last executing test programs: 2m17.60164513s ago: executing program 32 (id=366): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2m4.782885251s ago: executing program 33 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_setup(0x4, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) eventfd2(0x9, 0x80800) 2m0.779072136s ago: executing program 34 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) close(r2) 1m51.493840531s ago: executing program 5 (id=973): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m51.17478736s ago: executing program 5 (id=986): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4000000000000000, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 1m51.09318445s ago: executing program 5 (id=989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000b40)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05[\x86\x91\x164\xd3/]\xe6O\x17@d`+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2fo\x7f\x92G\x0e.\xce\x01\x00\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6/`\xab>\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x03\v\xf4@\x84\x1d\xc8&^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xa5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:^E^>a\xd8\xdcJu\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+b\xb5\xa63\xc4\x1bx\xfd< \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2V3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xcd9\xacNW:\xcauJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\xe1\xab\xb7\xe0\x95\xa0U\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xd2\x00\x00\x00\x00&\x82\xe9:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9J\xeefu\x04\xfb\x9b\xc1\xfa\xff\x03\x00\x00\\\xfd\x00NX\x1e\x97\x911m\xa3\x15\x8e_\xda\x8f\x06\x8fA^\xc2\x05\xf4\x8b\x02[\xa4jR\x96%&\xdf\xf9c\x8a4\x00\xa4tA\n\xfb\x7f\xf1S\xfd<\v\x18\xeb\xfb\xd6\xcb:\xbb\x04\x00\x00\x00\vcU\x00\x1e\xa0\x8b\xae\xe3M\xa6l\x15\x9c\x96\xf6\xbeXU\x17,\x94\x97\f\xfbl\xfc5\xaf\x91\x9cH\'\x95g\xb9P\xb8\"R\xcc\x1e\x02\x96\x83\xf87\xfb\x8dG@\x12\"\xb8\xeb\xa2\x1fN~\xd6\tr\xf5*\x18\x9b\x92VF9,$\xf1\xcb2@\xdc\xafLP-\xc4W\xc0\ro\xfc\xff\n\xac\xecyq.\xd0)\x8f\xb1\x8ef\x9a\x15\x94\xe8\xac\xd41i\xd9\xa7\xcc\x90DK\x98\xdcBo\x01\x8f\xdf\n\x1a\vT\x05}\xf4\x9b\x83\xa9u\x84\xa7`bW\b\x8c\xc82\a\n:\x9a$\x19\xaa\v\xe6\f1\xf8\x1ed\x15\xf6t\x1c\xf2\x95+u\xb5\x1c\x95\x8d\xdd\xf3\x9c={\t*\x0e\xa7k\xbb\xc3\xf4!\n/\xb7\xed\x80\x18\xc4\x04\xa9_[\x14\x13C\xd3\xd9i\xc0\xdc\xb3\xecJ\xf7/\"\xfb\xe8\xb6\xb7\x1f(\xe5O\x9f\xae}(xG\xe4m\x15\x14`\x0e\xba\x02\x00\x00\x00\x055\x96F\x833!:\xc0wg\x1e\x89\xd2o\xad-\xde\a\x91\x19\x02`\x9c.Pm\x12\xc41e=CF\'\n(\xd7\x9a\x0f\xfdD\xbb\xc8\x0f\xf9\xac\\\xf9\xf9\xd2H\x1bg\xbfH\xbb>\xa5\x18\xd3T\xa4\xcc(\x1662\b\xc3?\x1al\xc9%\x87kp\xef\xda\\[\xb7:D\xefV\xea-\x14zQ\xa1\x00\xbd\xb8\xdd5\x109\x94\xa5\x1f$\x05\x8bb3(\xf4J1\x91\x16T\xf7\x03Eu\x18C\xf09\v.\xac\x8eZ\xaar%\x9d\x00\xa0\xa9T)\xa9\xd2\xe2\x01AJ\xc7\xd6i\xbe\f\x02\x00\xb6:\xe3;\'P\"\xab\xec\r\x86\xfa7>\x9dIP\xa0i\xc4\xf8`\xf1\x06\x8e_c\xb0\x96\fA\x8c\xa3\xa6\xbdz\xee.\x86\xaf\xda(\x8a\x9d\x87\x1e(D\x85\xc6\xa9\x16\xd72]`T\xa0\x8ec\xb3i\x9e\a<\xbfO\x11/\xe3\xd6/\x98zf0\xa2\b\xd3\xfd\xe4\r\xde\xf3\x99f\'\xea\xe0\xbc\xe5\xd7\xf4\x95\xd2X\xf6f\x94)\x85\xc0\xaf\x06\xda\xf4', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r2, 0x0) 1m51.00756906s ago: executing program 5 (id=993): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 1m50.931351639s ago: executing program 5 (id=996): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={0x20, 0x87, 0x2, 0x200}, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 1m50.224096886s ago: executing program 5 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0xfffffffffffffe3e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m50.223882186s ago: executing program 35 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0xfffffffffffffe3e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 59.678630615s ago: executing program 8 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r2) 59.653445415s ago: executing program 8 (id=2834): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) acct(0x0) 59.591849485s ago: executing program 8 (id=2835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 58.712648461s ago: executing program 8 (id=2853): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 58.677480292s ago: executing program 8 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x22020600) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="600000000206050000000000000000000000810012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840", @ANYRES16, @ANYRESOCT], 0x60}}, 0x0) 58.479138301s ago: executing program 8 (id=2864): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)='\x00!', 0x2}], 0x1, 0x1000000, 0x0) 58.478721691s ago: executing program 36 (id=2864): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)='\x00!', 0x2}], 0x1, 0x1000000, 0x0) 57.425300686s ago: executing program 6 (id=2904): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 57.377202086s ago: executing program 6 (id=2906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 57.318527226s ago: executing program 6 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 57.214233126s ago: executing program 6 (id=2912): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 57.100561076s ago: executing program 6 (id=2915): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 56.845210334s ago: executing program 6 (id=2922): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 56.819740804s ago: executing program 37 (id=2922): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 43.366562304s ago: executing program 7 (id=3323): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 43.325716203s ago: executing program 7 (id=3324): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 43.300283913s ago: executing program 7 (id=3326): socket$inet(0x2, 0x3, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="48ed16350a46", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x4, 0x8, 0x0, @rand_addr=0x64010100, @remote}}}}}, 0x0) 43.282869663s ago: executing program 7 (id=3327): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 43.261827573s ago: executing program 7 (id=3328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b0000000000020013"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 43.019890232s ago: executing program 7 (id=3330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local, 0x1a, r4}) 43.019601422s ago: executing program 38 (id=3330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local, 0x1a, r4}) 11.151939482s ago: executing program 3 (id=4378): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 10.306544519s ago: executing program 3 (id=4397): r0 = syz_io_uring_setup(0x16bf, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x101}, 0x18) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10.255849898s ago: executing program 3 (id=4399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 10.139963468s ago: executing program 3 (id=4400): open(0x0, 0x10103e, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) umount2(&(0x7f0000000800)='./file0/file0\x00', 0x1) 10.017783097s ago: executing program 3 (id=4403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 9.827945657s ago: executing program 3 (id=4405): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x30f, 0x0, 0x0, 0xe, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0xf7, 0x0, 0x0, 0xc, @local}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 9.820595417s ago: executing program 39 (id=4405): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x30f, 0x0, 0x0, 0xe, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0xf7, 0x0, 0x0, 0xc, @local}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 1.259502854s ago: executing program 2 (id=4667): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 1.223547914s ago: executing program 2 (id=4670): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 1.064339203s ago: executing program 0 (id=4676): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in=@rand_addr=0xffffffff, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 998.653103ms ago: executing program 0 (id=4677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200012, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32], 0x1, 0x52b, &(0x7f0000001600)="$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") write$selinux_load(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) 998.240793ms ago: executing program 4 (id=4678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 997.611033ms ago: executing program 2 (id=4679): syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x4a, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x8000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 881.145493ms ago: executing program 4 (id=4680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x400000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 879.533763ms ago: executing program 1 (id=4681): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f00000006c0)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@nomblk_io_submit}, {@grpjquota}, {@grpid}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001b00)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f0000001ec0)=ANY=[@ANYRES16=r5, @ANYRES64=r4, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, &(0x7f0000000000)) 823.277252ms ago: executing program 2 (id=4682): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, '['}]}, 0x20}, 0x1, 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 822.879993ms ago: executing program 0 (id=4683): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 819.612042ms ago: executing program 2 (id=4684): execve(0x0, &(0x7f0000000400)={[&(0x7f0000000280)='@\'.[-\x00']}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x0, 0x11dc, &(0x7f0000001280)="$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") chdir(&(0x7f0000000240)='./file0\x00') creat(0x0, 0x44) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 758.039763ms ago: executing program 4 (id=4685): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x0) 684.637512ms ago: executing program 4 (id=4687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 647.967852ms ago: executing program 9 (id=4688): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = getpid() setreuid(0xee00, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) 581.185801ms ago: executing program 9 (id=4689): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7f}, 0x18) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 580.450011ms ago: executing program 2 (id=4690): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x20, &(0x7f0000001140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 579.874952ms ago: executing program 4 (id=4691): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 579.665602ms ago: executing program 0 (id=4700): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 526.338972ms ago: executing program 4 (id=4692): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 525.899691ms ago: executing program 0 (id=4694): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x900, 0x2a40}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) fallocate(r1, 0x3, 0x800000, 0x8000c62) 525.614072ms ago: executing program 1 (id=4695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 525.480192ms ago: executing program 9 (id=4704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 476.553611ms ago: executing program 1 (id=4696): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000880)='ext4_mb_discard_preallocations\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000180)={[{@nouid32}, {@dioread_lock}, {@abort}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$eJzs3U9vVF8ZAOD3Tju0vzJQUBZqVBBRNITpH6AhuBAWagghMRJXLqC2Q9N0hmk6LdDKoizdGyVxpR/BnQsTVi7cudOdG1yYoBINNXEx5t4Z2qHt0FHajp15nuTOvefcYd5zZjjnzD2X4QTQt85FxHpEHIuBLD3azE+aW9xsbOnz3r55NrPx5tlMEvX6vb8l2fk0L1r+TOp48zWHI+J734n4YbIzbm11bWG6XC4tNdNjy5XFsdrq2uX5XDNncmpiavz6lWuT+1bXs5Vfvf72/J3v/+bXX3j1+/Wv/ygtVuHHJ7JzrfXYT42q56PQkjcYEXcOIliXDGZ/fziK0tb2qYg4HxEPYjQGsk8TAOhl9fpo1Edb0wBAr0uv/wuR5IrNuYBC5HLFYmMO70yM5MrV2vKl0erKo9nI5rBORT73cL5cGm/OFZ6KfJKmJ7LjrfTktvSViDgdET8Z+iRLF2eq5dlufvEBgD52fNv4/8+hxvgPAPS44W4XAAA4dMZ/AOg/xn8A6D//xfjv14EA0CNc/wNA/zH+A0D/2XP8f94m390AADiKvnv3brrVN5r///Xs49WVbxQeX54t1RaKlZWZ4kx1abE4V63OlUvFmXp9r9crV6uLE1c3k7XVtfuV6sqj5fvzlem50v1S/oDrAwDs7fTZl39MImL9xifZFi1rORirobflul0AoGsGul0AoGvcwYP+1cE1vmkA6HG7LNH7nrb/ROiFxV/hqLr4WfP/0K/M/0P/+t/m/7+57+UADp/5f+hf9XpizX8A6DPm+IGPuv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfaqQbUmumK0Fvp4+5orFiBMRcSryycP5cmk8Ik5GxB+G8kNpeqLbhQYAPlLuL0lz/a+LoxcK288eS/41lO0j4snP7/3s6fTy8tJEmv/3zfzlF838yWPdqAAA0OrmzqzGON3ct1zIv33zbObddphFfH2rsbhoGnejuTXODMZgth+OfESM/CNpphvS7ysD+xB//XlEfGar/k9bIhSyOZDGyqfb46exTxxA/K33f3v83Hvxc9m5dJ/P3otPdxRtaB9KDL3j5a1GP9lse2kTa7a/XJzL9ru3/+Gsh/p47/q/jR39X26z/xvYET/J2vy5zfSHS/L66m9v78isjzbOPY/43OBu8ZPN+Emb/vdCh3X80+e/eL7dufovIi7G7vEbKlk3O7ZcWRyrra5dnq9Mz5XmSo8mJ6cmpsavX7k2OZbNUTcef7dbjL/euHSyXfy0/iNt4g/vUf+vdFj/X/77wQ++9IH4X/vy7p//mQ/ET8fEr3YYf3rkZtvlu9P4s23qv9fnf6nD+K/+vDbb4VMBgENQW11bmC6XS0t7HKTfNfd6joOjeRDr2W2cbhej84Nv3f7pk/+DYhzswbsW2q1idLdfAg7eVqPvdkkAAAAAAAAAAAAAAIB2aqtrC0NxsD8n6nYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6F3/CQAA//9rHMmx") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) 258.011801ms ago: executing program 9 (id=4697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0), 0x0) 257.68617ms ago: executing program 1 (id=4698): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000202030000000000fffff000100000000900020773797a320000000005000400"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd0000010000080001"], 0x30}}, 0x0) 137.76645ms ago: executing program 1 (id=4699): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 136.95251ms ago: executing program 9 (id=4711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 136.05757ms ago: executing program 0 (id=4712): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 3.702019ms ago: executing program 1 (id=4701): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 0s ago: executing program 9 (id=4714): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioperm(0x8, 0x9, 0x5a) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) kernel console output (not intermixed with test programs): ite_user helper that may corrupt user memory! [ 134.433189][T12211] program syz.9.3158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.502373][T12219] netlink: 'syz.7.3164': attribute type 4 has an invalid length. [ 134.521646][T12221] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.522486][T12219] netlink: 'syz.7.3164': attribute type 4 has an invalid length. [ 134.583474][T12225] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3165'. [ 134.733966][T12253] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.763696][T12252] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3177'. [ 134.814189][T12260] syz.3.3183[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.820809][T12263] loop7: detected capacity change from 0 to 512 [ 134.922985][T12276] syzkaller0: entered allmulticast mode [ 134.946579][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3192'. [ 135.021168][T12292] SELinux: policydb version 0 does not match my version range 15-33 [ 135.035575][T12292] SELinux: failed to load policy [ 135.082233][T12300] SELinux: failed to load policy [ 135.443954][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 135.648678][T12363] netlink: 'syz.3.3228': attribute type 4 has an invalid length. [ 135.659443][T12363] netlink: 'syz.3.3228': attribute type 4 has an invalid length. [ 136.325600][T12442] loop7: detected capacity change from 0 to 8192 [ 136.416454][T12448] loop9: detected capacity change from 0 to 128 [ 136.440855][T12448] EXT4-fs mount: 44 callbacks suppressed [ 136.440876][T12448] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.472843][T12448] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.543098][T11440] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.553785][T12463] netlink: 'syz.2.3269': attribute type 1 has an invalid length. [ 136.561770][T12463] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3269'. [ 136.808600][T12484] netlink: 'syz.2.3277': attribute type 27 has an invalid length. [ 136.920888][T12484] bond0: (slave bond_slave_0): Releasing backup interface [ 137.204766][T12503] dummy0: entered promiscuous mode [ 137.242176][T12503] dummy0: left promiscuous mode [ 137.294870][T12514] bridge0: port 3(vlan0) entered blocking state [ 137.301352][T12514] bridge0: port 3(vlan0) entered disabled state [ 137.307849][T12514] vlan0: entered allmulticast mode [ 137.318307][T12514] vlan0: left allmulticast mode [ 137.366222][T12520] Falling back ldisc for ttyS3. [ 137.462111][T12534] kernel read not supported for file /policy (pid: 12534 comm: syz.0.3301) [ 137.499823][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 137.499851][ T29] audit: type=1400 audit(1735951485.347:3916): avc: denied { unmount } for pid=11924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.544868][T12547] hub 9-0:1.0: USB hub found [ 137.550846][ T29] audit: type=1400 audit(1735951485.387:3917): avc: denied { create } for pid=12544 comm="syz.7.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.556692][T12547] hub 9-0:1.0: 8 ports detected [ 137.570433][ T29] audit: type=1400 audit(1735951485.387:3918): avc: denied { bind } for pid=12544 comm="syz.7.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.594664][ T29] audit: type=1400 audit(1735951485.387:3919): avc: denied { setopt } for pid=12544 comm="syz.7.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.614249][ T29] audit: type=1400 audit(1735951485.387:3920): avc: denied { listen } for pid=12544 comm="syz.7.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.647022][T12554] loop7: detected capacity change from 0 to 128 [ 137.665942][T12554] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.690555][T12550] loop9: detected capacity change from 0 to 512 [ 137.704521][T12554] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.738259][T12550] EXT4-fs error (device loop9): ext4_get_journal_inode:5809: inode #32: comm syz.9.3308: iget: special inode unallocated [ 137.757436][T12550] EXT4-fs (loop9): Remounting filesystem read-only [ 137.764234][T12550] EXT4-fs (loop9): no journal found [ 137.769564][T12550] EXT4-fs (loop9): can't get journal size [ 137.787429][T12550] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 137.816678][T11954] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.831065][T12550] EXT4-fs (loop9): failed to initialize system zone (-117) [ 137.838592][T12550] EXT4-fs (loop9): mount failed [ 137.849383][ T29] audit: type=1400 audit(1735951485.697:3921): avc: denied { mount } for pid=12549 comm="syz.9.3308" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.877265][ T29] audit: type=1400 audit(1735951485.727:3922): avc: denied { unmount } for pid=11440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.911421][ T29] audit: type=1400 audit(1735951485.757:3923): avc: denied { getopt } for pid=12564 comm="syz.7.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 137.954876][ T29] audit: type=1400 audit(1735951485.787:3924): avc: denied { connect } for pid=12567 comm="syz.7.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.977972][ T29] audit: type=1400 audit(1735951485.837:3925): avc: denied { create } for pid=12566 comm="syz.9.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.050482][T12582] loop2: detected capacity change from 0 to 1024 [ 138.050527][T12583] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3323'. [ 138.071734][T12579] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3321'. [ 138.125133][T12582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.359594][T12594] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 138.390809][T12594] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 138.403156][T12594] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.403156][T12594] [ 138.412848][T12594] EXT4-fs (loop2): Total free blocks count 0 [ 138.418854][T12594] EXT4-fs (loop2): Free/Dirty block details [ 138.424818][T12594] EXT4-fs (loop2): free_blocks=68451041280 [ 138.430696][T12594] EXT4-fs (loop2): dirty_blocks=16432 [ 138.436304][T12594] EXT4-fs (loop2): Block reservation details [ 138.442336][T12594] EXT4-fs (loop2): i_reserved_data_blocks=1027 [ 138.472247][ T7519] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 138.616111][T12599] chnl_net:caif_netlink_parms(): no params data found [ 138.674656][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.681831][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.689970][T12599] bridge_slave_0: entered allmulticast mode [ 138.709893][T12599] bridge_slave_0: entered promiscuous mode [ 138.722207][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.729680][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.738680][T12599] bridge_slave_1: entered allmulticast mode [ 138.745419][T12599] bridge_slave_1: entered promiscuous mode [ 138.767682][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.782823][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.806281][T12599] team0: Port device team_slave_0 added [ 138.813194][T12599] team0: Port device team_slave_1 added [ 138.830421][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.837517][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.863518][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.874954][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.882049][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.908188][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.968446][T12599] hsr_slave_0: entered promiscuous mode [ 138.982734][T12599] hsr_slave_1: entered promiscuous mode [ 138.991341][T12627] netlink: 'syz.9.3336': attribute type 27 has an invalid length. [ 138.999363][T12599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.007083][T12599] Cannot create hsr debugfs directory [ 139.019570][T12627] bond0: (slave bond_slave_0): Releasing backup interface [ 139.036969][T12629] loop2: detected capacity change from 0 to 128 [ 139.049858][T12629] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 139.081423][T12629] syz.2.3338: attempt to access beyond end of device [ 139.081423][T12629] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 139.095030][T12629] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 139.165522][ T7207] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 139.282823][T12641] bpf_get_probe_write_proto: 5 callbacks suppressed [ 139.282845][T12641] syz.3.3343[12641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.289690][T12641] syz.3.3343[12641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.303505][T12641] syz.3.3343[12641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.344171][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.373258][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.476266][T12599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.486235][T12599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.496747][T12653] netlink: 'syz.0.3350': attribute type 27 has an invalid length. [ 139.497520][T12599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.520496][T12653] bond0: (slave bond_slave_0): Releasing backup interface [ 139.532513][T12599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.579057][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.597397][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.605355][T12660] syzkaller1: entered allmulticast mode [ 139.619231][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.626383][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.639768][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.646965][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.693198][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3355'. [ 139.730774][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.747622][T12672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.837968][T12686] loop3: detected capacity change from 0 to 256 [ 139.852276][T12599] veth0_vlan: entered promiscuous mode [ 139.859082][T12686] FAT-fs (loop3): Directory bread(block 64) failed [ 139.865677][T12686] FAT-fs (loop3): Directory bread(block 65) failed [ 139.874992][T12599] veth1_vlan: entered promiscuous mode [ 139.882310][T12686] FAT-fs (loop3): Directory bread(block 66) failed [ 139.891585][T12686] FAT-fs (loop3): Directory bread(block 67) failed [ 139.899135][T12599] veth0_macvtap: entered promiscuous mode [ 139.905128][T12686] FAT-fs (loop3): Directory bread(block 68) failed [ 139.913632][T12599] veth1_macvtap: entered promiscuous mode [ 139.924062][T12686] FAT-fs (loop3): Directory bread(block 69) failed [ 139.936331][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.946944][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.956968][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.960832][T12686] FAT-fs (loop3): Directory bread(block 70) failed [ 139.967684][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.975343][T12686] FAT-fs (loop3): Directory bread(block 71) failed [ 139.983818][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.983845][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.010964][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.014140][T12686] FAT-fs (loop3): Directory bread(block 72) failed [ 140.021450][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.036026][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.065572][T12686] FAT-fs (loop3): Directory bread(block 73) failed [ 140.075714][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3366'. [ 140.082809][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.095176][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.105148][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.115870][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.125940][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.136624][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.146558][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.157030][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.172724][T12686] syz.3.3361: attempt to access beyond end of device [ 140.172724][T12686] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 140.186008][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.187371][T12599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.202171][T12599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.211017][T12599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.219717][T12599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.277889][T12705] syzkaller1: entered allmulticast mode [ 140.342236][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3374'. [ 140.351357][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3374'. [ 140.450655][T12727] loop3: detected capacity change from 0 to 512 [ 140.463275][T12733] geneve2: entered promiscuous mode [ 140.475152][T12727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.515550][T12727] EXT4-fs (loop3): 1 orphan inode deleted [ 140.521499][T12727] EXT4-fs (loop3): 1 truncate cleaned up [ 140.531563][T12727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.558173][T12732] loop1: detected capacity change from 0 to 8192 [ 140.576315][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.606901][T12747] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 140.622410][T12743] loop1: p1 p2 p3 [ 140.626216][T12743] loop1: p1 size 67108864 extends beyond EOD, truncated [ 140.637412][T12743] loop1: p2 start 98631679 is beyond EOD, truncated [ 140.644151][T12743] loop1: p3 size 423702036 extends beyond EOD, truncated [ 140.655512][T12749] syzkaller1: entered allmulticast mode [ 140.673382][T12732] loop1: p1 p2 p3 [ 140.677239][T12732] loop1: p1 size 67108864 extends beyond EOD, truncated [ 140.688750][T12732] loop1: p2 start 98631679 is beyond EOD, truncated [ 140.695737][T12732] loop1: p3 size 423702036 extends beyond EOD, truncated [ 140.708951][T12752] loop3: detected capacity change from 0 to 8192 [ 140.761936][T12758] block device autoloading is deprecated and will be removed. [ 140.773542][T12758] syz.1.3393: attempt to access beyond end of device [ 140.773542][T12758] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 140.807249][T12763] loop0: detected capacity change from 0 to 1024 [ 140.838666][T12763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.864106][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3397'. [ 140.914170][T12777] netlink: 'syz.2.3399': attribute type 10 has an invalid length. [ 140.970841][T12777] macvlan1: entered allmulticast mode [ 141.011270][T12777] veth1_vlan: entered allmulticast mode [ 141.043206][T12777] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 141.268616][T12796] loop9: detected capacity change from 0 to 512 [ 141.293775][T12763] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 141.311226][T12763] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 141.323642][T12763] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.323642][T12763] [ 141.333876][T12763] EXT4-fs (loop0): Total free blocks count 0 [ 141.339877][T12763] EXT4-fs (loop0): Free/Dirty block details [ 141.345842][T12763] EXT4-fs (loop0): free_blocks=68451041280 [ 141.351809][T12763] EXT4-fs (loop0): dirty_blocks=16 [ 141.356940][T12763] EXT4-fs (loop0): Block reservation details [ 141.362980][T12763] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 141.370351][T12796] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 141.393783][T12800] bond1: entered promiscuous mode [ 141.394895][T12803] loop1: detected capacity change from 0 to 128 [ 141.398854][T12800] bond1: entered allmulticast mode [ 141.408293][T12796] EXT4-fs (loop9): 1 truncate cleaned up [ 141.411050][T12800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.419264][T12796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.437503][T12800] bond1 (unregistering): Released all slaves [ 141.493731][T12806] netlink: 'syz.1.3414': attribute type 2 has an invalid length. [ 141.498613][T12796] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #14: comm syz.9.3409: attempt to clear invalid blocks 1886221359 len 1 [ 141.501528][T12806] netlink: 199412 bytes leftover after parsing attributes in process `syz.1.3414'. [ 141.526219][T12796] EXT4-fs (loop9): Remounting filesystem read-only [ 141.552449][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.564203][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.718842][T12816] netlink: 'syz.1.3419': attribute type 10 has an invalid length. [ 141.763633][T12816] macvlan1: entered allmulticast mode [ 141.773241][T12816] veth1_vlan: entered allmulticast mode [ 141.781992][T12816] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 141.793497][T12824] syz.0.3423: attempt to access beyond end of device [ 141.793497][T12824] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.892656][T12833] loop1: detected capacity change from 0 to 512 [ 141.893101][T12832] syz.9.3436: attempt to access beyond end of device [ 141.893101][T12832] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.914318][T12833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.938384][T12833] EXT4-fs (loop1): 1 truncate cleaned up [ 141.950212][T12833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.991452][T12822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.994574][T12833] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #14: comm syz.1.3426: attempt to clear invalid blocks 1886221359 len 1 [ 142.005854][T12822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.031173][T12833] EXT4-fs (loop1): Remounting filesystem read-only [ 142.074970][T12844] loop0: detected capacity change from 0 to 8192 [ 142.085215][T12599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.116518][T12850] pimreg: entered allmulticast mode [ 142.117668][T12854] loop1: detected capacity change from 0 to 1024 [ 142.130894][T12850] pimreg: left allmulticast mode [ 142.137415][T12854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.417513][T12859] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 142.441185][T12859] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 142.453578][T12859] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.453578][T12859] [ 142.463348][T12859] EXT4-fs (loop1): Total free blocks count 0 [ 142.469348][T12859] EXT4-fs (loop1): Free/Dirty block details [ 142.475445][T12859] EXT4-fs (loop1): free_blocks=68451041280 [ 142.481311][T12859] EXT4-fs (loop1): dirty_blocks=16432 [ 142.486702][T12859] EXT4-fs (loop1): Block reservation details [ 142.492811][T12859] EXT4-fs (loop1): i_reserved_data_blocks=1027 [ 142.562691][ T7501] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 142.678403][T12871] netlink: 'syz.3.3438': attribute type 10 has an invalid length. [ 142.686377][T12871] macvlan1: entered allmulticast mode [ 142.693041][T12871] veth1_vlan: entered allmulticast mode [ 142.700279][T12871] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 142.740444][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 142.740460][ T29] audit: type=1326 audit(1735951490.587:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.773377][ T29] audit: type=1326 audit(1735951490.627:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.796979][ T29] audit: type=1326 audit(1735951490.627:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.820649][ T29] audit: type=1326 audit(1735951490.627:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.844160][ T29] audit: type=1326 audit(1735951490.627:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.867758][ T29] audit: type=1326 audit(1735951490.627:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.874299][T12879] loop3: detected capacity change from 0 to 1024 [ 142.891282][ T29] audit: type=1326 audit(1735951490.627:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.898142][T12879] EXT4-fs: Ignoring removed nobh option [ 142.921064][ T29] audit: type=1326 audit(1735951490.627:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.926628][T12879] EXT4-fs: Ignoring removed bh option [ 142.950107][ T29] audit: type=1326 audit(1735951490.627:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 142.950143][ T29] audit: type=1326 audit(1735951490.627:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87126d5d29 code=0x7ffc0000 [ 143.065925][T12879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.179259][T12897] loop0: detected capacity change from 0 to 512 [ 143.193960][T12897] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.235310][T12897] EXT4-fs (loop0): 1 truncate cleaned up [ 143.245727][T12897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.267051][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.286084][T12897] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.3447: attempt to clear invalid blocks 1886221359 len 1 [ 143.302826][T12897] EXT4-fs (loop0): Remounting filesystem read-only [ 143.322738][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.356409][T12917] netlink: 'syz.9.3460': attribute type 1 has an invalid length. [ 143.364260][T12917] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3460'. [ 143.375395][T12917] netlink: 'syz.9.3460': attribute type 1 has an invalid length. [ 143.383213][T12917] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3460'. [ 143.411051][T12919] loop1: detected capacity change from 0 to 8192 [ 143.428021][T12924] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3463'. [ 143.445200][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.454240][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.511745][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3467'. [ 143.639279][T12942] loop3: detected capacity change from 0 to 512 [ 143.650682][T12942] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.669342][T12942] EXT4-fs (loop3): 1 truncate cleaned up [ 143.677312][T12942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.726567][T12942] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.3471: attempt to clear invalid blocks 1886221359 len 1 [ 143.743747][T12942] EXT4-fs (loop3): Remounting filesystem read-only [ 143.767880][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.905960][T12963] loop3: detected capacity change from 0 to 1024 [ 143.933698][T12963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.950309][T12963] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 143.987777][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.063153][T12978] loop3: detected capacity change from 0 to 512 [ 144.075615][T12978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.078876][T12980] dummy0: entered promiscuous mode [ 144.093846][T12980] dummy0: left promiscuous mode [ 144.103500][T12978] EXT4-fs (loop3): 1 truncate cleaned up [ 144.109903][T12978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.147800][T12978] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.3485: attempt to clear invalid blocks 1886221359 len 1 [ 144.163198][T12978] EXT4-fs (loop3): Remounting filesystem read-only [ 144.188195][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.197495][T12985] loop0: detected capacity change from 0 to 512 [ 144.224965][T12987] 9pnet_rdma: rdma_create_trans (12987): problem binding to privport: 13 [ 144.239637][T12985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.267819][T12985] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.306758][T12985] Process accounting resumed [ 144.316057][T12993] loop3: detected capacity change from 0 to 1024 [ 144.329095][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.357432][T12993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.408234][T13001] loop9: detected capacity change from 0 to 8192 [ 144.469345][T13003] loop0: detected capacity change from 0 to 8192 [ 144.535458][T13003] loop0: p1 p2 p3 [ 144.539257][T13003] loop0: p1 size 67108864 extends beyond EOD, truncated [ 144.547660][T13003] loop0: p2 start 98631679 is beyond EOD, truncated [ 144.554427][T13003] loop0: p3 size 423702036 extends beyond EOD, truncated [ 144.688211][T13006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 144.703321][T13006] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 144.715806][T13006] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.715806][T13006] [ 144.725697][T13006] EXT4-fs (loop3): Total free blocks count 0 [ 144.731801][T13006] EXT4-fs (loop3): Free/Dirty block details [ 144.737785][T13006] EXT4-fs (loop3): free_blocks=68451041280 [ 144.743792][T13006] EXT4-fs (loop3): dirty_blocks=16432 [ 144.749184][T13006] EXT4-fs (loop3): Block reservation details [ 144.755210][T13006] EXT4-fs (loop3): i_reserved_data_blocks=1027 [ 144.833315][ T7211] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 145.024914][T13034] xt_CT: No such helper "snmp_trap" [ 145.070126][T13037] vhci_hcd: default hub control req: 0317 v0302 i0000 l0 [ 145.153734][T13046] __nla_validate_parse: 1 callbacks suppressed [ 145.153752][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 145.169476][T13046] IPVS: Error joining to the multicast group [ 145.358486][T13062] loop9: detected capacity change from 0 to 512 [ 145.378474][T13062] EXT4-fs: Ignoring removed orlov option [ 145.499801][T13062] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.525101][T13062] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.605707][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.637898][T13071] pimreg: entered allmulticast mode [ 145.663073][T13071] pimreg: left allmulticast mode [ 145.984910][T13095] sctp: [Deprecated]: syz.2.3536 (pid 13095) Use of int in max_burst socket option deprecated. [ 145.984910][T13095] Use struct sctp_assoc_value instead [ 146.165576][T13118] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 146.600937][T13141] Falling back ldisc for ttyS3. [ 146.606598][T13128] loop9: detected capacity change from 0 to 8192 [ 146.796526][T13170] loop3: detected capacity change from 0 to 512 [ 146.803658][T13170] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 146.827548][T13170] EXT4-fs: error: could not find journal device path [ 147.137314][T13217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13217 comm=syz.3.3587 [ 147.171310][T13223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3590'. [ 147.177124][T13225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13225 comm=syz.1.3591 [ 147.195131][T13225] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 147.210900][T13225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.231885][T13225] bond1: (slave ip6gretap1): making interface the new active one [ 147.240462][T13225] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.248265][T13225] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.256077][T13225] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 147.310784][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.329708][ T3362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.536070][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3603'. [ 147.623136][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3605'. [ 147.681312][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3607'. [ 147.789348][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 147.789391][ T29] audit: type=1326 audit(1735951495.607:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.819576][ T29] audit: type=1326 audit(1735951495.607:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.843345][ T29] audit: type=1326 audit(1735951495.607:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.866926][ T29] audit: type=1326 audit(1735951495.607:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.890629][ T29] audit: type=1326 audit(1735951495.607:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.914187][ T29] audit: type=1326 audit(1735951495.607:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.937924][ T29] audit: type=1326 audit(1735951495.607:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.961611][ T29] audit: type=1326 audit(1735951495.607:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 147.985117][ T29] audit: type=1326 audit(1735951495.607:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 148.008749][ T29] audit: type=1326 audit(1735951495.607:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 148.012329][ T3362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.033014][T13273] ebtables: ebtables: counters copy to user failed while replacing table [ 148.103897][T13284] serio: Serial port ptm0 [ 148.222151][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.248511][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.348258][T13321] rdma_op ffff888126110d80 conn xmit_rdma 0000000000000000 [ 148.492521][T13336] uprobe: syz.0.3642:13336 failed to unregister, leaking uprobe [ 148.550813][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.687863][T13355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3651'. [ 148.884850][T13386] hub 5-0:1.0: USB hub found [ 148.892828][T13386] hub 5-0:1.0: 8 ports detected [ 148.928271][T13396] loop9: detected capacity change from 0 to 1764 [ 149.023155][T13409] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 149.031814][T13409] netem: unknown loss type 13 [ 149.165764][T13424] block device autoloading is deprecated and will be removed. [ 149.173554][T13424] syz.3.3682: attempt to access beyond end of device [ 149.173554][T13424] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 149.375763][T13442] rdma_op ffff88811d1ec180 conn xmit_rdma 0000000000000000 [ 149.680011][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.001109][T13496] ebtables: ebtables: counters copy to user failed while replacing table [ 150.077618][T13508] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 150.171218][T13521] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3721'. [ 150.171678][T13515] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 150.209742][T13515] SELinux: failed to load policy [ 150.247909][T13527] ref_ctr_offset mismatch. inode: 0x2b2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 150.528357][T13546] syz.2.3733[13546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.528497][T13546] syz.2.3733[13546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.542054][T13546] syz.2.3733[13546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.612876][T13548] rdma_op ffff8881196d7d80 conn xmit_rdma 0000000000000000 [ 150.668124][T13550] IPVS: stopping master sync thread 13553 ... [ 150.822357][ T7527] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.867521][T13578] random: crng reseeded on system resumption [ 151.022135][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.029574][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.037055][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.047065][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.054566][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.062066][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.069539][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.076987][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.084430][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.091899][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.099557][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.107046][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.114825][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.122602][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.131630][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.139179][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.146679][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.154148][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.161578][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.169047][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.176506][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.184010][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.191461][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.198875][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.206391][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.213884][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.221337][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.228743][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.236226][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.237458][T13601] ebtables: ebtables: counters copy to user failed while replacing table [ 151.243640][ T3362] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.270199][ T3362] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.549229][T13635] syz.3.3770[13635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.549371][T13635] syz.3.3770[13635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.585274][T13647] syz.1.3776[13647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.597013][T13647] syz.1.3776[13647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.608717][T13647] syz.1.3776[13647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.660673][T13635] syz.3.3770[13635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.722986][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3778'. [ 151.763708][T13656] erspan0: entered promiscuous mode [ 151.780758][T13656] macvtap1: entered promiscuous mode [ 151.786317][T13656] macvtap1: entered allmulticast mode [ 151.791819][T13656] erspan0: entered allmulticast mode [ 151.810455][T13668] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 151.848223][T13665] erspan0: left allmulticast mode [ 151.853513][T13665] erspan0: left promiscuous mode [ 151.979638][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.011656][T13696] tipc: Enabling of bearer rejected, failed to enable media [ 152.045107][T13698] netlink: 'syz.3.3786': attribute type 3 has an invalid length. [ 152.115384][T13704] loop9: detected capacity change from 0 to 2048 [ 152.176705][T13704] Alternate GPT is invalid, using primary GPT. [ 152.183246][T13704] loop9: p2 p3 p7 [ 152.390715][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.835340][T13807] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff184467440737095516153Pq{P [ 152.835340][T13807] n'|$@OO-+el' [ 152.997900][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 152.997919][ T29] audit: type=1326 audit(1735951500.847:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.056254][ T29] audit: type=1326 audit(1735951500.877:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.080015][ T29] audit: type=1326 audit(1735951500.877:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.103802][ T29] audit: type=1326 audit(1735951500.877:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.127371][ T29] audit: type=1326 audit(1735951500.877:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.150901][ T29] audit: type=1326 audit(1735951500.887:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.174586][ T29] audit: type=1326 audit(1735951500.887:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.198243][ T29] audit: type=1326 audit(1735951500.887:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.221901][ T29] audit: type=1326 audit(1735951500.897:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.245593][ T29] audit: type=1326 audit(1735951500.897:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 153.269847][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.336051][T13829] netlink: 'syz.3.3814': attribute type 3 has an invalid length. [ 153.356947][T13833] netlink: 'syz.2.3815': attribute type 3 has an invalid length. [ 153.422110][T13839] random: crng reseeded on system resumption [ 153.638139][T13859] syz.0.3824[13859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.068371][T13877] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 154.136283][T13890] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3842'. [ 154.147496][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3843'. [ 154.147722][T13890] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3842'. [ 154.165655][T13890] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3842'. [ 154.386794][T13917] program syz.1.3854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.391686][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.495825][T13935] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 154.696154][T13955] syz_tun: entered promiscuous mode [ 154.702977][T13955] macsec1: entered allmulticast mode [ 154.708295][T13955] syz_tun: entered allmulticast mode [ 154.719142][T13955] syz_tun: left allmulticast mode [ 154.724358][T13955] syz_tun: left promiscuous mode [ 154.894474][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.905140][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.927472][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3880'. [ 154.998680][T13979] block device autoloading is deprecated and will be removed. [ 154.998947][T13981] serio: Serial port ptm0 [ 155.149584][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.200681][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.240271][T13995] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.240972][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 155.256384][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 155.265317][T13989] netlink: 'syz.2.3886': attribute type 18 has an invalid length. [ 155.459975][T14011] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3896'. [ 155.487782][T14013] random: crng reseeded on system resumption [ 155.501241][ T7519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.093220][T14048] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3913'. [ 156.158917][T14052] bpf_get_probe_write_proto: 5 callbacks suppressed [ 156.158937][T14052] syz.3.3915[14052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.176301][T14052] syz.3.3915[14052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.216233][T14052] syz.3.3915[14052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.508013][T14074] @: renamed from vlan0 (while UP) [ 156.641688][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.854528][T14121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.877880][T14121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.699328][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 157.764205][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 157.830862][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.021407][T14165] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3965'. [ 158.073882][T14175] program syz.2.3970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.081780][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 158.081800][ T29] audit: type=1326 audit(1735951505.917:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.112981][ T29] audit: type=1326 audit(1735951505.917:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.136827][ T29] audit: type=1326 audit(1735951505.927:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.160659][ T29] audit: type=1326 audit(1735951505.927:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.184390][ T29] audit: type=1326 audit(1735951505.927:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.208022][ T29] audit: type=1326 audit(1735951505.927:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.231823][ T29] audit: type=1326 audit(1735951505.927:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.255451][ T29] audit: type=1326 audit(1735951505.927:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.278994][ T29] audit: type=1326 audit(1735951505.927:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.302526][ T29] audit: type=1326 audit(1735951505.927:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 158.737827][T14233] syzkaller0: entered allmulticast mode [ 158.746771][T14233] syzkaller0 (unregistering): left allmulticast mode [ 158.929793][T14252] geneve0: entered allmulticast mode [ 158.934502][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.058674][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 159.205407][T14296] loop9: detected capacity change from 0 to 256 [ 159.212465][T14296] vfat: Unknown parameter 'sh' [ 159.260896][T14301] syz.0.4032[14301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.260968][T14301] syz.0.4032[14301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.289637][T14301] syz.0.4032[14301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.333754][T14305] syzkaller0: entered promiscuous mode [ 159.358580][T14309] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.424950][T14309] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.503409][T14309] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.577434][T14309] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.647650][T14309] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.677309][T14309] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.704292][T14309] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.717001][T14309] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.777849][T14342] loop9: detected capacity change from 0 to 1024 [ 159.784522][T14342] EXT4-fs: Ignoring removed orlov option [ 159.804284][T14342] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.051523][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.201208][T14357] syz.1.4056[14357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.201291][T14357] syz.1.4056[14357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.226091][T14357] syz.1.4056[14357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.307981][T14360] loop3: detected capacity change from 0 to 128 [ 160.396605][T14362] syz.3.4058: attempt to access beyond end of device [ 160.396605][T14362] loop3: rw=2049, sector=145, nr_sectors = 768 limit=128 [ 160.451009][T14360] syz.3.4058: attempt to access beyond end of device [ 160.451009][T14360] loop3: rw=524288, sector=657, nr_sectors = 256 limit=128 [ 160.483978][T14360] syz.3.4058: attempt to access beyond end of device [ 160.483978][T14360] loop3: rw=0, sector=657, nr_sectors = 8 limit=128 [ 160.505605][T14360] syz.3.4058: attempt to access beyond end of device [ 160.505605][T14360] loop3: rw=0, sector=657, nr_sectors = 8 limit=128 [ 160.653134][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.864364][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 160.873411][T14396] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4071'. [ 160.889975][T14398] smc: net device bond0 applied user defined pnetid SYZ0 [ 160.949309][T14398] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4073'. [ 160.950684][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.960650][T14398] smc: net device bond0 erased user defined pnetid SYZ0 [ 161.023401][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 161.033651][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 161.151101][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.152445][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 161.167973][T14423] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4085'. [ 161.192577][T14428] syz.9.4087[14428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.192642][T14428] syz.9.4087[14428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.210719][T14428] syz.9.4087[14428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.302992][T14439] netlink: 'syz.3.4091': attribute type 1 has an invalid length. [ 161.408460][T14443] IPVS: stopping master sync thread 14445 ... [ 161.435532][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 161.578165][T14472] syz.1.4105[14472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.578358][T14472] syz.1.4105[14472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.592504][T14472] syz.1.4105[14472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.042779][T14526] ebtables: ebtables: counters copy to user failed while replacing table [ 162.071460][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4130'. [ 162.160391][T14543] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.190986][T14543] smc: net device bond0 erased user defined pnetid SYZ2 [ 162.230354][T14549] team0 (unregistering): Port device team_slave_0 removed [ 162.260962][ T7525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.263751][T14549] team0 (unregistering): Port device team_slave_1 removed [ 162.544202][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4152'. [ 162.553362][T14582] netlink: 'syz.1.4152': attribute type 25 has an invalid length. [ 162.579396][T14582] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.588330][T14582] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.597217][T14582] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.606050][T14582] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.676206][T14586] vlan0: entered promiscuous mode [ 162.835553][T14596] syzkaller0: entered promiscuous mode [ 163.248265][T14644] smc: net device bond0 applied user defined pnetid SYZ2 [ 163.263959][T14644] smc: net device bond0 erased user defined pnetid SYZ2 [ 163.403752][ T7519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.447579][T14648] syzkaller0: entered promiscuous mode [ 163.487507][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 163.487588][ T29] audit: type=1326 audit(1735951511.337:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.546665][ T29] audit: type=1326 audit(1735951511.337:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.570696][ T29] audit: type=1326 audit(1735951511.347:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.594587][ T29] audit: type=1326 audit(1735951511.347:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.618362][ T29] audit: type=1326 audit(1735951511.347:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.641985][ T29] audit: type=1326 audit(1735951511.347:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.665714][ T29] audit: type=1326 audit(1735951511.347:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.689326][ T29] audit: type=1326 audit(1735951511.347:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.712917][ T29] audit: type=1326 audit(1735951511.347:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.744433][ T29] audit: type=1326 audit(1735951511.447:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac735d29 code=0x7ffc0000 [ 163.914810][T14671] syz.1.4191[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.914963][T14671] syz.1.4191[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.927167][T14671] syz.1.4191[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.379062][T14698] SELinux: policydb table sizes (-2,0) do not match mine (8,7) [ 164.431510][T14698] SELinux: failed to load policy [ 164.551203][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.655454][T14716] program syz.0.4211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.985713][T14758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.996153][T14758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.085833][T14758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.096286][T14758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.097698][T14770] loop2: detected capacity change from 0 to 128 [ 165.127568][T14770] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.139840][T14770] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.165378][T14758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.175841][T14758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.201909][T11924] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.206162][T14777] loop0: detected capacity change from 0 to 1024 [ 165.217974][T14777] EXT4-fs: Ignoring removed nobh option [ 165.223679][T14777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.233877][T14777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.246024][T14758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.256421][T14758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.284178][T14777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.304311][T14777] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 165.329073][T14758] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.337412][T14758] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.349067][T14758] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.357458][T14758] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.366405][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.369580][T14758] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.383775][T14758] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.395791][T14758] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.404064][T14758] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.486595][T14793] vlan2: entered promiscuous mode [ 165.505852][T14798] vlan2: entered allmulticast mode [ 165.570151][T14805] loop9: detected capacity change from 0 to 8192 [ 165.577603][T14805] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.672454][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.686169][T14818] block device autoloading is deprecated and will be removed. [ 165.987597][T14836] loop9: detected capacity change from 0 to 8192 [ 166.005437][T14840] vlan2: entered promiscuous mode [ 166.169267][T14844] vlan0: entered promiscuous mode [ 166.174473][T14844] ip_vti0: entered promiscuous mode [ 166.203272][T14844] ip_vti0: left promiscuous mode [ 166.503986][T14869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.512599][T14864] loop1: detected capacity change from 0 to 2048 [ 166.541040][T14874] loop0: detected capacity change from 0 to 164 [ 166.549589][T14874] syz.0.4281: attempt to access beyond end of device [ 166.549589][T14874] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 166.564836][T14864] loop1: p1 < > p4 [ 166.572142][T14864] loop1: p4 size 8388608 extends beyond EOD, truncated [ 166.582136][T14869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.589236][T14874] syz.0.4281: attempt to access beyond end of device [ 166.589236][T14874] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 166.673895][T14869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.770723][T14869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.792859][ T7497] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.817833][T14887] loop9: detected capacity change from 0 to 2048 [ 166.845889][T14887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.865684][T14869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.877087][T14869] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.888720][T14887] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, [ 166.888767][T14869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.888823][T14887] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 166.889036][T14887] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 193 with error 28 [ 166.926400][T14887] EXT4-fs (loop9): This should not happen!! Data will be lost [ 166.926400][T14887] [ 166.936113][T14887] EXT4-fs (loop9): Total free blocks count 0 [ 166.942169][T14887] EXT4-fs (loop9): Free/Dirty block details [ 166.948073][T14887] EXT4-fs (loop9): free_blocks=66060288 [ 166.953700][T14887] EXT4-fs (loop9): dirty_blocks=208 [ 166.958985][T14887] EXT4-fs (loop9): Block reservation details [ 166.964998][T14887] EXT4-fs (loop9): i_reserved_data_blocks=13 [ 166.974291][T14869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.011321][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.267049][T14902] syzkaller0: entered promiscuous mode [ 167.415705][T14909] vlan0: entered promiscuous mode [ 167.651302][T14923] __nla_validate_parse: 4 callbacks suppressed [ 167.651321][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4298'. [ 167.713599][T14923] bond1: entered promiscuous mode [ 167.759482][T14923] gretap1: entered promiscuous mode [ 167.789884][T14923] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 167.832639][T14923] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 167.841295][T14923] gretap1: left promiscuous mode [ 167.847492][T14923] bond1 (unregistering): Released all slaves [ 167.969876][T14933] syzkaller0: entered promiscuous mode [ 167.975446][T14933] syzkaller0: entered allmulticast mode [ 167.976061][ T7497] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.000373][T14941] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 168.006262][T14941] syzkaller0: Linktype set failed because interface is up [ 168.013619][ T7485] syzkaller0: tun_net_xmit 48 [ 168.141303][T14958] vlan0: entered promiscuous mode [ 168.236327][T14968] wireguard0: entered promiscuous mode [ 168.242041][T14968] wireguard0: entered allmulticast mode [ 168.261068][T14967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.284807][T14975] loop9: detected capacity change from 0 to 512 [ 168.303214][T14978] bridge0: port 3(erspan0) entered blocking state [ 168.309878][T14978] bridge0: port 3(erspan0) entered disabled state [ 168.319118][T14978] erspan0: entered allmulticast mode [ 168.325849][T14978] erspan0: entered promiscuous mode [ 168.334807][T14967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.346311][T14975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.359258][T14975] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.399222][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.436997][T14990] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4323'. [ 168.463055][T14967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.483717][T14995] Set syz1 is full, maxelem 65536 reached [ 168.548721][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 168.548738][ T29] audit: type=1400 audit(1735951516.397:5026): avc: denied { write } for pid=14992 comm="syz.1.4324" laddr=fe80::f lport=33694 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 168.605699][T14967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.628345][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4338'. [ 168.705027][T14967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.717223][T14967] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.728671][T14967] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.741436][T14967] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.741450][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.758786][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.768038][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.792072][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.801132][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.810405][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.844201][T15010] loop2: detected capacity change from 0 to 1024 [ 168.852614][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'. [ 168.884456][T15017] devtmpfs: Unknown parameter 'udp:syz2' [ 168.885392][T15010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.909048][T15021] netlink: 'syz.0.4332': attribute type 25 has an invalid length. [ 168.923179][T15021] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.931490][T15021] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.939953][T15021] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.948443][T15021] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.004957][T15027] EXT4-fs (loop2): shut down requested (0) [ 169.011517][T15028] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff184467440737095516153Pq{P [ 169.011517][T15028] n'|$@OO-+el' [ 169.055969][ T29] audit: type=1400 audit(1735951516.907:5027): avc: denied { map } for pid=15009 comm="syz.2.4331" path="/261/file2/cpuset.memory_pressure_enabled" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.082947][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.118154][ T7211] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.142914][ T7211] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 169.155634][ T7211] EXT4-fs (loop2): This should not happen!! Data will be lost [ 169.155634][ T7211] [ 169.165518][ T7211] EXT4-fs (loop2): Total free blocks count 0 [ 169.171563][ T7211] EXT4-fs (loop2): Free/Dirty block details [ 169.177479][ T7211] EXT4-fs (loop2): free_blocks=68451041280 [ 169.183425][ T7211] EXT4-fs (loop2): dirty_blocks=8336 [ 169.188726][ T7211] EXT4-fs (loop2): Block reservation details [ 169.194883][ T7211] EXT4-fs (loop2): i_reserved_data_blocks=521 [ 169.248233][ T29] audit: type=1400 audit(1735951517.097:5028): avc: denied { mount } for pid=15037 comm="syz.3.4342" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.295483][ T29] audit: type=1400 audit(1735951517.147:5029): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.303826][T15041] loop9: detected capacity change from 0 to 128 [ 169.327482][T15041] FAT-fs (loop9): bogus number of FAT sectors [ 169.333661][T15041] FAT-fs (loop9): Can't find a valid FAT filesystem [ 169.466562][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 169.473125][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.480766][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.487423][ T29] audit: type=1326 audit(1735951517.317:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.3.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5477a5d29 code=0x7ffc0000 [ 169.499748][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 169.510930][ T29] audit: type=1326 audit(1735951517.317:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.3.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5477a5d29 code=0x7ffc0000 [ 169.517386][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.540986][ T29] audit: type=1326 audit(1735951517.317:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.3.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5477a5d29 code=0x7ffc0000 [ 169.548713][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.572166][ T29] audit: type=1326 audit(1735951517.317:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.3.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5477a5d29 code=0x7ffc0000 [ 169.572234][ T29] audit: type=1326 audit(1735951517.317:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.3.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5477a5d29 code=0x7ffc0000 [ 169.608349][T15059] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.624738][ T29] audit: type=1326 audit(1735951517.317:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.3.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5477a5d29 code=0x7ffc0000 [ 169.655648][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 169.663091][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.670770][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.697643][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 169.704374][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.712049][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.740727][ T3434] vhci_hcd: vhci_device speed not set [ 169.746754][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 169.753689][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.761201][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.783968][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 169.791220][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.798921][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.806363][ T3434] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 169.827622][T15059] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 169.834364][T15059] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.841930][T15059] vhci_hcd vhci_hcd.0: Device attached [ 169.853028][T15095] vhci_hcd: connection closed [ 169.853367][T15088] vhci_hcd: connection closed [ 169.878788][ T7211] vhci_hcd: stop threads [ 169.887865][ T7211] vhci_hcd: release socket [ 169.890258][T15073] vhci_hcd: connection closed [ 169.892518][ T7211] vhci_hcd: disconnect device [ 169.897256][T15085] vhci_hcd: connection closed [ 169.897822][T15060] vhci_hcd: connection reset by peer [ 169.902023][T15071] vhci_hcd: connection closed [ 169.912483][T15068] vhci_hcd: connection closed [ 169.917293][ T7211] vhci_hcd: stop threads [ 169.926370][ T7211] vhci_hcd: release socket [ 169.930842][ T7211] vhci_hcd: disconnect device [ 169.935802][ T7211] vhci_hcd: stop threads [ 169.940077][ T7211] vhci_hcd: release socket [ 169.944601][ T7211] vhci_hcd: disconnect device [ 169.949798][ T7211] vhci_hcd: stop threads [ 169.954122][ T7211] vhci_hcd: release socket [ 169.958583][ T7211] vhci_hcd: disconnect device [ 169.963621][ T7211] vhci_hcd: stop threads [ 169.967889][ T7211] vhci_hcd: release socket [ 169.972436][ T7211] vhci_hcd: disconnect device [ 169.977420][ T7211] vhci_hcd: stop threads [ 169.981755][ T7211] vhci_hcd: release socket [ 169.986239][ T7211] vhci_hcd: disconnect device [ 169.994021][ T7211] vhci_hcd: stop threads [ 169.998324][ T7211] vhci_hcd: release socket [ 170.002846][ T7211] vhci_hcd: disconnect device [ 170.070465][T15110] veth0_vlan: entered allmulticast mode [ 170.125928][T15116] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.134396][T15116] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.142798][T15116] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.151154][T15116] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.159623][T15116] vxlan0: entered promiscuous mode [ 170.166937][T15110] : renamed from vlan1 [ 170.179904][T15118] bond0: (slave syz_tun): Releasing backup interface [ 170.282246][T15136] loop0: detected capacity change from 0 to 1024 [ 170.289494][T15136] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 170.299159][T15136] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 170.310703][T15136] EXT4-fs (loop0): invalid journal inode [ 170.316471][T15136] EXT4-fs (loop0): can't get journal size [ 170.323162][T15136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.335704][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.354905][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.391653][T15142] SELinux: policydb table sizes (0,-1) do not match mine (8,7) [ 170.399909][T15142] SELinux: failed to load policy [ 170.446836][T15148] loop0: detected capacity change from 0 to 512 [ 170.461849][T15148] EXT4-fs (loop0): too many log groups per flexible block group [ 170.469626][T15148] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 170.476735][T15148] EXT4-fs (loop0): mount failed [ 170.500723][T15152] syz.0.4386[15152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.500841][T15152] syz.0.4386[15152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.512533][T15152] syz.0.4386[15152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.091201][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 171.109204][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.116793][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.132758][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 171.139580][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.147369][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.154166][T15174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.165145][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 171.171695][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.179318][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.190637][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 171.197373][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.205195][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.216774][T15188] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 171.226894][T15188] SELinux: failed to load policy [ 171.233410][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 171.240033][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.247613][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.268126][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 171.274854][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 171.282510][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.295758][T15174] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 171.302472][T15174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.309985][T15174] vhci_hcd vhci_hcd.0: Device attached [ 171.315740][ T3377] vhci_hcd: vhci_device speed not set [ 171.322227][T15195] vhci_hcd: connection closed [ 171.322387][T15193] vhci_hcd: connection closed [ 171.328791][T15200] loop9: detected capacity change from 0 to 1024 [ 171.335913][T15189] vhci_hcd: connection closed [ 171.340043][T15191] vhci_hcd: connection closed [ 171.340229][T15186] vhci_hcd: connection closed [ 171.348023][ T7485] vhci_hcd: stop threads [ 171.351924][T15176] vhci_hcd: connection closed [ 171.354196][ T7485] vhci_hcd: release socket [ 171.358524][T15181] vhci_hcd: connection closed [ 171.363127][ T7485] vhci_hcd: disconnect device [ 171.374225][ T7485] vhci_hcd: stop threads [ 171.381368][ T7485] vhci_hcd: release socket [ 171.385988][ T7485] vhci_hcd: disconnect device [ 171.391124][ T3377] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 171.405075][ T7485] vhci_hcd: stop threads [ 171.408358][T15178] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 171.409364][ T7485] vhci_hcd: release socket [ 171.419765][ T7485] vhci_hcd: disconnect device [ 171.425151][T15200] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.425187][ T7485] vhci_hcd: stop threads [ 171.441593][ T7485] vhci_hcd: release socket [ 171.446100][ T7485] vhci_hcd: disconnect device [ 171.451594][ T7485] vhci_hcd: stop threads [ 171.452451][ T7497] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.455868][ T7485] vhci_hcd: release socket [ 171.468155][ T7485] vhci_hcd: disconnect device [ 171.473126][ T7485] vhci_hcd: stop threads [ 171.477404][ T7485] vhci_hcd: release socket [ 171.481978][ T7485] vhci_hcd: disconnect device [ 171.486844][ T7485] vhci_hcd: stop threads [ 171.491158][ T7485] vhci_hcd: release socket [ 171.495599][ T7485] vhci_hcd: disconnect device [ 171.533225][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.697114][T15220] loop9: detected capacity change from 0 to 512 [ 171.720044][T15220] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.758584][T15220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.774633][T15220] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.863680][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.955279][T15246] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 171.993699][T15216] chnl_net:caif_netlink_parms(): no params data found [ 172.186743][T15216] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.189337][T15261] loop2: detected capacity change from 0 to 512 [ 172.193871][T15216] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.194227][T15216] bridge_slave_0: entered allmulticast mode [ 172.214565][T15216] bridge_slave_0: entered promiscuous mode [ 172.214974][T15261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.221474][T15216] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.237784][T15216] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.245154][T15216] bridge_slave_1: entered allmulticast mode [ 172.251647][T15216] bridge_slave_1: entered promiscuous mode [ 172.285316][T15216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.296102][T15216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.324506][T15261] EXT4-fs (loop2): 1 truncate cleaned up [ 172.325330][T15216] team0: Port device team_slave_0 added [ 172.334046][T15264] loop1: detected capacity change from 0 to 512 [ 172.342122][T15216] team0: Port device team_slave_1 added [ 172.355293][T15261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.370152][T15216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.377187][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.400961][T15264] EXT4-fs: dax option not supported [ 172.403202][T15216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.420023][T15216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.427044][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.453026][T15216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.516810][T15216] hsr_slave_0: entered promiscuous mode [ 172.534019][T11924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.565182][T15216] hsr_slave_1: entered promiscuous mode [ 172.571988][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.575093][T15216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.592810][T15216] Cannot create hsr debugfs directory [ 172.613877][T15271] loop2: detected capacity change from 0 to 512 [ 172.645773][T15271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.718957][T15271] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.751718][T15281] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.836331][T11924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.984064][T15297] __nla_validate_parse: 9 callbacks suppressed [ 172.984079][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4437'. [ 173.053519][T15297] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 173.115943][T15312] loop9: detected capacity change from 0 to 256 [ 173.128262][T15312] FAT-fs (loop9): bogus number of FAT sectors [ 173.134572][T15312] FAT-fs (loop9): Can't find a valid FAT filesystem [ 173.164031][T15216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.173508][T15216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.183433][T15216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.193140][T15216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.244322][T15216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.259109][T15216] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.269174][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.276312][ T7485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.290496][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.297624][ T7485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.321563][T15216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.331992][T15216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.397003][T15216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.495619][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4451'. [ 173.505596][T15343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.513280][T15343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.521851][T15343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.529372][T15343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.594066][T15216] veth0_vlan: entered promiscuous mode [ 173.603986][T15216] veth1_vlan: entered promiscuous mode [ 173.621536][T15216] veth0_macvtap: entered promiscuous mode [ 173.629416][T15216] veth1_macvtap: entered promiscuous mode [ 173.643034][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.653601][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.663733][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.674276][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.684236][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.694783][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.704737][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.715744][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.728021][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.738819][T15216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.754683][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.765393][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.775467][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.785966][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.795943][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.806447][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.816278][T15216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.826750][T15216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.838465][T15216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.849439][T15216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.858324][T15216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.867133][T15216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.875988][T15216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.927124][T15363] loop4: detected capacity change from 0 to 128 [ 173.936823][T15363] syz.4.4406: attempt to access beyond end of device [ 173.936823][T15363] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 173.955535][T15363] syz.4.4406: attempt to access beyond end of device [ 173.955535][T15363] loop4: rw=0, sector=97, nr_sectors = 32 limit=128 [ 173.988726][T15363] syz.4.4406: attempt to access beyond end of device [ 173.988726][T15363] loop4: rw=0, sector=145, nr_sectors = 3 limit=128 [ 174.028917][T15373] random: crng reseeded on system resumption [ 174.040619][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 174.040637][ T29] audit: type=1400 audit(1735951521.877:5087): avc: denied { write } for pid=15372 comm="syz.2.4462" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.156802][T15385] syz.9.4464[15385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.156870][T15385] syz.9.4464[15385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.169666][T15385] syz.9.4464[15385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.191896][ T29] audit: type=1400 audit(1735951522.047:5088): avc: denied { map } for pid=15381 comm="syz.4.4463" path="socket:[44930]" dev="sockfs" ino=44930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 174.232965][ T29] audit: type=1326 audit(1735951522.087:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.9.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bd525d29 code=0x7ffc0000 [ 174.256703][ T29] audit: type=1326 audit(1735951522.087:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c50195d29 code=0x7ffc0000 [ 174.280303][ T29] audit: type=1326 audit(1735951522.087:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c50195d29 code=0x7ffc0000 [ 174.303986][ T29] audit: type=1326 audit(1735951522.087:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f1c50195d29 code=0x7ffc0000 [ 174.327558][ T29] audit: type=1326 audit(1735951522.087:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c50195d29 code=0x7ffc0000 [ 174.351177][ T29] audit: type=1326 audit(1735951522.087:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c50195d29 code=0x7ffc0000 [ 174.374940][ T29] audit: type=1326 audit(1735951522.087:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c50197bbc code=0x7ffc0000 [ 174.398484][ T29] audit: type=1326 audit(1735951522.087:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.4.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c50197af4 code=0x7ffc0000 [ 174.523599][T15408] netlink: 'syz.9.4473': attribute type 3 has an invalid length. [ 174.539058][T15406] syzkaller0: entered promiscuous mode [ 174.544851][T15406] syzkaller0: entered allmulticast mode [ 174.604086][T15412] hub 6-0:1.0: USB hub found [ 174.604935][T15419] loop9: detected capacity change from 0 to 512 [ 174.620973][T15412] hub 6-0:1.0: 8 ports detected [ 174.639411][T15419] EXT4-fs (loop9): orphan cleanup on readonly fs [ 174.646233][T15419] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 174.661756][T15419] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 174.663161][T15415] Falling back ldisc for ttyS3. [ 174.673545][T15419] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #13: comm syz.9.4478: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 174.692529][T15419] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.4478: couldn't read orphan inode 13 (err -117) [ 174.706490][T15419] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.725694][T15419] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 174.747969][T15419] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 2 [ 174.780597][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 174.787200][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.794783][T15433] vhci_hcd vhci_hcd.0: Device attached [ 174.815690][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 174.822317][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 174.830053][T15433] vhci_hcd vhci_hcd.0: Device attached [ 174.838982][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.854872][T15433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 174.870709][ T3434] usb 3-1: enqueue for inactive port 0 [ 174.876290][ T3434] usb 3-1: enqueue for inactive port 0 [ 174.893179][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 174.897854][T15446] loop0: detected capacity change from 0 to 1024 [ 174.899719][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.906731][T15446] EXT4-fs: Ignoring removed orlov option [ 174.913588][T15433] vhci_hcd vhci_hcd.0: Device attached [ 174.919250][T15446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.931576][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.961006][ T3434] vhci_hcd: vhci_device speed not set [ 174.972301][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 174.979077][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 174.986733][T15433] vhci_hcd vhci_hcd.0: Device attached [ 175.000609][ T35] vhci_hcd: vhci_device speed not set [ 175.006167][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 175.012791][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.020320][T15433] vhci_hcd vhci_hcd.0: Device attached [ 175.024724][T15453] vlan0: entered allmulticast mode [ 175.036256][T15446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.076130][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 175.082884][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 175.090716][T15433] vhci_hcd vhci_hcd.0: Device attached [ 175.099486][T15433] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 175.106181][T15433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.113714][T15433] vhci_hcd vhci_hcd.0: Device attached [ 175.122822][ T35] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 175.129034][T15470] vhci_hcd: connection closed [ 175.130324][T15468] vhci_hcd: connection closed [ 175.135127][T15452] vhci_hcd: connection closed [ 175.140589][T15437] vhci_hcd: connection closed [ 175.143845][T15461] vhci_hcd: connection closed [ 175.148123][ T7207] vhci_hcd: stop threads [ 175.154699][T15445] vhci_hcd: connection closed [ 175.154818][T15434] vhci_hcd: connection reset by peer [ 175.159060][ T7207] vhci_hcd: release socket [ 175.173527][ T7207] vhci_hcd: disconnect device [ 175.174464][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 175.188439][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.189752][ T7207] vhci_hcd: stop threads [ 175.201824][ T7207] vhci_hcd: release socket [ 175.206293][ T7207] vhci_hcd: disconnect device [ 175.211411][ T7207] vhci_hcd: stop threads [ 175.215748][ T7207] vhci_hcd: release socket [ 175.220213][ T7207] vhci_hcd: disconnect device [ 175.227484][ T7207] vhci_hcd: stop threads [ 175.231789][ T7207] vhci_hcd: release socket [ 175.236242][ T7207] vhci_hcd: disconnect device [ 175.252781][ T7207] vhci_hcd: stop threads [ 175.257359][ T7207] vhci_hcd: release socket [ 175.261895][ T7207] vhci_hcd: disconnect device [ 175.266948][ T7207] vhci_hcd: stop threads [ 175.271321][ T7207] vhci_hcd: release socket [ 175.275802][ T7207] vhci_hcd: disconnect device [ 175.284173][ T7207] vhci_hcd: stop threads [ 175.288499][ T7207] vhci_hcd: release socket [ 175.292976][ T7207] vhci_hcd: disconnect device [ 175.373433][T15480] syzkaller0: entered promiscuous mode [ 175.378988][T15480] syzkaller0: entered allmulticast mode [ 175.495462][T15498] syz.2.4504[15498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.495569][T15498] syz.2.4504[15498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.508664][T15498] syz.2.4504[15498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.592202][T15513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4511'. [ 175.810411][T15541] loop2: detected capacity change from 0 to 512 [ 175.838112][T15541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.851113][T15541] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.863842][T15541] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 175.885535][T11924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.904685][T15552] netlink: 'syz.4.4529': attribute type 2 has an invalid length. [ 175.912514][T15552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4529'. [ 175.944696][T15558] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4530'. [ 175.976749][T15563] smc: net device bond0 applied user defined pnetid SYZ2 [ 175.984996][T15563] smc: net device bond0 erased user defined pnetid SYZ2 [ 176.033046][T15571] loop2: detected capacity change from 0 to 512 [ 176.039919][T15571] EXT4-fs (loop2): bad s_want_extra_isize: 636 [ 176.046344][ T7519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 176.052684][T15571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4536'. [ 176.069220][T15575] loop4: detected capacity change from 0 to 1024 [ 176.077642][T15575] EXT4-fs: Ignoring removed orlov option [ 176.083394][T15575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.102989][T15575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.159157][T15216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.188757][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4540'. [ 176.198652][T15582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 176.237441][T15584] loop4: detected capacity change from 0 to 1024 [ 176.246195][T15584] EXT4-fs: Ignoring removed nobh option [ 176.251931][T15584] EXT4-fs: Ignoring removed bh option [ 176.275665][T15584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.303119][T15216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.472730][ T3377] usb 5-1: enqueue for inactive port 0 [ 176.485486][ T3377] usb 5-1: enqueue for inactive port 0 [ 176.507921][T15597] loop0: detected capacity change from 0 to 512 [ 176.539147][T15597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.552078][T15597] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.570696][ T3377] vhci_hcd: vhci_device speed not set [ 176.726520][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.780643][T15608] loop5: detected capacity change from 0 to 7 [ 176.787299][T15608] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.796257][T15608] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.804268][T15608] loop5: unable to read partition table [ 176.810394][T15608] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 176.810394][T15608] ) failed (rc=-5) [ 177.003529][T15627] loop1: detected capacity change from 0 to 1024 [ 177.010415][T15627] EXT4-fs: Ignoring removed nobh option [ 177.016121][T15627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.024458][T15627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.036156][T15627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.053612][T15627] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 177.078425][T12599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.088448][T15634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4562'. [ 177.133475][ T2964] kernel write not supported for file /snd/seq (pid: 2964 comm: kworker/0:2) [ 177.160638][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.225266][T15650] syz.4.4569[15650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.225404][T15650] syz.4.4569[15650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.236487][T15654] syz.2.4571[15654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.239054][T15650] syz.4.4569[15650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.248638][T15654] syz.2.4571[15654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.271341][T15654] syz.2.4571[15654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.286193][T15652] IPVS: Error joining to the multicast group [ 177.590764][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.671690][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.679189][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.686675][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.699780][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.707293][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.714767][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.722318][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.729783][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.737241][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.744762][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.752389][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.759814][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.767232][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.774697][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.782632][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.790068][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.797512][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.804968][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.812408][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.819851][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.827288][ T3434] hid-generic 0008:0000:0000.000A: unknown main item tag 0x0 [ 177.844602][ T3434] hid-generic 0008:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 177.924305][T15707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.933002][T15707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.974978][T15715] loop1: detected capacity change from 0 to 512 [ 177.982156][T15715] EXT4-fs: Ignoring removed orlov option [ 177.989478][T15715] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.4598: casefold flag without casefold feature [ 177.996410][T15719] loop4: detected capacity change from 0 to 1024 [ 178.004793][T15715] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4598: couldn't read orphan inode 15 (err -117) [ 178.009092][T15719] EXT4-fs: Ignoring removed nobh option [ 178.023658][T15715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.026133][T15719] EXT4-fs: Ignoring removed oldalloc option [ 178.042302][T15719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.083474][T15719] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.4599: Allocating blocks 497-513 which overlap fs metadata [ 178.097923][T15719] EXT4-fs (loop4): pa ffff888106480770: logic 272, phys. 401, len 7 [ 178.101545][T12599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.105962][T15719] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 178.165775][T15216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.201200][ T2964] kernel write not supported for file /598/attr/keycreate (pid: 2964 comm: kworker/0:2) [ 178.280807][ T7519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.414697][T15751] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 178.421350][T15751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.428807][T15751] vhci_hcd vhci_hcd.0: Device attached [ 178.446872][T15751] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 178.453431][T15751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 178.461165][T15751] vhci_hcd vhci_hcd.0: Device attached [ 178.501697][T15751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.530697][T15769] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(10) [ 178.537338][T15769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.544927][T15769] vhci_hcd vhci_hcd.0: Device attached [ 178.582037][T15751] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(9) [ 178.588651][T15751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 178.596273][T15751] vhci_hcd vhci_hcd.0: Device attached [ 178.610701][T15751] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(12) [ 178.617343][T15751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.624862][T15751] vhci_hcd vhci_hcd.0: Device attached [ 178.636944][ T24] vhci_hcd: vhci_device speed not set [ 178.642663][T15751] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(15) [ 178.649362][T15751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.657016][T15751] vhci_hcd vhci_hcd.0: Device attached [ 178.666457][T15751] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(17) [ 178.673097][T15751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.680603][T15751] vhci_hcd vhci_hcd.0: Device attached [ 178.697619][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4624'. [ 178.698431][T15792] vhci_hcd: connection closed [ 178.708694][ T7207] vhci_hcd: stop threads [ 178.717841][ T7207] vhci_hcd: release socket [ 178.721275][T15778] vhci_hcd: connection closed [ 178.722364][ T7207] vhci_hcd: disconnect device [ 178.726814][T15770] vhci_hcd: connection closed [ 178.727684][T15752] vhci_hcd: connection closed [ 178.735806][ T24] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 178.737849][T15786] vhci_hcd: connection closed [ 178.748829][T15782] vhci_hcd: connection closed [ 178.749130][T15753] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 178.753743][T15754] vhci_hcd: connection closed [ 178.768487][ T7207] vhci_hcd: stop threads [ 178.777736][ T7207] vhci_hcd: release socket [ 178.782232][ T7207] vhci_hcd: disconnect device [ 178.789284][ T7207] vhci_hcd: stop threads [ 178.793759][ T7207] vhci_hcd: release socket [ 178.798606][ T7207] vhci_hcd: disconnect device [ 178.803424][ T7207] vhci_hcd: stop threads [ 178.807668][ T7207] vhci_hcd: release socket [ 178.812154][ T7207] vhci_hcd: disconnect device [ 178.817546][ T7207] vhci_hcd: stop threads [ 178.821869][ T7207] vhci_hcd: release socket [ 178.826370][ T7207] vhci_hcd: disconnect device [ 178.832927][ T7207] vhci_hcd: stop threads [ 178.837608][ T7207] vhci_hcd: release socket [ 178.842194][ T7207] vhci_hcd: disconnect device [ 178.848342][ T7207] vhci_hcd: stop threads [ 178.852667][ T7207] vhci_hcd: release socket [ 178.857112][ T7207] vhci_hcd: disconnect device [ 178.952169][T15806] loop1: detected capacity change from 0 to 8192 [ 178.973753][T15806] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff184467440737095516153Pq{P [ 178.973753][T15806] n'|$@OO-+el' [ 179.055209][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4636'. [ 179.143002][T15826] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.189523][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 179.189555][ T29] audit: type=1326 audit(1735951527.037:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.221120][ T29] audit: type=1326 audit(1735951527.037:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.244741][ T29] audit: type=1326 audit(1735951527.047:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.268375][ T29] audit: type=1326 audit(1735951527.047:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.292009][ T29] audit: type=1326 audit(1735951527.047:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.315705][ T29] audit: type=1326 audit(1735951527.047:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.339229][ T29] audit: type=1326 audit(1735951527.047:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.362917][ T29] audit: type=1326 audit(1735951527.047:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.386485][ T29] audit: type=1326 audit(1735951527.047:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.410017][ T29] audit: type=1326 audit(1735951527.067:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.0.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0226e25d29 code=0x7ffc0000 [ 179.442695][T15826] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.459941][T15838] IPVS: Error joining to the multicast group [ 179.461646][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.499476][T15840] loop1: detected capacity change from 0 to 1024 [ 179.511945][T15840] EXT4-fs: Ignoring removed orlov option [ 179.514946][T15837] loop0: detected capacity change from 0 to 128 [ 179.527799][T15840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.528334][T15826] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.553793][T15837] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.567798][T15837] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.600730][T15826] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.639975][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'. [ 179.715584][T15826] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.725192][T11596] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.753131][T15826] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.783867][T15826] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.809008][T15826] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.922058][T15872] loop2: detected capacity change from 0 to 512 [ 179.956758][T15872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.972777][T15872] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.019009][T11924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.150761][ T35] usb 9-1: enqueue for inactive port 0 [ 180.156324][ T35] usb 9-1: enqueue for inactive port 0 [ 180.181893][T15897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4669'. [ 180.218936][T15900] loop2: detected capacity change from 0 to 2048 [ 180.240754][ T35] vhci_hcd: vhci_device speed not set [ 180.250298][T15904] loop9: detected capacity change from 0 to 512 [ 180.256922][T15904] EXT4-fs: Ignoring removed orlov option [ 180.291037][T15900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.312450][T15904] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.4674: casefold flag without casefold feature [ 180.339609][T15904] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.4674: couldn't read orphan inode 15 (err -117) [ 180.377797][T15904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.406885][T11924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.424356][T15918] loop0: detected capacity change from 0 to 2048 [ 180.495939][T15918] msdos: Unknown parameter '18446744073709551615' [ 180.506741][T15918] SELinux: policydb version 0 does not match my version range 15-33 [ 180.515910][T15918] SELinux: failed to load policy [ 180.523285][T12599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.571321][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.585724][T11440] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.615330][T15938] loop9: detected capacity change from 0 to 164 [ 180.637051][T15939] loop1: detected capacity change from 0 to 1024 [ 180.646363][T15938] syz.9.4693: attempt to access beyond end of device [ 180.646363][T15938] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 180.656384][T15939] EXT4-fs: Ignoring removed nobh option [ 180.666074][T15939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.666545][T15938] syz.9.4693: attempt to access beyond end of device [ 180.666545][T15938] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 180.674302][T15935] loop2: detected capacity change from 0 to 8192 [ 180.695489][T15939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.726786][T15939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.782542][T15931] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 180.864359][T12599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.905333][T15965] loop0: detected capacity change from 0 to 512 [ 180.912969][T15966] loop2: detected capacity change from 0 to 512 [ 180.913620][T15958] loop4: detected capacity change from 0 to 1024 [ 180.926163][T15958] EXT4-fs: Ignoring removed orlov option [ 180.927715][T15965] EXT4-fs: Ignoring removed orlov option [ 180.943518][T15968] loop1: detected capacity change from 0 to 512 [ 180.953814][T15966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.954435][T15958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.970050][T15965] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.4694: casefold flag without casefold feature [ 180.991898][T15966] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.994039][T15968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.015051][T15968] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.035848][T15965] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4694: couldn't read orphan inode 15 (err -117) [ 181.048868][T15965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.163818][T12599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.213418][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4698'. [ 181.243692][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.298239][T15985] loop1: detected capacity change from 0 to 164 [ 181.315851][T15985] syz.1.4699: attempt to access beyond end of device [ 181.315851][T15985] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 181.337141][T15985] syz.1.4699: attempt to access beyond end of device [ 181.337141][T15985] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 181.442811][T15975] ================================================================== [ 181.450942][T15975] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 181.460615][T15975] [ 181.462945][T15975] write to 0xffff88811fc181b8 of 4 bytes by task 15958 on cpu 1: [ 181.470671][T15975] inode_cgwb_move_to_attached+0x9a/0x300 [ 181.476414][T15975] writeback_single_inode+0x2b5/0x3f0 [ 181.481800][T15975] sync_inode_metadata+0x5c/0x90 [ 181.486747][T15975] generic_buffers_fsync_noflush+0xd8/0x120 [ 181.492655][T15975] ext4_sync_file+0x1ff/0x6c0 [ 181.497353][T15975] vfs_fsync_range+0x116/0x130 [ 181.502133][T15975] ext4_buffered_write_iter+0x326/0x370 [ 181.507701][T15975] ext4_file_write_iter+0x383/0xf20 [ 181.512919][T15975] iter_file_splice_write+0x5f1/0x980 [ 181.518301][T15975] direct_splice_actor+0x160/0x2c0 [ 181.523423][T15975] splice_direct_to_actor+0x302/0x670 [ 181.528811][T15975] do_splice_direct+0xd7/0x150 [ 181.533589][T15975] do_sendfile+0x398/0x660 [ 181.538016][T15975] __x64_sys_sendfile64+0x110/0x150 [ 181.543236][T15975] x64_sys_call+0xfbd/0x2dc0 [ 181.547838][T15975] do_syscall_64+0xc9/0x1c0 [ 181.552347][T15975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.558265][T15975] [ 181.560600][T15975] read to 0xffff88811fc181b8 of 4 bytes by task 15975 on cpu 0: [ 181.568232][T15975] generic_buffers_fsync_noflush+0x83/0x120 [ 181.574145][T15975] ext4_sync_file+0x1ff/0x6c0 [ 181.578843][T15975] vfs_fsync_range+0x116/0x130 [ 181.583626][T15975] ext4_buffered_write_iter+0x326/0x370 [ 181.589191][T15975] ext4_file_write_iter+0x383/0xf20 [ 181.594407][T15975] iter_file_splice_write+0x5f1/0x980 [ 181.599792][T15975] direct_splice_actor+0x160/0x2c0 [ 181.604919][T15975] splice_direct_to_actor+0x302/0x670 [ 181.610311][T15975] do_splice_direct+0xd7/0x150 [ 181.615178][T15975] do_sendfile+0x398/0x660 [ 181.619640][T15975] __x64_sys_sendfile64+0x110/0x150 [ 181.624865][T15975] x64_sys_call+0xfbd/0x2dc0 [ 181.629475][T15975] do_syscall_64+0xc9/0x1c0 [ 181.633988][T15975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.639906][T15975] [ 181.642227][T15975] value changed: 0x00000002 -> 0x00000020 [ 181.647951][T15975] [ 181.650278][T15975] Reported by Kernel Concurrency Sanitizer on: [ 181.656450][T15975] CPU: 0 UID: 0 PID: 15975 Comm: syz.4.4692 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 181.667223][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.677297][T15975] ================================================================== [ 181.886952][T15216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.900768][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.944850][T11924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.030701][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.830651][ T24] usb 19-1: enqueue for inactive port 0 [ 183.836262][ T24] usb 19-1: enqueue for inactive port 0 [ 183.910678][ T24] vhci_hcd: vhci_device speed not set [ 184.140731][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.260671][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.370695][ T7211] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.510787][ T7485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.630681][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.751688][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.870704][ T7207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!