T28190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11080'. [ 409.277588][T28202] tipc: Started in network mode [ 409.282581][T28202] tipc: Node identity ac14140f, cluster identity 4711 [ 409.289545][T28202] tipc: New replicast peer: 255.255.255.255 [ 409.295618][T28202] tipc: Enabled bearer , priority 10 [ 409.504048][T28218] geneve2: entered promiscuous mode [ 409.509405][T28218] geneve2: entered allmulticast mode [ 409.601422][T28223] loop1: detected capacity change from 0 to 128 [ 409.644017][T28223] syz.1.11093: attempt to access beyond end of device [ 409.644017][T28223] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 409.678575][T28223] syz.1.11093: attempt to access beyond end of device [ 409.678575][T28223] loop1: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 409.709826][T28223] syz.1.11093: attempt to access beyond end of device [ 409.709826][T28223] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 409.723392][T28223] Buffer I/O error on dev loop1, logical block 177, lost async page write [ 410.415940][ T8] tipc: Node number set to 2886997007 [ 410.605137][T28244] bond1: entered promiscuous mode [ 410.610299][T28244] bond1: entered allmulticast mode [ 410.615916][T28244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.659184][T28244] bond1 (unregistering): Released all slaves [ 410.697211][T28252] 8021q: VLANs not supported on ipvlan0 [ 410.764000][T28259] netlink: 'syz.2.11108': attribute type 4 has an invalid length. [ 410.799839][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.807460][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.815143][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.822627][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.830218][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.837641][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.845056][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.852444][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.859848][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.867249][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.874639][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.882093][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.889481][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.896867][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.904315][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.911723][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.919198][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.926694][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.934234][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.941892][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.949346][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.956749][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.964217][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.971616][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.979081][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.986511][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 410.993911][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.001405][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.008985][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.016708][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.024134][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.031611][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.039036][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.046522][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.053991][T27742] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 411.062419][T27742] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 411.159928][T28278] syzkaller0: entered promiscuous mode [ 411.165467][T28278] syzkaller0: entered allmulticast mode [ 411.373362][T28285] loop1: detected capacity change from 0 to 512 [ 411.382039][T28285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 411.560188][T28285] EXT4-fs (loop1): 1 truncate cleaned up [ 411.592869][T28285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.656779][T28296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.667243][T28296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38355 - 0 [ 411.811163][T28296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.821559][T28296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38355 - 0 [ 412.375756][T28306] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 412.443659][T28296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.454138][T28296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38355 - 0 [ 412.638341][T28296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.648695][T28296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38355 - 0 [ 412.763275][T28296] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 38355 - 0 [ 412.771720][T28296] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 412.827432][T28296] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 38355 - 0 [ 412.835811][T28296] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 412.867591][T28296] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 38355 - 0 [ 412.875948][T28296] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 412.913142][T28296] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 38355 - 0 [ 412.921499][T28296] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.617336][T28285] syz.1.11116 (28285) used greatest stack depth: 6256 bytes left [ 413.626909][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.755890][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 413.755909][ T29] audit: type=1400 audit(1733693156.281:1419752): avc: denied { ioctl } for pid=28337 comm="syz.0.11134" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.932009][ T29] audit: type=1400 audit(1733693156.471:1419753): avc: denied { relabelfrom } for pid=28348 comm="syz.1.11138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 413.952376][ T29] audit: type=1400 audit(1733693156.471:1419754): avc: denied { relabelto } for pid=28348 comm="syz.1.11138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 414.058158][T28353] hsr0: entered promiscuous mode [ 414.082525][T28353] macsec0: entered allmulticast mode [ 414.087980][T28353] hsr0: entered allmulticast mode [ 414.093036][T28353] hsr_slave_0: entered allmulticast mode [ 414.098735][T28353] hsr_slave_1: entered allmulticast mode [ 414.124577][T28353] hsr0: left allmulticast mode [ 414.129533][T28353] hsr_slave_0: left allmulticast mode [ 414.134959][T28353] hsr_slave_1: left allmulticast mode [ 414.180099][ T29] audit: type=1400 audit(1733693156.721:1419755): avc: denied { recv } for pid=28346 comm="syz.5.11137" saddr=10.128.0.163 src=30030 daddr=10.128.0.88 dest=50706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.287096][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11141'. [ 414.304414][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11141'. [ 414.442903][T28364] netlink: 'syz.1.11143': attribute type 12 has an invalid length. [ 414.551083][T28368] bridge0: port 3(syz_tun) entered disabled state [ 414.596839][T28368] syz_tun (unregistering): left allmulticast mode [ 414.603345][T28368] syz_tun (unregistering): left promiscuous mode [ 414.609751][T28368] bridge0: port 3(syz_tun) entered disabled state [ 414.702034][T28371] mmap: syz.3.11146 (28371): VmData 29036544 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 414.733956][ T29] audit: type=1400 audit(1733693157.271:1419756): avc: denied { ioctl } for pid=28369 comm="syz.3.11146" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.912304][T28383] xt_hashlimit: size too large, truncated to 1048576 [ 414.936639][ T29] audit: type=1326 audit(1733693157.461:1419757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28375 comm="syz.3.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 414.960627][ T29] audit: type=1326 audit(1733693157.461:1419758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28375 comm="syz.3.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 414.984555][ T29] audit: type=1326 audit(1733693157.461:1419759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28375 comm="syz.3.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 415.008475][ T29] audit: type=1326 audit(1733693157.461:1419760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28375 comm="syz.3.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 415.032411][ T29] audit: type=1326 audit(1733693157.481:1419761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28375 comm="syz.3.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 415.464923][T28393] xt_hashlimit: size too large, truncated to 1048576 [ 415.959953][T28403] ip6erspan0: entered promiscuous mode [ 415.965457][T28403] ip6erspan0: entered allmulticast mode [ 416.591982][T28406] loop1: detected capacity change from 0 to 128 [ 416.603401][T28406] loop1: detected capacity change from 0 to 512 [ 416.611049][T28406] EXT4-fs: Ignoring removed orlov option [ 416.617639][T28406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.638204][T28410] serio: Serial port ptm0 [ 416.638123][T28406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.655235][T28406] ext4 filesystem being mounted at /2153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.716063][T28413] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 416.730997][T28413] EXT4-fs (loop1): Remounting filesystem read-only [ 416.820975][T28406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 416.830137][T28406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 416.904948][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.962285][T28429] loop1: detected capacity change from 0 to 128 [ 416.993090][T28429] syz.1.11166: attempt to access beyond end of device [ 416.993090][T28429] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 417.013949][T28429] syz.1.11166: attempt to access beyond end of device [ 417.013949][T28429] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 417.029875][T28429] syz.1.11166: attempt to access beyond end of device [ 417.029875][T28429] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 417.043663][T28429] syz.1.11166: attempt to access beyond end of device [ 417.043663][T28429] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 417.058063][T28429] syz.1.11166: attempt to access beyond end of device [ 417.058063][T28429] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 417.071987][T28429] syz.1.11166: attempt to access beyond end of device [ 417.071987][T28429] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 418.032214][T28456] loop1: detected capacity change from 0 to 512 [ 418.039507][T28456] EXT4-fs: Ignoring removed bh option [ 418.047965][T28456] EXT4-fs error (device loop1): __ext4_iget:4984: inode #15: block 1803188595: comm syz.1.11185: invalid block [ 418.060037][T28456] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.11185: couldn't read orphan inode 15 (err -117) [ 418.072777][T28456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.147549][T28460] bond0: entered promiscuous mode [ 418.152652][T28460] bond0: entered allmulticast mode [ 418.159269][T28460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.168847][T28460] bond0 (unregistering): Released all slaves [ 418.231261][T28463] syz.5.11176[28463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.231368][T28463] syz.5.11176[28463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.251881][T28463] syz.5.11176[28463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.263992][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.304833][T28469] loop1: detected capacity change from 0 to 256 [ 418.312174][T28469] vfat: Unknown parameter 'kmem_cache_free' [ 418.447115][T28476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28476 comm=syz.1.11181 [ 418.545464][T28481] loop1: detected capacity change from 0 to 1024 [ 418.638061][T28481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.795304][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 418.795321][ T29] audit: type=1400 audit(1733693161.331:1419899): avc: denied { write } for pid=28496 comm="syz.0.11191" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 418.825865][ T29] audit: type=1400 audit(1733693161.341:1419900): avc: denied { ioctl } for pid=28496 comm="syz.0.11191" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 419.391218][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.609833][ T29] audit: type=1400 audit(1733693162.151:1419901): avc: denied { read } for pid=28511 comm="syz.5.11196" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 419.633827][ T29] audit: type=1400 audit(1733693162.151:1419902): avc: denied { open } for pid=28511 comm="syz.5.11196" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 419.667746][ T29] audit: type=1400 audit(1733693162.201:1419903): avc: denied { ioctl } for pid=28511 comm="syz.5.11196" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 419.702077][T28516] netlink: 'syz.2.11198': attribute type 4 has an invalid length. [ 420.281344][T28527] pim6reg1: entered promiscuous mode [ 420.286866][T28527] pim6reg1: entered allmulticast mode [ 420.383296][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11213'. [ 420.403341][T28532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.410693][T28532] IPv6: NLM_F_CREATE should be set when creating new route [ 420.424426][T28532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.431684][T28532] IPv6: NLM_F_CREATE should be set when creating new route [ 420.440165][T28532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28532 comm=syz.0.11213 [ 420.453732][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11213'. [ 420.527817][T28539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.536292][T28539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.592355][T28544] netlink: 'syz.3.11207': attribute type 10 has an invalid length. [ 420.600326][T28544] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11207'. [ 420.609302][T28544] team0: entered promiscuous mode [ 420.614381][T28544] team_slave_0: entered promiscuous mode [ 420.620129][T28544] team_slave_1: entered promiscuous mode [ 420.626081][T28544] bridge0: port 4(team0) entered blocking state [ 420.632360][T28544] bridge0: port 4(team0) entered disabled state [ 420.632788][T28545] vhci_hcd: invalid port number 36 [ 420.638817][T28544] team0: entered allmulticast mode [ 420.643903][T28545] vhci_hcd: default hub control req: d301 v0209 i0024 l65281 [ 420.649020][T28544] team_slave_0: entered allmulticast mode [ 420.662149][T28544] team_slave_1: entered allmulticast mode [ 420.669076][T28544] bridge0: port 4(team0) entered blocking state [ 420.675353][T28544] bridge0: port 4(team0) entered forwarding state [ 421.240819][ T29] audit: type=1400 audit(1733693163.781:1419904): avc: denied { ioctl } for pid=28550 comm="syz.5.11211" path="socket:[84707]" dev="sockfs" ino=84707 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 421.286630][ T29] audit: type=1400 audit(1733693163.831:1419905): avc: denied { bind } for pid=28558 comm="syz.1.11212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.315902][ T29] audit: type=1400 audit(1733693163.831:1419906): avc: denied { name_bind } for pid=28558 comm="syz.1.11212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 421.337359][ T29] audit: type=1400 audit(1733693163.831:1419907): avc: denied { node_bind } for pid=28558 comm="syz.1.11212" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 421.402710][T28567] syz.1.11215[28567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.403587][T28567] syz.1.11215[28567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.415635][T28567] syz.1.11215[28567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.988191][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11223'. [ 422.040709][T28592] team0 (unregistering): Port device team_slave_0 removed [ 422.067547][T28592] team0 (unregistering): Port device team_slave_1 removed [ 422.083645][ T29] audit: type=1326 audit(1733693164.621:1419908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28595 comm="syz.1.11229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 422.233224][T28608] block device autoloading is deprecated and will be removed. [ 422.256962][T28608] syz.5.11233: attempt to access beyond end of device [ 422.256962][T28608] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 422.299639][T28613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11235'. [ 422.329107][T28613] vlan0: entered promiscuous mode [ 422.334195][T28613] syz_tun: entered promiscuous mode [ 422.336578][T28615] syz.3.11236[28615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.339478][T28615] syz.3.11236[28615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.351115][T28613] syz_tun: left promiscuous mode [ 422.351614][T28615] syz.3.11236[28615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.466384][T28620] netlink: 'syz.2.11239': attribute type 10 has an invalid length. [ 422.485933][T28620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11239'. [ 422.508478][T28620] batman_adv: batadv0: Adding interface: macvlan0 [ 422.514936][T28620] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.550936][T28620] batman_adv: batadv0: Interface activated: macvlan0 [ 422.567438][T28622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11238'. [ 422.874933][T28648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11249'. [ 422.920157][T28654] bridge0: port 3(syz_tun) entered blocking state [ 422.926723][T28654] bridge0: port 3(syz_tun) entered disabled state [ 422.933400][T28654] syz_tun: entered allmulticast mode [ 422.939375][T28654] syz_tun: entered promiscuous mode [ 422.944771][T28654] bridge0: port 3(syz_tun) entered blocking state [ 422.951293][T28654] bridge0: port 3(syz_tun) entered forwarding state [ 423.002289][T28660] hsr_slave_0: left promiscuous mode [ 423.008536][T28660] hsr_slave_1: left promiscuous mode [ 423.779404][T28723] syz.2.11260[28723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.779562][T28723] syz.2.11260[28723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.793904][T28723] syz.2.11260[28723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.887173][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 423.887191][ T29] audit: type=1400 audit(1733693166.431:1419998): avc: denied { execute } for pid=28729 comm="syz.5.11262" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=85849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 424.031896][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11263'. [ 424.085279][T28746] pim6reg1: entered promiscuous mode [ 424.090625][T28746] pim6reg1: entered allmulticast mode [ 424.177605][T28751] pim6reg1: entered promiscuous mode [ 424.182948][T28751] pim6reg1: entered allmulticast mode [ 424.328638][ T29] audit: type=1326 audit(1733693166.871:1419999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.372018][ T29] audit: type=1326 audit(1733693166.891:1420000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.395961][ T29] audit: type=1326 audit(1733693166.891:1420001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.419930][ T29] audit: type=1326 audit(1733693166.891:1420002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.443872][ T29] audit: type=1326 audit(1733693166.891:1420003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.467773][ T29] audit: type=1326 audit(1733693166.891:1420004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.491804][ T29] audit: type=1326 audit(1733693166.891:1420005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.515675][ T29] audit: type=1326 audit(1733693166.901:1420006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.539560][ T29] audit: type=1326 audit(1733693166.901:1420007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.5.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4f9fed9 code=0x7ffc0000 [ 424.591824][T28779] netlink: 332 bytes leftover after parsing attributes in process `syz.2.11269'. [ 424.610542][T28781] netlink: 'syz.0.11270': attribute type 10 has an invalid length. [ 424.620128][T28779] netlink: 'syz.2.11269': attribute type 9 has an invalid length. [ 424.620900][T28781] team0: entered promiscuous mode [ 424.633324][T28781] team_slave_0: entered promiscuous mode [ 424.639263][T28781] team_slave_1: entered promiscuous mode [ 424.647356][T28781] bridge0: port 4(team0) entered blocking state [ 424.653728][T28781] bridge0: port 4(team0) entered disabled state [ 424.661169][T28781] team0: entered allmulticast mode [ 424.666482][T28781] team_slave_0: entered allmulticast mode [ 424.672260][T28781] team_slave_1: entered allmulticast mode [ 424.687511][T28781] bridge0: port 4(team0) entered blocking state [ 424.693834][T28781] bridge0: port 4(team0) entered forwarding state [ 425.150393][T28847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.303736][T28863] sd 0:0:1:0: device reset [ 425.904779][T28891] pim6reg1: entered promiscuous mode [ 425.910191][T28891] pim6reg1: entered allmulticast mode [ 426.204735][T28907] __nla_validate_parse: 6 callbacks suppressed [ 426.204752][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11295'. [ 426.233638][T28907] bridge0: port 4(team0) entered disabled state [ 426.246260][T28907] team0 (unregistering): left allmulticast mode [ 426.252573][T28907] team_slave_0: left allmulticast mode [ 426.258154][T28907] team_slave_1: left allmulticast mode [ 426.263824][T28907] bridge0: port 4(team0) entered disabled state [ 426.272077][T28907] team_slave_0: left promiscuous mode [ 426.287834][T28907] team0 (unregistering): Port device team_slave_0 removed [ 426.295443][T28907] team_slave_1: left promiscuous mode [ 426.302965][T28907] team0 (unregistering): Port device team_slave_1 removed [ 426.339286][T28913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.344399][T28915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11298'. [ 426.982814][T28935] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11308'. [ 427.070200][T28942] loop1: detected capacity change from 0 to 512 [ 427.078188][T28942] EXT4-fs: inline encryption not supported [ 427.109317][T28942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.123328][T28942] ext4 filesystem being mounted at /2177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.140349][T28942] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.148704][T28942] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.156955][T28942] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.165137][T28942] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.176321][T28942] vxlan0: entered promiscuous mode [ 427.182837][T28942] vxlan0: entered allmulticast mode [ 427.202781][T28948] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.11309: corrupted inode contents [ 427.216593][T28948] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.11309: mark_inode_dirty error [ 427.228786][T28942] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.237217][T28942] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.245649][T28942] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.254079][T28942] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.266168][T28948] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.11309: corrupted inode contents [ 427.279963][T28948] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.11309: mark_inode_dirty error [ 427.398177][T28956] ip6erspan0: tun_chr_ioctl cmd 35108 [ 427.405161][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.422777][T28958] syz.2.11316 (28958): attempted to duplicate a private mapping with mremap. This is not supported. [ 427.430684][T28960] loop1: detected capacity change from 0 to 512 [ 427.441889][T28960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 427.453393][T28960] EXT4-fs (loop1): 1 truncate cleaned up [ 427.460512][T28960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.496994][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.535885][T28969] Process accounting resumed [ 427.571878][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11321'. [ 427.581143][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11321'. [ 427.592743][T28974] team0: entered promiscuous mode [ 427.597875][T28974] team_slave_0: entered promiscuous mode [ 427.603655][T28974] team_slave_1: entered promiscuous mode [ 427.610992][T28974] : entered promiscuous mode [ 427.615777][T28974] bond_slave_0: entered promiscuous mode [ 427.621519][T28974] bond_slave_1: entered promiscuous mode [ 427.628975][T28974] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 427.675433][T28979] ip6gre2: entered allmulticast mode [ 427.729020][T28985] loop1: detected capacity change from 0 to 128 [ 427.732553][T28983] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 427.748937][T28985] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.753700][T28983] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 427.761917][T28985] ext4 filesystem being mounted at /2182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.818078][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.835609][T28990] loop1: detected capacity change from 0 to 128 [ 428.896519][T29034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=512 sclass=netlink_audit_socket pid=29034 comm=syz.1.11343 [ 429.056044][T29037] sit0: entered promiscuous mode [ 429.061040][T29037] sit0: entered allmulticast mode [ 429.177492][T29042] tmpfs: Unknown parameter '9' [ 429.200066][T29046] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 429.307334][T29049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.320944][T29049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.326043][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 429.326060][ T29] audit: type=1326 audit(1733693171.861:1420641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29048 comm="syz.1.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 429.358789][ T29] audit: type=1326 audit(1733693171.871:1420642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29048 comm="syz.1.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 429.383045][ T29] audit: type=1326 audit(1733693171.871:1420643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 429.407062][ T29] audit: type=1326 audit(1733693171.871:1420644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 429.430929][ T29] audit: type=1326 audit(1733693171.871:1420645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 429.454888][ T29] audit: type=1326 audit(1733693171.871:1420646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc859b8e98f code=0x7ffc0000 [ 429.478688][ T29] audit: type=1326 audit(1733693171.871:1420647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 429.502534][ T29] audit: type=1326 audit(1733693171.911:1420648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29048 comm="syz.1.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 429.526393][ T29] audit: type=1326 audit(1733693171.911:1420649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29048 comm="syz.1.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 429.550254][ T29] audit: type=1326 audit(1733693171.911:1420650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29048 comm="syz.1.11350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 429.575810][T29055] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 429.584042][T29055] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 429.616977][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.624454][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.631995][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.640093][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.647540][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.654931][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.662329][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.669749][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.677214][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.684630][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.692064][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.699566][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.707026][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.714507][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.755972][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.763541][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.771007][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.778475][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.785902][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.793310][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.800790][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.808230][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.815672][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.823114][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.830545][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.837991][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.845399][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.852893][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.860379][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.867808][T26618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 429.875641][T26618] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 430.027686][T29086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11366'. [ 430.060690][T29093] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.11369'. [ 430.241590][T29105] lo speed is unknown, defaulting to 1000 [ 430.596130][T29121] loop1: detected capacity change from 0 to 512 [ 430.785339][T29121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.003812][T29121] ext4 filesystem being mounted at /2195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.124691][T29121] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #18: comm syz.1.11375: corrupted inode contents [ 431.145404][T29121] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #18: comm syz.1.11375: mark_inode_dirty error [ 431.145638][T29121] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #18: comm syz.1.11375: corrupted inode contents [ 431.149974][T29121] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #18: comm syz.1.11375: mark_inode_dirty error [ 431.150175][T29121] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #18: comm syz.1.11375: mark inode dirty (error -117) [ 431.150313][T29121] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 431.249862][T29132] netlink: 300 bytes leftover after parsing attributes in process `syz.3.11380'. [ 431.469145][T29136] netlink: 'syz.5.11382': attribute type 10 has an invalid length. [ 431.477416][T29136] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11382'. [ 432.355117][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.526006][T29153] block device autoloading is deprecated and will be removed. [ 432.533978][T29153] syz.3.11389: attempt to access beyond end of device [ 432.533978][T29153] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 433.448546][T29187] loop1: detected capacity change from 0 to 512 [ 433.459320][T29185] loop0: detected capacity change from 0 to 512 [ 433.650239][T29187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.663767][T29185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 433.677297][T29187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.738689][T29187] ext4 filesystem being mounted at /2197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.771926][T29185] EXT4-fs (loop0): 1 truncate cleaned up [ 433.792994][T29185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.976151][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.996395][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.062817][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11403'. [ 434.079044][T29196] syz_tun: left allmulticast mode [ 434.084127][T29196] syz_tun: left promiscuous mode [ 434.089290][T29196] bridge0: port 3(syz_tun) entered disabled state [ 434.097537][T29196] bridge_slave_1: left allmulticast mode [ 434.103247][T29196] bridge_slave_1: left promiscuous mode [ 434.109056][T29196] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.117119][T29196] bridge_slave_0: left allmulticast mode [ 434.122943][T29196] bridge_slave_0: left promiscuous mode [ 434.128754][T29196] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.219076][T29202] qrtr: Invalid version 0 [ 434.343921][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 434.343938][ T29] audit: type=1400 audit(1733693176.881:1421260): avc: denied { shutdown } for pid=29207 comm="syz.1.11408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 434.371903][ T29] audit: type=1326 audit(1733693176.921:1421261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.2.11407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 434.467846][ T29] audit: type=1326 audit(1733693176.941:1421262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.491741][ T29] audit: type=1326 audit(1733693176.941:1421263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.515610][ T29] audit: type=1326 audit(1733693176.951:1421264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.539659][ T29] audit: type=1326 audit(1733693176.951:1421265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.563582][ T29] audit: type=1326 audit(1733693176.951:1421266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.587555][ T29] audit: type=1326 audit(1733693176.951:1421267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.611517][ T29] audit: type=1326 audit(1733693176.951:1421268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.635366][ T29] audit: type=1326 audit(1733693176.951:1421269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.1.11408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471e4fed9 code=0x7ffc0000 [ 434.660362][T29216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11410'. [ 435.094166][T29235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11418'. [ 435.426600][T29247] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11421'. [ 435.602666][T29256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11426'. [ 436.095779][T29275] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 436.102337][T29275] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 436.110003][T29275] vhci_hcd vhci_hcd.0: Device attached [ 436.228859][T29278] vhci_hcd: connection closed [ 436.229448][ T395] vhci_hcd: stop threads [ 436.238466][ T395] vhci_hcd: release socket [ 436.242892][ T395] vhci_hcd: disconnect device [ 436.668110][T29284] syzkaller0: entered allmulticast mode [ 436.704207][T29284] syzkaller0 (unregistering): left allmulticast mode [ 436.878258][T29291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11437'. [ 437.024890][T29305] SELinux: syz.2.11442 (29305) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 437.067454][T29312] netlink: 'syz.1.11444': attribute type 10 has an invalid length. [ 437.076179][T29312] geneve1: entered promiscuous mode [ 437.085487][T29312] : (slave geneve1): Enslaving as an active interface with an up link [ 437.179962][T29317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11447'. [ 437.189148][T29317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11447'. [ 437.198220][T29317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11447'. [ 437.208583][T29317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11447'. [ 437.230409][T29319] 9pnet: Could not find request transport: f [ 437.238613][T29319] syz.1.11446[29319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.238767][T29319] syz.1.11446[29319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.251268][T29319] syz.1.11446[29319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.808468][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11450'. [ 438.125351][T29341] syz.5.11456[29341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.125475][T29341] syz.5.11456[29341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.137136][T29341] syz.5.11456[29341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.275323][T29346] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11457'. [ 438.296400][T29346] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11457'. [ 438.305581][T29346] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11457'. [ 438.333759][T29348] qrtr: Invalid version 0 [ 438.489507][T29354] smc: net device bond0 applied user defined pnetid SYZ0 [ 438.497017][T29354] smc: net device bond0 erased user defined pnetid SYZ0 [ 439.084221][T29371] random: crng reseeded on system resumption [ 439.227881][T29372] syz.0.11467[29372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.228029][T29372] syz.0.11467[29372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.271739][T29372] syz.0.11467[29372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.392612][T29370] tipc: Enabled bearer , priority 7 [ 439.472623][T29372] ªªªªªª: renamed from syzkaller0 [ 439.495310][T29372] tipc: Disabling bearer [ 439.655423][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 439.655441][ T29] audit: type=1326 audit(1733693182.191:1421727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.755905][ T29] audit: type=1326 audit(1733693182.191:1421728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.788297][ T29] audit: type=1326 audit(1733693182.331:1421729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.812253][ T29] audit: type=1326 audit(1733693182.331:1421730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.836153][ T29] audit: type=1326 audit(1733693182.331:1421731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.876464][ T29] audit: type=1326 audit(1733693182.411:1421732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.900285][ T29] audit: type=1326 audit(1733693182.411:1421733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.924261][ T29] audit: type=1326 audit(1733693182.411:1421734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.948152][ T29] audit: type=1326 audit(1733693182.411:1421735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 439.972241][ T29] audit: type=1326 audit(1733693182.411:1421736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.0.11468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 440.020228][T29384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11470'. [ 440.232179][T29398] futex_wake_op: syz.0.11476 tries to shift op by 144; fix this program [ 440.307485][T29404] netlink: 'syz.1.11475': attribute type 4 has an invalid length. [ 440.318965][T29403] netem: unknown loss type 0 [ 440.323588][T29403] netem: change failed [ 440.370315][T29410] loop0: detected capacity change from 0 to 2048 [ 440.426612][T29410] loop0: p1 < > p4 [ 440.430908][T29410] loop0: p4 size 8388608 extends beyond EOD, truncated [ 440.545779][T29421] 9pnet: Could not find request transport: f [ 440.552981][T29421] syz.2.11487[29421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.311471][T29464] smc: net device bond0 applied user defined pnetid SYZ0 [ 441.371737][T29468] smc: net device bond0 erased user defined pnetid SYZ0 [ 441.394696][T29467] vlan0: entered promiscuous mode [ 441.400030][T29467] syz_tun: entered promiscuous mode [ 441.407759][T29467] team0: Port device vlan0 added [ 441.457315][T29470] loop1: detected capacity change from 0 to 128 [ 441.481388][T29470] syz.1.11505: attempt to access beyond end of device [ 441.481388][T29470] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 441.551476][T29470] syz.1.11505: attempt to access beyond end of device [ 441.551476][T29470] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 441.721203][T29479] lo speed is unknown, defaulting to 1000 [ 441.755009][T29481] sd 0:0:1:0: device reset [ 441.964911][T29487] __nla_validate_parse: 10 callbacks suppressed [ 441.965003][T29487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11511'. [ 442.134758][T29495] loop1: detected capacity change from 0 to 256 [ 442.257440][T29462] syz.3.11502 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 442.271703][T29462] CPU: 0 UID: 0 PID: 29462 Comm: syz.3.11502 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 442.282576][T29462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.292654][T29462] Call Trace: [ 442.295941][T29462] [ 442.298895][T29462] dump_stack_lvl+0xf2/0x150 [ 442.303554][T29462] dump_stack+0x15/0x1a [ 442.307867][T29462] dump_header+0x83/0x2d0 [ 442.312214][T29462] oom_kill_process+0x341/0x4c0 [ 442.317087][T29462] out_of_memory+0x9af/0xbe0 [ 442.321699][T29462] ? css_next_descendant_pre+0x11c/0x140 [ 442.327492][T29462] mem_cgroup_out_of_memory+0x13e/0x190 [ 442.333078][T29462] try_charge_memcg+0x508/0x7f0 [ 442.338021][T29462] obj_cgroup_charge_pages+0xbd/0x1a0 [ 442.343407][T29462] __memcg_kmem_charge_page+0x9d/0x170 [ 442.348960][T29462] __alloc_pages_noprof+0x1bc/0x340 [ 442.354331][T29462] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 442.359717][T29462] alloc_pages_noprof+0xe1/0x100 [ 442.364684][T29462] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 442.370625][T29462] __kvmalloc_node_noprof+0x121/0x170 [ 442.376109][T29462] ? ip_set_alloc+0x1f/0x30 [ 442.380648][T29462] ip_set_alloc+0x1f/0x30 [ 442.385014][T29462] hash_netiface_create+0x273/0x730 [ 442.390272][T29462] ? __nla_parse+0x40/0x60 [ 442.394807][T29462] ? __pfx_hash_netiface_create+0x10/0x10 [ 442.400597][T29462] ip_set_create+0x359/0x8a0 [ 442.405468][T29462] ? memchr+0x1/0x50 [ 442.409379][T29462] ? __nla_parse+0x40/0x60 [ 442.413826][T29462] nfnetlink_rcv_msg+0x4a9/0x570 [ 442.418808][T29462] netlink_rcv_skb+0x12c/0x230 [ 442.423600][T29462] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 442.429176][T29462] nfnetlink_rcv+0x16c/0x15d0 [ 442.433920][T29462] ? kmem_cache_free+0xdc/0x2d0 [ 442.438783][T29462] ? nlmon_xmit+0x51/0x60 [ 442.443121][T29462] ? __kfree_skb+0x102/0x150 [ 442.447754][T29462] ? consume_skb+0x49/0x160 [ 442.452309][T29462] ? nlmon_xmit+0x51/0x60 [ 442.456666][T29462] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 442.461962][T29462] ? __dev_queue_xmit+0xb6e/0x2090 [ 442.467139][T29462] ? ref_tracker_free+0x3a5/0x410 [ 442.472206][T29462] ? __dev_queue_xmit+0x186/0x2090 [ 442.477337][T29462] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 442.482844][T29462] netlink_unicast+0x599/0x670 [ 442.487619][T29462] netlink_sendmsg+0x5cc/0x6e0 [ 442.492397][T29462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.497809][T29462] __sock_sendmsg+0x140/0x180 [ 442.502541][T29462] ____sys_sendmsg+0x312/0x410 [ 442.507323][T29462] __sys_sendmsg+0x19d/0x230 [ 442.512055][T29462] __x64_sys_sendmsg+0x46/0x50 [ 442.516830][T29462] x64_sys_call+0x2734/0x2dc0 [ 442.521546][T29462] do_syscall_64+0xc9/0x1c0 [ 442.526071][T29462] ? clear_bhb_loop+0x55/0xb0 [ 442.530782][T29462] ? clear_bhb_loop+0x55/0xb0 [ 442.535476][T29462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.541441][T29462] RIP: 0033:0x7f1f9dd0fed9 [ 442.545934][T29462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.565579][T29462] RSP: 002b:00007f1f9c387058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.573998][T29462] RAX: ffffffffffffffda RBX: 00007f1f9ded5fa0 RCX: 00007f1f9dd0fed9 [ 442.582027][T29462] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 442.590042][T29462] RBP: 00007f1f9dd83cc8 R08: 0000000000000000 R09: 0000000000000000 [ 442.598145][T29462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.606120][T29462] R13: 0000000000000000 R14: 00007f1f9ded5fa0 R15: 00007fff502d1798 [ 442.614103][T29462] [ 442.617416][T29462] memory: usage 307200kB, limit 307200kB, failcnt 265 [ 442.624513][T29462] memory+swap: usage 307884kB, limit 9007199254740988kB, failcnt 0 [ 442.632801][T29462] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 442.640190][T29462] Memory cgroup stats for /syz3: [ 442.642376][T29462] cache 0 [ 442.650308][T29462] rss 4096 [ 442.653365][T29462] shmem 0 [ 442.656348][T29462] mapped_file 0 [ 442.659814][T29462] dirty 0 [ 442.662755][T29462] writeback 0 [ 442.666121][T29462] workingset_refault_anon 1212 [ 442.670900][T29462] workingset_refault_file 2490 [ 442.675680][T29462] swap 700416 [ 442.679107][T29462] swapcached 4096 [ 442.682750][T29462] pgpgin 668916 [ 442.686225][T29462] pgpgout 668915 [ 442.689795][T29462] pgfault 685455 [ 442.693391][T29462] pgmajfault 202 [ 442.696969][T29462] inactive_anon 4096 [ 442.700857][T29462] active_anon 0 [ 442.704314][T29462] inactive_file 0 [ 442.707974][T29462] active_file 0 [ 442.711658][T29462] unevictable 0 [ 442.715146][T29462] hierarchical_memory_limit 314572800 [ 442.720615][T29462] hierarchical_memsw_limit 9223372036854771712 [ 442.726790][T29462] total_cache 0 [ 442.730239][T29462] total_rss 4096 [ 442.733812][T29462] total_shmem 0 [ 442.737333][T29462] total_mapped_file 0 [ 442.741390][T29462] total_dirty 0 [ 442.744865][T29462] total_writeback 0 [ 442.748703][T29462] total_workingset_refault_anon 1212 [ 442.753991][T29462] total_workingset_refault_file 2490 [ 442.759463][T29462] total_swap 700416 [ 442.763368][T29462] total_swapcached 4096 [ 442.767558][T29462] total_pgpgin 668916 [ 442.771545][T29462] total_pgpgout 668915 [ 442.775632][T29462] total_pgfault 685464 [ 442.779728][T29462] total_pgmajfault 202 [ 442.783827][T29462] total_inactive_anon 4096 [ 442.788283][T29462] total_active_anon 0 [ 442.792385][T29462] total_inactive_file 0 [ 442.796742][T29462] total_active_file 0 [ 442.800719][T29462] total_unevictable 0 [ 442.804709][T29462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.11502,pid=29461,uid=0 [ 442.819552][T29462] Memory cgroup out of memory: Killed process 29461 (syz.3.11502) total-vm:95328kB, anon-rss:616kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 442.922443][T29501] lo speed is unknown, defaulting to 1000 [ 442.976302][T29502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11516'. [ 443.023222][T29505] netlink: 280 bytes leftover after parsing attributes in process `syz.1.11517'. [ 443.063129][T29505] lo speed is unknown, defaulting to 1000 [ 443.270318][T29512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11521'. [ 443.588426][T29524] serio: Serial port ptm0 [ 443.907467][T29534] loop0: detected capacity change from 0 to 512 [ 443.914220][T29534] EXT4-fs: Ignoring removed oldalloc option [ 443.922656][T29534] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.11527: Parent and EA inode have the same ino 15 [ 443.935409][T29534] EXT4-fs (loop0): Remounting filesystem read-only [ 443.942087][T29534] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 443.952393][T29534] EXT4-fs (loop0): 1 orphan inode deleted [ 443.958629][T29534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.970828][T29534] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 443.978533][T29534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.091359][T29541] lo speed is unknown, defaulting to 1000 [ 444.131086][T29545] blktrace: Concurrent blktraces are not allowed on loop1 [ 444.313324][T29551] lo speed is unknown, defaulting to 1000 [ 444.337090][T29553] netlink: 'syz.0.11535': attribute type 4 has an invalid length. [ 444.406018][T29557] netlink: 'syz.0.11535': attribute type 4 has an invalid length. [ 444.427506][T29553] infiniband syz2: set down [ 444.447488][T27742] lo speed is unknown, defaulting to 1000 [ 444.453349][T27742] lo speed is unknown, defaulting to 1000 [ 444.457814][T29557] infiniband syz2: set active [ 444.463982][T26618] lo speed is unknown, defaulting to 1000 [ 444.469765][T26618] lo speed is unknown, defaulting to 1000 [ 444.636487][T29565] loop0: detected capacity change from 0 to 4096 [ 444.650642][T29565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.663165][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 444.663177][ T29] audit: type=1326 audit(1733693187.191:1422158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29569 comm="syz.3.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1f9dd0fed9 code=0x7ffc0000 [ 444.715646][ T29] audit: type=1326 audit(1733693187.251:1422159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc859b8e840 code=0x7ffc0000 [ 444.739778][ T29] audit: type=1326 audit(1733693187.251:1422160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc859b8ec27 code=0x7ffc0000 [ 444.763714][ T29] audit: type=1326 audit(1733693187.251:1422161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc859b8e840 code=0x7ffc0000 [ 444.787617][ T29] audit: type=1326 audit(1733693187.251:1422162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 444.811604][ T29] audit: type=1326 audit(1733693187.251:1422163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 444.835469][ T29] audit: type=1400 audit(1733693187.251:1422164): avc: denied { getopt } for pid=29567 comm="syz.2.11541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 444.855509][ T29] audit: type=1326 audit(1733693187.251:1422165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 444.879400][ T29] audit: type=1326 audit(1733693187.251:1422166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 444.903436][ T29] audit: type=1326 audit(1733693187.251:1422167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29563 comm="syz.0.11539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 445.084455][T29586] loop1: detected capacity change from 0 to 128 [ 445.121756][T29586] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.165981][T29586] ext4 filesystem being mounted at /2224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.321707][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.420361][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.342948][T29623] xt_hashlimit: size too large, truncated to 1048576 [ 446.617762][T29628] pim6reg1: entered promiscuous mode [ 446.623107][T29628] pim6reg1: entered allmulticast mode [ 446.671491][T29633] loop0: detected capacity change from 0 to 1024 [ 446.683901][T29633] EXT4-fs: Ignoring removed orlov option [ 446.689719][T29633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.736392][T29633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.748668][T29635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11560'. [ 446.862254][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.982738][T29648] loop0: detected capacity change from 0 to 2048 [ 447.048494][T29648] loop0: p1 p2 p3 [ 447.152015][T29660] lo speed is unknown, defaulting to 1000 [ 447.559837][T29675] loop1: detected capacity change from 0 to 512 [ 447.703540][T29675] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.11575: inline data xattr refers to an external xattr inode [ 447.722388][T29675] EXT4-fs (loop1): Remounting filesystem read-only [ 447.732989][T29675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.745906][T29675] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 447.755106][T29675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.941233][T29684] loop1: detected capacity change from 0 to 128 [ 447.954081][T29684] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.976351][T29684] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.004685][T29684] xt_hashlimit: size too large, truncated to 1048576 [ 448.501575][T29698] netlink: 'syz.2.11581': attribute type 4 has an invalid length. [ 449.017068][T29721] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 449.077478][T29713] lo speed is unknown, defaulting to 1000 [ 449.141424][T29730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11595'. [ 449.203926][T29734] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11596'. [ 449.243128][T29734] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11596'. [ 449.668319][ T29] kauditd_printk_skb: 1001 callbacks suppressed [ 449.668347][ T29] audit: type=1326 audit(1733693192.211:1423169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.705901][ T29] audit: type=1326 audit(1733693192.241:1423170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.729815][ T29] audit: type=1326 audit(1733693192.241:1423171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.774310][T29744] xt_hashlimit: size too large, truncated to 1048576 [ 449.786961][ T29] audit: type=1326 audit(1733693192.251:1423172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.810947][ T29] audit: type=1326 audit(1733693192.251:1423173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.834862][ T29] audit: type=1326 audit(1733693192.251:1423174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.858740][ T29] audit: type=1326 audit(1733693192.251:1423175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.882737][ T29] audit: type=1326 audit(1733693192.251:1423176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.906720][ T29] audit: type=1326 audit(1733693192.251:1423177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.930603][ T29] audit: type=1326 audit(1733693192.251:1423178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29739 comm="syz.2.11599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d0f4fed9 code=0x7ffc0000 [ 449.996111][T29747] loop1: detected capacity change from 0 to 512 [ 450.028322][T29747] EXT4-fs: Ignoring removed oldalloc option [ 450.178036][T29747] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.11598: Parent and EA inode have the same ino 15 [ 450.402019][T29747] EXT4-fs (loop1): Remounting filesystem read-only [ 450.408648][T29747] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 451.256405][T29747] EXT4-fs (loop1): 1 orphan inode deleted [ 451.271995][T29747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.324863][T29747] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 451.334367][T29747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.387631][T29764] netlink: 332 bytes leftover after parsing attributes in process `syz.5.11605'. [ 451.419751][T29766] loop0: detected capacity change from 0 to 128 [ 451.436343][T29766] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 451.469814][T29766] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 451.506603][T29768] gretap1: entered allmulticast mode [ 451.519521][T29764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.523453][T29768] bridge0: port 5(gretap1) entered blocking state [ 451.534168][T29768] bridge0: port 5(gretap1) entered disabled state [ 451.570592][T29768] gretap1: entered promiscuous mode [ 451.585947][T29768] bridge0: port 5(gretap1) entered blocking state [ 451.592429][T29768] bridge0: port 5(gretap1) entered forwarding state [ 451.603706][T29771] syz_tun: left allmulticast mode [ 451.608852][T29771] syz_tun: left promiscuous mode [ 451.614027][T29771] bridge0: port 3(syz_tun) entered disabled state [ 451.678383][T29771] team0: left allmulticast mode [ 451.683336][T29771] team_slave_0: left allmulticast mode [ 451.688936][T29771] team_slave_1: left allmulticast mode [ 451.694523][T29771] bridge0: port 4(team0) entered disabled state [ 451.708659][T29771] bridge_slave_0: left allmulticast mode [ 451.714448][T29771] bridge_slave_0: left promiscuous mode [ 451.720159][T29771] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.730042][T29771] bridge_slave_1: left allmulticast mode [ 451.735699][T29771] bridge_slave_1: left promiscuous mode [ 451.741478][T29771] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.751430][T29771] bond0: (slave bond_slave_0): Releasing backup interface [ 451.766075][T29771] bond0: (slave bond_slave_1): Releasing backup interface [ 451.775321][T29771] team_slave_0: left promiscuous mode [ 451.782112][T29776] loop0: detected capacity change from 0 to 512 [ 451.799979][T29771] team0: Port device team_slave_0 removed [ 451.816981][T29771] team_slave_1: left promiscuous mode [ 451.823410][T29776] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 451.832000][T29776] System zones: 0-2, 18-18, 34-34 [ 451.838337][T29776] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11608: bg 0: block 248: padding at end of block bitmap is not set [ 451.855463][T29771] team0: Port device team_slave_1 removed [ 451.861374][T29776] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.11608: Failed to acquire dquot type 1 [ 451.882698][T29771] gretap1: left promiscuous mode [ 451.887800][T29771] bridge0: port 5(gretap1) entered disabled state [ 451.894820][T29776] EXT4-fs (loop0): 1 truncate cleaned up [ 451.901541][T29776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.045961][T29773] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.11608'. [ 452.058691][T29776] ext4 filesystem being mounted at /2316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.153962][T29770] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.11608'. [ 452.427146][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.556001][T29797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11616'. [ 452.623320][T29804] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 452.623320][T29804] program syz.2.11619 not setting count and/or reply_len properly [ 452.648593][T29802] netlink: 'syz.5.11618': attribute type 1 has an invalid length. [ 452.653997][T29804] netlink: 'syz.2.11619': attribute type 10 has an invalid length. [ 452.666109][T29804] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.677906][T29804] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.685069][T29804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.695492][T29804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 452.775301][T29809] hsr_slave_0: left promiscuous mode [ 452.786013][T29809] hsr_slave_1: left promiscuous mode [ 452.826198][T29812] ipvlan2: entered promiscuous mode [ 453.026499][T29831] loop1: detected capacity change from 0 to 1024 [ 453.033992][T29831] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 453.044421][T29831] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 453.057067][T29831] EXT4-fs (loop1): invalid journal inode [ 453.062853][T29831] EXT4-fs (loop1): can't get journal size [ 453.071812][T29831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.122132][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.239942][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11633'. [ 453.480331][T29854] ipvlan2: entered promiscuous mode [ 453.670769][T29856] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 453.799304][T29860] loop1: detected capacity change from 0 to 256 [ 453.866301][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11643'. [ 453.949149][T29875] netlink: 'syz.0.11649': attribute type 1 has an invalid length. [ 454.679610][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 454.679624][ T29] audit: type=1326 audit(1733693197.225:1423667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc859b86ea7 code=0x7ffc0000 [ 454.709767][ T29] audit: type=1326 audit(1733693197.225:1423668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc859b2c0e9 code=0x7ffc0000 [ 454.733555][ T29] audit: type=1326 audit(1733693197.225:1423669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 454.759433][ T29] audit: type=1326 audit(1733693197.305:1423670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc859b86ea7 code=0x7ffc0000 [ 454.783293][ T29] audit: type=1326 audit(1733693197.305:1423671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc859b2c0e9 code=0x7ffc0000 [ 454.807065][ T29] audit: type=1326 audit(1733693197.305:1423672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 454.830927][ T29] audit: type=1326 audit(1733693197.305:1423673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc859b86ea7 code=0x7ffc0000 [ 454.854821][ T29] audit: type=1326 audit(1733693197.305:1423674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc859b2c0e9 code=0x7ffc0000 [ 454.878613][ T29] audit: type=1326 audit(1733693197.305:1423675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fc859b8fed9 code=0x7ffc0000 [ 454.902475][ T29] audit: type=1326 audit(1733693197.315:1423676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29878 comm="syz.0.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc859b86ea7 code=0x7ffc0000 [ 454.925349][T29920] bpf_get_probe_write_proto: 5 callbacks suppressed [ 454.925370][T29920] syz.0.11665[29920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.933086][T29920] syz.0.11665[29920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.944773][T29920] syz.0.11665[29920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.959073][T29920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.979050][T29920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.289259][T29936] pim6reg1: entered promiscuous mode [ 455.294603][T29936] pim6reg1: entered allmulticast mode [ 455.765910][T29938] lo speed is unknown, defaulting to 1000 [ 456.338529][T29971] loop1: detected capacity change from 0 to 128 [ 456.347891][T29969] loop0: detected capacity change from 0 to 512 [ 456.368919][T29971] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.387458][T29971] ext4 filesystem being mounted at /2252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.398529][T29969] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.11683: corrupted in-inode xattr: invalid ea_ino [ 456.438919][T29971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11684'. [ 456.449695][T29969] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.11683: couldn't read orphan inode 15 (err -117) [ 456.465483][T29969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.479802][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.514086][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.556722][T29983] loop1: detected capacity change from 0 to 164 [ 456.565154][T29985] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 456.565888][T29983] Unable to read rock-ridge attributes [ 456.581212][T29983] Unable to read rock-ridge attributes [ 456.613666][T29983] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 456.777527][T29999] loop1: detected capacity change from 0 to 512 [ 456.784342][T29999] EXT4-fs: Ignoring removed bh option [ 456.791266][T29999] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 456.800611][T29999] EXT4-fs (loop1): invalid journal inode [ 456.807285][T29999] EXT4-fs (loop1): can't get journal size [ 456.825373][T29999] EXT4-fs (loop1): 1 truncate cleaned up [ 456.831554][T29999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.913476][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.224021][T30008] loop1: detected capacity change from 0 to 2048 [ 457.286377][T30008] loop1: p1 < > p3 < > p4 < > [ 457.291173][T30008] loop1: partition table partially beyond EOD, truncated [ 457.305008][T30008] loop1: p3 start 4284289 is beyond EOD, truncated [ 457.431075][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11707'. [ 457.465713][T30037] loop0: detected capacity change from 0 to 512 [ 457.477187][T30037] EXT4-fs: Ignoring removed bh option [ 457.483621][T30037] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 457.496527][T30037] EXT4-fs (loop0): invalid journal inode [ 457.503519][T30037] EXT4-fs (loop0): can't get journal size [ 457.524580][T30037] EXT4-fs (loop0): 1 truncate cleaned up [ 457.531624][T30037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.593431][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.776022][T30055] syz.0.11715[30055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.776093][T30055] syz.0.11715[30055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.799921][T30055] syz.0.11715[30055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.974213][T30076] loop0: detected capacity change from 0 to 512 [ 457.989373][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11720'. [ 458.002848][T30074] loop1: detected capacity change from 0 to 2048 [ 458.017008][T30074] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 458.066593][T30076] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 458.074540][T30076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 458.082631][T30076] System zones: 0-1, 15-15, 18-18, 34-34 [ 458.088448][T30076] EXT4-fs (loop0): orphan cleanup on readonly fs [ 458.094956][T30076] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 458.109552][T30076] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 458.126601][T30076] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.11722: bad orphan inode 16 [ 458.141722][T30076] ext4_test_bit(bit=15, block=18) = 1 [ 458.147196][T30076] is_bad_inode(inode)=0 [ 458.151366][T30076] NEXT_ORPHAN(inode)=0 [ 458.155515][T30076] max_ino=32 [ 458.158747][T30076] i_nlink=2 [ 458.163631][T30076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.221433][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.264798][T30013] syz.3.11699 (30013) used greatest stack depth: 6088 bytes left [ 458.349194][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11734'. [ 458.387159][T30112] loop0: detected capacity change from 0 to 512 [ 458.395424][T30112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 458.407634][T30114] syz.2.11737[30114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.407730][T30114] syz.2.11737[30114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.419894][T30114] syz.2.11737[30114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.447238][T30112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.472243][T30112] ext4 filesystem being mounted at /2338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.540173][T30114] lo speed is unknown, defaulting to 1000 [ 458.602918][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.728600][ T24] IPVS: starting estimator thread 0... [ 458.730701][T30120] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.840848][T30122] IPVS: using max 2688 ests per chain, 134400 per kthread [ 458.865108][T30132] loop0: detected capacity change from 0 to 1024 [ 458.882255][T30132] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 458.949873][T30132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.145247][T30145] netlink: 'syz.5.11746': attribute type 3 has an invalid length. [ 459.247307][T30147] ALSA: seq fatal error: cannot create timer (-22) [ 459.362586][T30150] siw: device registration error -23 [ 459.564706][T30157] syzkaller0: entered promiscuous mode [ 459.570357][T30157] syzkaller0: entered allmulticast mode [ 459.743881][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 459.743897][ T29] audit: type=1400 audit(1733693202.285:1424002): avc: denied { shutdown } for pid=30160 comm="syz.3.11752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.782455][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.808154][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11753'. [ 459.888053][ T29] audit: type=1400 audit(1733693202.435:1424003): avc: denied { write } for pid=30168 comm="syz.0.11756" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 459.911817][ T29] audit: type=1400 audit(1733693202.435:1424004): avc: denied { open } for pid=30168 comm="syz.0.11756" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 459.955879][ T29] audit: type=1400 audit(1733693202.485:1424005): avc: denied { setattr } for pid=30164 comm="syz.3.11755" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 460.150844][ T29] audit: type=1400 audit(1733693202.695:1424006): avc: denied { execute } for pid=30178 comm="syz.0.11759" name="file1" dev="tmpfs" ino=12305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.192150][ T29] audit: type=1400 audit(1733693202.695:1424007): avc: denied { execute_no_trans } for pid=30178 comm="syz.0.11759" path="/2344/file1" dev="tmpfs" ino=12305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.216351][ T29] audit: type=1400 audit(1733693202.725:1424008): avc: denied { create } for pid=30181 comm="syz.1.11760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 460.236376][ T29] audit: type=1400 audit(1733693202.725:1424009): avc: denied { bind } for pid=30181 comm="syz.1.11760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 460.256095][ T29] audit: type=1400 audit(1733693202.725:1424010): avc: denied { write } for pid=30181 comm="syz.1.11760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 460.302663][ T29] audit: type=1400 audit(1733693202.835:1424011): avc: denied { read write } for pid=30185 comm="syz.1.11762" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 460.427395][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11768'. [ 460.466829][T30201] gretap1: entered allmulticast mode [ 460.502678][T30197] loop0: detected capacity change from 0 to 8192 [ 460.527804][T30197] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 460.555873][T30207] : (slave bond_slave_0): Releasing backup interface [ 460.566913][T30207] bond_slave_0: left promiscuous mode [ 460.600370][T30207] : (slave bond_slave_1): Releasing backup interface [ 460.619875][T30207] bond_slave_1: left promiscuous mode [ 460.656147][T30211] FAT-fs (loop0): error, clusters badly computed (861 != 18) [ 460.656248][T30197] FAT-fs (loop0): error, clusters badly computed (957 != 956) [ 460.663580][T30211] FAT-fs (loop0): Filesystem has been set read-only [ 460.676227][T30197] FAT-fs (loop0): error, clusters badly computed (958 != 957) [ 460.687085][T30207] team_slave_0: left promiscuous mode [ 460.714807][T30207] team0: Port device team_slave_0 removed [ 460.719127][T30197] FAT-fs (loop0): error, clusters badly computed (959 != 958) [ 460.737905][T30211] FAT-fs (loop0): error, clusters badly computed (865 != 19) [ 460.746143][T30207] team_slave_1: left promiscuous mode [ 460.755958][T30197] FAT-fs (loop0): error, clusters badly computed (961 != 959) [ 460.771528][T30207] team0: Port device team_slave_1 removed [ 460.774413][T30197] FAT-fs (loop0): error, clusters badly computed (962 != 960) [ 460.788548][T30211] FAT-fs (loop0): error, clusters badly computed (868 != 20) [ 460.817927][T30197] FAT-fs (loop0): error, clusters badly computed (964 != 961) [ 460.828543][T30197] FAT-fs (loop0): error, clusters badly computed (965 != 962) [ 460.830125][T30211] FAT-fs (loop0): error, clusters badly computed (871 != 21) [ 460.844015][T30207] : (slave geneve1): Releasing backup interface [ 460.854502][T30197] FAT-fs (loop0): error, clusters badly computed (967 != 963) [ 460.862609][T30211] FAT-fs (loop0): error, clusters badly computed (873 != 22) [ 460.882778][T30207] syz_tun: left promiscuous mode [ 460.888535][T30197] FAT-fs (loop0): error, clusters badly computed (969 != 964) [ 460.890748][T30207] team0: Port device vlan0 removed [ 460.919113][T30211] FAT-fs (loop0): error, clusters badly computed (875 != 23) [ 460.946038][T30197] FAT-fs (loop0): error, clusters badly computed (971 != 965) [ 460.983407][T30197] FAT-fs (loop0): error, clusters badly computed (972 != 966) [ 461.001268][T30197] FAT-fs (loop0): error, clusters badly computed (973 != 967) [ 461.013694][T30197] FAT-fs (loop0): error, clusters badly computed (974 != 968) [ 461.023878][T30197] FAT-fs (loop0): error, clusters badly computed (975 != 969) [ 461.033279][T30197] FAT-fs (loop0): error, clusters badly computed (976 != 970) [ 461.043992][T30197] FAT-fs (loop0): error, clusters badly computed (977 != 971) [ 461.053521][T30197] FAT-fs (loop0): error, clusters badly computed (978 != 972) [ 461.082772][T30197] FAT-fs (loop0): error, clusters badly computed (979 != 973) [ 461.104859][T30197] FAT-fs (loop0): error, clusters badly computed (980 != 974) [ 461.123717][T30197] FAT-fs (loop0): error, clusters badly computed (981 != 975) [ 461.134114][T30197] FAT-fs (loop0): error, clusters badly computed (982 != 976) [ 461.144782][T30197] FAT-fs (loop0): error, clusters badly computed (983 != 977) [ 461.154781][T30197] FAT-fs (loop0): error, clusters badly computed (984 != 978) [ 461.165085][T30197] FAT-fs (loop0): error, clusters badly computed (985 != 979) [ 461.174503][T30197] FAT-fs (loop0): error, clusters badly computed (986 != 980) [ 461.192726][T30197] FAT-fs (loop0): error, clusters badly computed (987 != 981) [ 461.214367][T30197] FAT-fs (loop0): error, clusters badly computed (988 != 982) [ 461.242402][T30197] FAT-fs (loop0): error, clusters badly computed (989 != 983) [ 461.289437][T30197] FAT-fs (loop0): error, clusters badly computed (990 != 984) [ 461.305613][T30197] FAT-fs (loop0): error, clusters badly computed (991 != 985) [ 461.320647][T30197] FAT-fs (loop0): error, clusters badly computed (992 != 986) [ 461.349351][T30197] FAT-fs (loop0): error, clusters badly computed (993 != 987) [ 461.367738][T30197] FAT-fs (loop0): error, clusters badly computed (994 != 988) [ 461.384504][T30197] FAT-fs (loop0): error, clusters badly computed (995 != 989) [ 461.400307][T30197] FAT-fs (loop0): error, clusters badly computed (996 != 990) [ 461.423196][T30197] FAT-fs (loop0): error, clusters badly computed (997 != 991) [ 461.651999][T30274] syzkaller0: entered promiscuous mode [ 461.657624][T30274] syzkaller0: entered allmulticast mode [ 462.322036][T30300] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 462.386150][T30301] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 462.541946][T30307] loop0: detected capacity change from 0 to 512 [ 462.568745][T30307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.599750][T30307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.649347][T30307] ext4 filesystem being mounted at /2350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.744870][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.822739][T30315] loop1: detected capacity change from 0 to 8192 [ 462.860392][T30315] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.949160][T30319] FAT-fs (loop1): error, clusters badly computed (903 != 18) [ 462.956641][T30319] FAT-fs (loop1): Filesystem has been set read-only [ 462.967063][T30315] FAT-fs (loop1): error, clusters badly computed (999 != 998) [ 462.981939][T30303] ================================================================== [ 462.990047][T30303] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 462.997876][T30303] [ 463.000198][T30303] write to 0xffffea0004a67e98 of 8 bytes by task 30255 on cpu 0: [ 463.007908][T30303] __filemap_remove_folio+0x1ac/0x2c0 [ 463.013288][T30303] filemap_remove_folio+0x6b/0x1f0 [ 463.018409][T30303] truncate_inode_folio+0x42/0x50 [ 463.023462][T30303] shmem_undo_range+0x25b/0xa70 [ 463.028309][T30303] shmem_evict_inode+0x14d/0x530 [ 463.033275][T30303] evict+0x2f0/0x570 [ 463.037173][T30303] iput+0x42a/0x5b0 [ 463.040992][T30303] dentry_unlink_inode+0x24f/0x260 [ 463.046105][T30303] __dentry_kill+0x18b/0x4c0 [ 463.050692][T30303] dput+0x5c/0xd0 [ 463.054362][T30303] __fput+0x3fb/0x6d0 [ 463.058357][T30303] ____fput+0x1c/0x30 [ 463.062351][T30303] task_work_run+0x13a/0x1a0 [ 463.067046][T30303] do_exit+0x5dd/0x17f0 [ 463.071202][T30303] do_group_exit+0x102/0x150 [ 463.075807][T30303] get_signal+0xeb9/0x1000 [ 463.080228][T30303] arch_do_signal_or_restart+0x95/0x4b0 [ 463.085784][T30303] irqentry_exit_to_user_mode+0xa7/0x120 [ 463.091437][T30303] irqentry_exit+0x12/0x50 [ 463.095860][T30303] asm_exc_page_fault+0x26/0x30 [ 463.100737][T30303] [ 463.103054][T30303] read to 0xffffea0004a67e98 of 8 bytes by task 30303 on cpu 1: [ 463.110678][T30303] folio_mapping+0xa0/0x120 [ 463.115191][T30303] evict_folios+0x83f/0x3240 [ 463.119789][T30303] try_to_shrink_lruvec+0x5d2/0x750 [ 463.124994][T30303] shrink_lruvec+0x22d/0x1840 [ 463.129690][T30303] shrink_node+0x603/0x1d80 [ 463.134200][T30303] do_try_to_free_pages+0x3c6/0xc50 [ 463.139402][T30303] try_to_free_mem_cgroup_pages+0x1e3/0x490 [ 463.145303][T30303] try_charge_memcg+0x2bc/0x7f0 [ 463.150165][T30303] obj_cgroup_charge_pages+0xbd/0x1a0 [ 463.155557][T30303] __memcg_kmem_charge_page+0x9d/0x170 [ 463.161210][T30303] __alloc_pages_noprof+0x1bc/0x340 [ 463.166658][T30303] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 463.172036][T30303] alloc_pages_noprof+0xe1/0x100 [ 463.177007][T30303] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 463.182850][T30303] __kvmalloc_node_noprof+0x121/0x170 [ 463.188239][T30303] ip_set_alloc+0x1f/0x30 [ 463.192579][T30303] hash_netiface_create+0x273/0x730 [ 463.197796][T30303] ip_set_create+0x359/0x8a0 [ 463.202401][T30303] nfnetlink_rcv_msg+0x4a9/0x570 [ 463.207350][T30303] netlink_rcv_skb+0x12c/0x230 [ 463.212114][T30303] nfnetlink_rcv+0x16c/0x15d0 [ 463.216802][T30303] netlink_unicast+0x599/0x670 [ 463.221571][T30303] netlink_sendmsg+0x5cc/0x6e0 [ 463.226352][T30303] __sock_sendmsg+0x140/0x180 [ 463.231041][T30303] ____sys_sendmsg+0x312/0x410 [ 463.235808][T30303] __sys_sendmsg+0x19d/0x230 [ 463.240397][T30303] __x64_sys_sendmsg+0x46/0x50 [ 463.245177][T30303] x64_sys_call+0x2734/0x2dc0 [ 463.249851][T30303] do_syscall_64+0xc9/0x1c0 [ 463.254356][T30303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.260276][T30303] [ 463.262590][T30303] value changed: 0xffff888118699f00 -> 0x0000000000000000 [ 463.269687][T30303] [ 463.272008][T30303] Reported by Kernel Concurrency Sanitizer on: [ 463.278146][T30303] CPU: 1 UID: 0 PID: 30303 Comm: syz.5.11791 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 463.289008][T30303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.299061][T30303] ================================================================== [ 463.324503][T30315] FAT-fs (loop1): error, clusters badly computed (1001 != 999) [ 463.340291][T30319] FAT-fs (loop1): error, clusters badly computed (905 != 19) [ 463.387945][T30315] FAT-fs (loop1): error, clusters badly computed (1002 != 1000) [ 463.397501][T30319] FAT-fs (loop1): error, clusters badly computed (908 != 20) [ 463.407106][T30315] FAT-fs (loop1): error, clusters badly computed (1004 != 1001) [ 463.419877][T30319] FAT-fs (loop1): error, clusters badly computed (910 != 21) [ 463.438179][T30315] FAT-fs (loop1): error, clusters badly computed (1006 != 1002) [ 463.454659][T30319] FAT-fs (loop1): error, clusters badly computed (912 != 22) [ 463.478052][T30315] FAT-fs (loop1): error, clusters badly computed (1008 != 1003) [ 463.487714][T30319] FAT-fs (loop1): error, clusters badly computed (914 != 23) [ 463.505405][T30315] FAT-fs (loop1): error, clusters badly computed (1010 != 1004) [ 463.535247][T30315] FAT-fs (loop1): error, clusters badly computed (1011 != 1005) [ 463.557993][T30315] FAT-fs (loop1): error, clusters badly computed (1012 != 1006) [ 463.589370][T30315] FAT-fs (loop1): error, clusters badly computed (1013 != 1007) [ 463.622225][T30315] FAT-fs (loop1): error, clusters badly computed (1014 != 1008) [ 463.642620][T30315] FAT-fs (loop1): error, clusters badly computed (1015 != 1009) [ 463.659746][T30315] FAT-fs (loop1): error, clusters badly computed (1016 != 1010) [ 463.676609][T30315] FAT-fs (loop1): error, clusters badly computed (1017 != 1011) [ 463.691160][T30315] FAT-fs (loop1): error, clusters badly computed (1018 != 1012) [ 463.707478][T30315] FAT-fs (loop1): error, clusters badly computed (1019 != 1013) [ 463.723534][T30315] FAT-fs (loop1): error, clusters badly computed (1020 != 1014) [ 463.740777][T30315] FAT-fs (loop1): error, clusters badly computed (1021 != 1015)