last executing test programs: 26.4711201s ago: executing program 0 (id=4906): perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r2}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0xa, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x7}, @datasec={0x3, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x2, 0x5}, {0x2, 0x0, 0x9}], "14ec67"}, @datasec={0x2, 0x7, 0x0, 0xf, 0x3, [{0x4, 0xc9e, 0x140}, {0x4, 0x2, 0xc64}, {0x4, 0x5, 0x4}, {0x2, 0x8, 0x35b6}, {0x5, 0x4, 0x2}, {0x4, 0xf6, 0x3}, {0x1, 0x401, 0x7fffffff}], "14ba9e"}]}, {0x0, [0x2e, 0x61, 0xe, 0x61, 0x2e, 0x61, 0x5f, 0x0]}}, &(0x7f0000000500)=""/230, 0xbe, 0xe6, 0x0, 0xfffffe01, 0x10000, @value=r3}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8a01a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0xb4}, 0x8120, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r7) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x86, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES32=r9, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x5, 0x400, 0xa, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 25.081072171s ago: executing program 0 (id=4920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 24.96549219s ago: executing program 0 (id=4923): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 24.881967719s ago: executing program 0 (id=4926): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.881170289s ago: executing program 0 (id=4928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 24.689197318s ago: executing program 0 (id=4934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000000)="9d1a13725d2ac496d8524b29015cb6177fb70266cdc1eb7946d14ecd1f78270c68e3f287a9b3e6a3488c9316058279eedbd33508792be7a7593d9ba300e8fa232b1aa6fc7d44445a36ab8bbc3a444413723bb8ae3cfff5b54875408f8466dbae9712e91f093fac4ce3", 0x69}, {&(0x7f0000000580)="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", 0x101}], 0x2) 24.621708468s ago: executing program 32 (id=4934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000000)="9d1a13725d2ac496d8524b29015cb6177fb70266cdc1eb7946d14ecd1f78270c68e3f287a9b3e6a3488c9316058279eedbd33508792be7a7593d9ba300e8fa232b1aa6fc7d44445a36ab8bbc3a444413723bb8ae3cfff5b54875408f8466dbae9712e91f093fac4ce3", 0x69}, {&(0x7f0000000580)="3769b1010037e8a9ae43aeb3b548006a10d9c0e698b8c6691fab1c1a020361621d101a1f7e7025966793befc048be74f16a9dacc57eb770f36672b415dc746636a3642063b6d12c7a6aff9b6f49639a73a0fb7c7b211072597e0f0bc8c61a754cb46c24460fd60526ac2dcef7c464378bd5eee2ab75f308755636caf8b9c6c4d1305a9a083df98286683c72d6c0061b801593821b6d721dcddcfe23eaf7269f3633fa93065de979b306529e992133b79f0980c71367bf895bbaed6c9a803f5e33241a67f8d4241a32cfd506ca7c0329e70040f5886b43fa75c493b52d23588c6c7afd6acf594d24ecd216126c186c85545cb03c5582754b870b79a9e1ca822058d", 0x101}], 0x2) 24.372376496s ago: executing program 3 (id=4944): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readahead(r0, 0x9, 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 24.254195335s ago: executing program 3 (id=4946): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x0, 0x80, 0x3, 0x40007fff}, {0x2, 0x4, 0x0, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 24.171887374s ago: executing program 3 (id=4948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = socket(0x2, 0x3, 0xff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000480)=[{0x20, 0xfc, 0xff, 0xfffff00c}, {0xb1, 0xf0, 0xee, 0x7ffff020}, {0x6, 0xfc, 0x2, 0x4}]}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x20) 24.156346264s ago: executing program 3 (id=4949): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.042952333s ago: executing program 3 (id=4950): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 23.109854117s ago: executing program 3 (id=4960): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 23.109578167s ago: executing program 33 (id=4960): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 4.666654142s ago: executing program 6 (id=5347): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r1, r1, 0x0, 0x80000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x10) write$binfmt_script(r2, 0x0, 0x0) 3.265320573s ago: executing program 6 (id=5371): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 2.88096266s ago: executing program 6 (id=5382): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x0, 0x267a4e37}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) 2.668049878s ago: executing program 6 (id=5387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64000000e0fffc52f47cabd0c5c80baea7f6620bd94486776c38f85bc49967f380beb4762ea8003043524ceaffbeedbe1fda3cc9df80e60db6843040fcc4d8ac26ce1e6d654003858e5f7d31a69ce03a503cb4a64b06b85a6d3ecea12b4a3693eda521828ed7be7ac011b5fed2ab921a1e1fb9aa6aa47fe139a9e96a29b699340af649b6f0f7a4912f3a4f16"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9, 0x53, 0x5, 0x4}, {0x8, 0x0, 0x8f, 0x5}]}) 1.4026141s ago: executing program 6 (id=5417): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) 1.300114749s ago: executing program 4 (id=5420): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x5, 0x7, "c341786f"}}}}}}, 0x0) 1.210075289s ago: executing program 4 (id=5422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 903.301086ms ago: executing program 5 (id=5428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c00)="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", 0xffd}, {&(0x7f0000000300)='P\n@#', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)='C', 0x1}], 0x1}}], 0x2, 0x20000041) close(r1) 837.551996ms ago: executing program 5 (id=5431): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000190c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2003001, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x1c45b1, &(0x7f0000002080)=ANY=[], 0x1, 0x120e, &(0x7f00000004c0)="$eJzs3E+LG2UcB/Bf47bdbt0/1lptD/qgF09Ddw+eBFlkC7IBpXaFVhCm7kRDxiRkwkJErJ68+jrEozdB9AXspa/B21567EEcabK1TY3VPXQj9vO5PD/ye76ZeQgZmDBPDt789rNOq8pa+TAaJ05Eox+R7qZI0Yj7Xt6ejNdvbG82m1tXU7qyeW39jZTSyis/ffjF96/+PDz7wQ8rP56O/bWPDu5s/Lp/Yf/iwe/XPm1XqV2lbm+Y8nSz1xvmN8si7barTpbSe2WRV0Vqd6tiMNVvlb1+f5Ty7u7yUn9QVFXKu6PUKUZp2EvDwSjln+TtbsqyLC0vBX/r5D9P2fnubl3XEXV9Mk5FXdf1mViKs/FsLMdKfBURz8W5eD7OxwtxIV6Ml+LieNZxnD4AAAAAAAAAAAAAAAAAAAA8PR63/3811uz/BwAAAAAAAAAAAAAAAAAAgGPw/vUb25vN5tbVlBYjym/2dvZ2JuOkv9mKdpRRxOVYjd9ivPt/YlJfeae5dTmNrcXX5a3D/K29nWem8+vjvxM4zC+Me/fz65N8ms6fjqWH8xuxGudnH39jZn4xXn/toXwWq3H74+hFGbvjYz/If7me0tvvNh/JXxrPAwAAgP+DLP1p5v17ls3on7o3TvJH+H3gkfvrhbi0MN+1E1GNPu/kZVkMpovFv7yi+PdF4wm9cyP+Iwt8Soszh1+aI8bvXeZmt365EzG35dw+99g5c74wcSwefOjzPhMAAAAAAAAAAACO4gk/abgQM54se2s+SwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFABAAD//7TJyGQ=") r1 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) 816.203626ms ago: executing program 2 (id=5432): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, 0x0, 0x18}) io_uring_enter(r0, 0x47fa, 0x0, 0x45, 0x0, 0x0) 795.698066ms ago: executing program 2 (id=5433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 670.050065ms ago: executing program 2 (id=5435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 615.861695ms ago: executing program 2 (id=5436): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) 597.569174ms ago: executing program 5 (id=5438): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x900000d2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 543.873194ms ago: executing program 2 (id=5439): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000000)={[{@nouid32}, {@grpquota}, {@abort}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) 497.545374ms ago: executing program 6 (id=5440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 497.086774ms ago: executing program 5 (id=5441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e0000100000000000000000048300080012"], 0x80}}, 0x4810) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 357.995063ms ago: executing program 4 (id=5442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000004c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 259.168652ms ago: executing program 4 (id=5443): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x1e, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) 166.047832ms ago: executing program 5 (id=5445): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="270e000000000000000004"], 0x88}, 0x1, 0x40030000000000}, 0x0) 165.888952ms ago: executing program 4 (id=5446): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "ff0f000001001300", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r1) 156.325171ms ago: executing program 1 (id=5447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000004c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 138.715341ms ago: executing program 1 (id=5448): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 133.069031ms ago: executing program 4 (id=5449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="9c85009b00", 0x5}], 0x1}}], 0x1, 0x2c000011) close(r2) 104.324301ms ago: executing program 1 (id=5450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 42.044631ms ago: executing program 1 (id=5451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 41.805691ms ago: executing program 1 (id=5452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 34.32642ms ago: executing program 1 (id=5453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc1000002e00000129bd7000fbdbdf250a0000000800b300", @ANYRES32, @ANYBLOB='8\x00', @ANYRES32=0xee01, @ANYBLOB="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"], 0x10bc}, 0x1, 0x0, 0x0, 0x404c041}, 0x4004000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETA(r2, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 155.91µs ago: executing program 5 (id=5454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd74511f465bbbd5de01000000f9044677d5883600c9aba60800", "0000f600", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r0, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 0s ago: executing program 2 (id=5455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) kernel console output (not intermixed with test programs): 2295] syz.2.3845[12295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.126967][T12295] syz.2.3845[12295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.168847][T12295] syz.2.3845[12295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.191834][T12293] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 151.241290][T12293] loop1: detected capacity change from 0 to 512 [ 151.249124][T12293] EXT4-fs: Ignoring removed nobh option [ 151.280868][T12303] futex_wake_op: syz.0.3847 tries to shift op by -1; fix this program [ 151.313781][T12293] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.313907][T12293] ext4 filesystem being mounted at /840/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.411923][ T3304] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 151.448792][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 151.448867][ T29] audit: type=1326 audit(2000003139.733:188869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.525639][ T29] audit: type=1326 audit(2000003139.775:188870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.549437][ T29] audit: type=1326 audit(2000003139.775:188871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.573201][ T29] audit: type=1326 audit(2000003139.775:188872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.596903][ T29] audit: type=1326 audit(2000003139.775:188873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.596940][ T29] audit: type=1326 audit(2000003139.775:188874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.596971][ T29] audit: type=1326 audit(2000003139.775:188875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.597012][ T29] audit: type=1326 audit(2000003139.775:188876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.597106][ T29] audit: type=1326 audit(2000003139.775:188877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.597140][ T29] audit: type=1326 audit(2000003139.775:188878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 151.637039][T12324] loop3: detected capacity change from 0 to 512 [ 151.663343][T12324] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 151.668105][T12324] loop3: detected capacity change from 0 to 512 [ 151.668366][T12324] EXT4-fs: Ignoring removed nobh option [ 151.685844][T12324] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.685953][T12324] ext4 filesystem being mounted at /750/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.688724][T12324] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 152.195372][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 152.273296][T12338] syz.0.3860[12338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.342910][T12346] loop0: detected capacity change from 0 to 512 [ 152.737159][T12346] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 152.825154][T12346] loop0: detected capacity change from 0 to 512 [ 152.877930][T12346] EXT4-fs: Ignoring removed nobh option [ 153.104881][T12346] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.160573][T12346] ext4 filesystem being mounted at /772/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.224107][ T3295] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 153.451424][T12364] futex_wake_op: syz.3.3864 tries to shift op by -1; fix this program [ 153.514510][T12370] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 153.593147][T12374] loop1: detected capacity change from 0 to 8192 [ 154.169170][T12381] hub 2-0:1.0: USB hub found [ 154.186626][T12381] hub 2-0:1.0: 8 ports detected [ 154.214252][T12387] loop3: detected capacity change from 0 to 512 [ 154.268686][T12387] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 154.313549][T12387] loop3: detected capacity change from 0 to 512 [ 154.337643][T12387] EXT4-fs: Ignoring removed nobh option [ 154.345508][T12398] loop4: detected capacity change from 0 to 512 [ 154.383894][T12387] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.414272][T12387] ext4 filesystem being mounted at /755/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.442818][T12398] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 154.481193][T12398] loop4: detected capacity change from 0 to 512 [ 154.509998][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 154.529285][T12398] EXT4-fs: Ignoring removed nobh option [ 154.561289][T12412] loop1: detected capacity change from 0 to 512 [ 154.574892][T12398] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.627261][T12398] ext4 filesystem being mounted at /714/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.651201][T12412] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 154.676001][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 154.728993][T12412] loop1: detected capacity change from 0 to 512 [ 154.757292][T12412] EXT4-fs: Ignoring removed nobh option [ 154.787731][T12412] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.822822][T12412] ext4 filesystem being mounted at /849/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.914665][ T3304] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.031547][T12431] binfmt_misc: register: failed to install interpreter file ./file0 [ 155.067826][T12431] loop4: detected capacity change from 0 to 512 [ 155.329849][T12439] loop0: detected capacity change from 0 to 512 [ 155.381008][T12437] loop4: detected capacity change from 0 to 8192 [ 155.390870][T12439] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 155.435811][T12439] loop0: detected capacity change from 0 to 512 [ 155.460795][T12439] EXT4-fs: Ignoring removed nobh option [ 155.494003][T12439] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.507418][T12439] ext4 filesystem being mounted at /775/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.550108][ T3295] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.602319][T12451] loop0: detected capacity change from 0 to 512 [ 155.651442][T12451] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 155.676378][T12451] loop0: detected capacity change from 0 to 512 [ 155.703389][T12451] EXT4-fs: Ignoring removed nobh option [ 155.742270][T12451] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.766700][T12451] ext4 filesystem being mounted at /776/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.854687][ T3295] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.921660][T12460] loop0: detected capacity change from 0 to 512 [ 155.991885][T12460] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 156.034048][T12460] loop0: detected capacity change from 0 to 512 [ 156.052123][T12460] EXT4-fs: Ignoring removed nobh option [ 156.077852][T12460] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.091372][T12460] ext4 filesystem being mounted at /777/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.207152][T12470] syz.1.3905: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 156.221815][T12470] CPU: 0 UID: 0 PID: 12470 Comm: syz.1.3905 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 156.221847][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.221903][T12470] Call Trace: [ 156.221911][T12470] [ 156.221919][T12470] dump_stack_lvl+0xf2/0x150 [ 156.221965][T12470] dump_stack+0x15/0x1a [ 156.221995][T12470] warn_alloc+0x145/0x1b0 [ 156.222096][T12470] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 156.222139][T12470] ? common_lsm_audit+0x96f/0x1020 [ 156.222249][T12470] __vmalloc_node_range_noprof+0xaa/0xe80 [ 156.222289][T12470] ? __rcu_read_unlock+0x4e/0x70 [ 156.222328][T12470] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 156.222366][T12470] ? __dequeue_entity+0x22/0x310 [ 156.222525][T12470] ? should_fail_ex+0x31/0x230 [ 156.222614][T12470] ? xskq_create+0x36/0xd0 [ 156.222644][T12470] ? should_failslab+0x8f/0xb0 [ 156.222684][T12470] vmalloc_user_noprof+0x59/0x70 [ 156.222723][T12470] ? xskq_create+0x79/0xd0 [ 156.222768][T12470] xskq_create+0x79/0xd0 [ 156.222805][T12470] xsk_init_queue+0x82/0xd0 [ 156.222835][T12470] xsk_setsockopt+0x409/0x520 [ 156.222889][T12470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.222921][T12470] __sys_setsockopt+0x187/0x200 [ 156.222962][T12470] __x64_sys_setsockopt+0x66/0x80 [ 156.223120][T12470] x64_sys_call+0x282e/0x2dc0 [ 156.223162][T12470] do_syscall_64+0xc9/0x1c0 [ 156.223199][T12470] ? clear_bhb_loop+0x55/0xb0 [ 156.223282][T12470] ? clear_bhb_loop+0x55/0xb0 [ 156.223314][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.223349][T12470] RIP: 0033:0x7fe0f29d5d29 [ 156.223448][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.223471][T12470] RSP: 002b:00007fe0f1041038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.223493][T12470] RAX: ffffffffffffffda RBX: 00007fe0f2bc5fa0 RCX: 00007fe0f29d5d29 [ 156.223506][T12470] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 156.223517][T12470] RBP: 00007fe0f2a51b08 R08: 0000000000000004 R09: 0000000000000000 [ 156.223529][T12470] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 156.223541][T12470] R13: 0000000000000000 R14: 00007fe0f2bc5fa0 R15: 00007ffcf6513928 [ 156.223560][T12470] [ 156.223610][T12470] Mem-Info: [ 156.291959][T12473] loop4: detected capacity change from 0 to 512 [ 156.296407][T12470] active_anon:21490 inactive_anon:9 isolated_anon:0 [ 156.296407][T12470] active_file:14312 inactive_file:12290 isolated_file:0 [ 156.296407][T12470] unevictable:0 dirty:174 writeback:0 [ 156.296407][T12470] slab_reclaimable:2933 slab_unreclaimable:14016 [ 156.296407][T12470] mapped:28651 shmem:16713 pagetables:1136 [ 156.296407][T12470] sec_pagetables:0 bounce:0 [ 156.296407][T12470] kernel_misc_reclaimable:0 [ 156.296407][T12470] free:1873245 free_pcp:3203 free_cma:0 [ 156.341411][T12473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.343380][T12470] Node 0 active_anon:86076kB inactive_anon:36kB active_file:57248kB inactive_file:49160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114604kB dirty:696kB writeback:0kB shmem:66852kB writeback_tmp:0kB kernel_stack:3296kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no [ 156.349121][T12473] ext4 filesystem being mounted at /723/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.353209][T12470] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.581375][T12470] lowmem_reserve[]: 0 2884 7863 0 [ 156.586542][T12470] Node 0 DMA32 free:2950408kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 156.615328][T12470] lowmem_reserve[]: 0 0 4978 0 [ 156.620113][T12470] Node 0 Normal free:4526892kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:86152kB inactive_anon:36kB active_file:57248kB inactive_file:49244kB unevictable:0kB writepending:364kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:9104kB local_pcp:7844kB free_cma:0kB [ 156.650309][T12470] lowmem_reserve[]: 0 0 0 0 [ 156.654925][T12470] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.667819][T12470] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 1*16kB (M) 5*32kB (M) 5*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950408kB [ 156.683990][T12470] Node 0 Normal: 769*4kB (UME) 777*8kB (UME) 432*16kB (UME) 267*32kB (UME) 276*64kB (UME) 97*128kB (UM) 89*256kB (UM) 48*512kB (UM) 27*1024kB (UM) 19*2048kB (UM) 1064*4096kB (UME) = 4526892kB [ 156.703169][T12470] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=1 hugepages_size=2048kB [ 156.712479][T12470] 43349 total pagecache pages [ 156.717190][T12470] 13 pages in swap cache [ 156.721477][T12470] Free swap = 124232kB [ 156.725634][T12470] Total swap = 124996kB [ 156.729895][T12470] 2097051 pages RAM [ 156.733810][T12470] 0 pages HighMem/MovableOnly [ 156.738565][T12470] 80174 pages reserved [ 156.819908][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.833204][ T3295] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 156.906428][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 156.906443][ T29] audit: type=1400 audit(2000003145.465:188911): avc: denied { create } for pid=12486 comm="syz.4.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 156.984483][ T29] audit: type=1400 audit(2000003145.497:188912): avc: denied { bind } for pid=12486 comm="syz.4.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 157.054264][ T29] audit: type=1326 audit(2000003145.539:188913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.078072][ T29] audit: type=1326 audit(2000003145.539:188914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.101800][ T29] audit: type=1326 audit(2000003145.539:188915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.125528][ T29] audit: type=1326 audit(2000003145.539:188916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.149360][ T29] audit: type=1326 audit(2000003145.539:188917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.173031][ T29] audit: type=1326 audit(2000003145.539:188918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.196819][ T29] audit: type=1326 audit(2000003145.539:188919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.220525][ T29] audit: type=1326 audit(2000003145.539:188920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 157.250990][T12497] loop1: detected capacity change from 0 to 512 [ 157.341804][T12497] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 157.367385][T12497] loop1: detected capacity change from 0 to 512 [ 157.395653][T12497] EXT4-fs: Ignoring removed nobh option [ 157.444858][T12497] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.506309][T12497] ext4 filesystem being mounted at /855/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.591966][T12511] loop4: detected capacity change from 0 to 512 [ 157.630565][ T3304] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 157.649833][T12511] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 157.691094][T12487] TCP: out of memory -- consider tuning tcp_mem [ 157.701265][T12511] loop4: detected capacity change from 0 to 512 [ 157.729526][T12511] EXT4-fs: Ignoring removed nobh option [ 157.760695][T12511] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.811074][T12511] ext4 filesystem being mounted at /729/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.879043][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 158.148166][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.156694][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.421515][T12550] loop3: detected capacity change from 0 to 512 [ 158.471592][T12550] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 158.485209][T12550] loop3: detected capacity change from 0 to 512 [ 158.503647][T12550] EXT4-fs: Ignoring removed nobh option [ 158.532765][T12550] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.556603][T12550] ext4 filesystem being mounted at /767/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.611398][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 159.431335][T12618] loop3: detected capacity change from 0 to 128 [ 159.586511][T12626] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.651863][T12632] vlan2: entered allmulticast mode [ 159.770629][T12636] loop3: detected capacity change from 0 to 512 [ 159.842014][T12636] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 159.886052][T12636] loop3: detected capacity change from 0 to 512 [ 159.917622][T12636] EXT4-fs: Ignoring removed nobh option [ 159.965673][T12636] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.000937][T12636] ext4 filesystem being mounted at /775/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.114263][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 160.236082][T12656] loop3: detected capacity change from 0 to 512 [ 160.245815][T12660] loop4: detected capacity change from 0 to 512 [ 160.314887][T12660] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 160.322921][T12656] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 160.353583][T12660] loop4: detected capacity change from 0 to 512 [ 160.384773][T12656] loop3: detected capacity change from 0 to 512 [ 160.384998][T12660] EXT4-fs: Ignoring removed nobh option [ 160.414989][T12656] EXT4-fs: Ignoring removed nobh option [ 160.533901][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.567070][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.587627][T12660] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.600669][T12656] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.659716][T12660] ext4 filesystem being mounted at /743/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.672214][T12656] ext4 filesystem being mounted at /776/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.734790][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 160.803155][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 160.927388][T12685] loop4: detected capacity change from 0 to 512 [ 161.004193][T12685] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 161.042095][T12685] loop4: detected capacity change from 0 to 512 [ 161.082022][T12685] EXT4-fs: Ignoring removed nobh option [ 161.114307][T12685] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.186900][T12685] ext4 filesystem being mounted at /746/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.693366][T12748] loop4: detected capacity change from 0 to 128 [ 161.781908][T12753] ebtables: ebtables: counters copy to user failed while replacing table [ 161.787600][T12757] bpf_get_probe_write_proto: 2 callbacks suppressed [ 161.787620][T12757] syz.4.4010[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.830197][T12757] syz.4.4010[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.861180][T12757] syz.4.4010[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.896819][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.949651][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.007213][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4016'. [ 162.082397][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 162.082415][ T29] audit: type=1400 audit(2000003150.893:188976): avc: denied { write } for pid=12778 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.172468][T12785] loop3: detected capacity change from 0 to 512 [ 162.215697][ T29] audit: type=1107 audit(2000003151.040:188977): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 162.259805][T12785] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 162.308042][T12785] loop3: detected capacity change from 0 to 512 [ 162.336071][T12785] EXT4-fs: Ignoring removed nobh option [ 162.366526][T12785] ext4 filesystem being mounted at /787/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.478300][T12800] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 162.486324][T12800] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4029'. [ 162.535258][T12804] syz.3.4030[12804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.535372][T12804] syz.3.4030[12804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.578163][T12802] syzkaller0: entered promiscuous mode [ 162.595222][T12802] syzkaller0: entered allmulticast mode [ 162.602056][T12804] syz.3.4030[12804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.612166][T12807] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 162.614583][ T29] audit: type=1400 audit(2000003151.450:188978): avc: denied { load_policy } for pid=12806 comm="syz.2.4032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.691547][T12807] SELinux: failed to load policy [ 162.779633][T12816] loop3: detected capacity change from 0 to 512 [ 162.837166][T12816] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 162.855521][T12816] loop3: detected capacity change from 0 to 512 [ 162.874140][T12816] EXT4-fs: Ignoring removed nobh option [ 162.893612][T12816] ext4 filesystem being mounted at /791/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.970875][T12825] loop4: detected capacity change from 0 to 512 [ 163.059393][T12825] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 163.091964][T12825] loop4: detected capacity change from 0 to 512 [ 163.132650][T12825] EXT4-fs: Ignoring removed nobh option [ 163.180736][T12825] ext4 filesystem being mounted at /757/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.181425][T12841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4044'. [ 163.450268][T12857] syz.1.4052[12857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.450389][T12857] syz.1.4052[12857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.489934][T12857] syz.1.4052[12857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.829191][T12872] netlink: 'syz.2.4057': attribute type 1 has an invalid length. [ 163.848532][T12872] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4057'. [ 163.902257][T12875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4060'. [ 163.915275][ T29] audit: type=1326 audit(2000003152.825:188979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 163.994283][ T29] audit: type=1326 audit(2000003152.857:188980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 164.018902][ T29] audit: type=1326 audit(2000003152.857:188981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 164.043088][ T29] audit: type=1326 audit(2000003152.857:188982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 164.066890][ T29] audit: type=1326 audit(2000003152.857:188983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 164.090860][ T29] audit: type=1326 audit(2000003152.857:188984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 164.114927][ T29] audit: type=1326 audit(2000003152.857:188985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.3.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 164.167563][T12890] SELinux: syz.2.4067 (12890) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 164.314435][T12901] openvswitch: netlink: Duplicate key (type 32). [ 164.465287][T12912] loop3: detected capacity change from 0 to 512 [ 164.488272][T12912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.542504][T12912] EXT4-fs (loop3): 1 truncate cleaned up [ 164.589033][T12912] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.4077: attempt to clear invalid blocks 1886221359 len 1 [ 164.611692][T12912] EXT4-fs (loop3): Remounting filesystem read-only [ 164.730532][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 164.739503][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 164.893180][T12938] loop3: detected capacity change from 0 to 2048 [ 164.951928][T12938] Alternate GPT is invalid, using primary GPT. [ 164.958431][T12938] loop3: p1 p2 p3 [ 164.976814][ T2998] Alternate GPT is invalid, using primary GPT. [ 164.983093][ T2998] loop3: p1 p2 p3 [ 165.049645][T10295] udevd[10295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 165.054475][T10172] udevd[10172]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 165.110611][T10295] udevd[10295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 165.111797][T10172] udevd[10172]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 165.131475][T12027] udevd[12027]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 166.032028][T12986] siw: device registration error -23 [ 166.125567][T12990] loop4: detected capacity change from 0 to 512 [ 166.186318][T12990] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 166.246288][T12990] loop4: detected capacity change from 0 to 512 [ 166.272382][T12990] EXT4-fs: Ignoring removed nobh option [ 166.306560][T12990] ext4 filesystem being mounted at /770/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.357224][T12990] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 166.534542][T13022] loop4: detected capacity change from 0 to 2048 [ 166.607748][T13022] Alternate GPT is invalid, using primary GPT. [ 166.614072][T13022] loop4: p1 p2 p3 [ 166.833192][T13036] atomic_op ffff888107a54d28 conn xmit_atomic 0000000000000000 [ 166.977586][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 166.977629][ T29] audit: type=1107 audit(2000003156.038:189059): pid=13041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='DkÑ<»¢' [ 167.093841][T13049] loop4: detected capacity change from 0 to 512 [ 167.180876][T13049] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 167.222285][T13049] loop4: detected capacity change from 0 to 512 [ 167.253944][T13049] EXT4-fs: Ignoring removed nobh option [ 167.307174][T13049] ext4 filesystem being mounted at /774/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.322058][T13049] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 167.574774][T13077] loop4: detected capacity change from 0 to 512 [ 167.612953][ T29] audit: type=1400 audit(2000003156.699:189060): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.668600][T13077] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 167.678735][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.684597][ T29] audit: type=1326 audit(2000003156.731:189061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.710811][ T29] audit: type=1326 audit(2000003156.731:189062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.710981][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.734554][ T29] audit: type=1326 audit(2000003156.731:189063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.766572][ T29] audit: type=1326 audit(2000003156.731:189064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.790324][ T29] audit: type=1326 audit(2000003156.731:189065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.814063][ T29] audit: type=1326 audit(2000003156.731:189066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.837816][ T29] audit: type=1326 audit(2000003156.731:189067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.861556][ T29] audit: type=1326 audit(2000003156.731:189068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 167.897818][T13077] loop4: detected capacity change from 0 to 512 [ 167.922934][T13077] EXT4-fs: Ignoring removed nobh option [ 167.963634][T13077] ext4 filesystem being mounted at /775/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.588921][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4165'. [ 168.596223][T13127] loop4: detected capacity change from 0 to 512 [ 168.777492][T13127] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 168.830129][T13127] loop4: detected capacity change from 0 to 512 [ 168.863957][T13127] EXT4-fs: Ignoring removed nobh option [ 168.910778][T13127] ext4 filesystem being mounted at /782/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.100813][T13141] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 169.174513][ T3353] kernel write not supported for file /vcs (pid: 3353 comm: kworker/0:2) [ 169.260254][T13164] netlink: 'syz.0.4192': attribute type 4 has an invalid length. [ 169.296952][T13164] netlink: 'syz.0.4192': attribute type 4 has an invalid length. [ 169.797544][T13215] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 169.925262][T13226] syz.0.4209[13226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.925336][T13226] syz.0.4209[13226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.984281][T13226] syz.0.4209[13226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.042045][T13236] ALSA: seq fatal error: cannot create timer (-22) [ 170.066913][T13241] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4213'. [ 170.079195][T13231] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 170.542729][T13269] loop4: detected capacity change from 0 to 512 [ 170.581341][T13274] 9pnet: Could not find request transport: t [ 170.610101][T13269] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 170.656296][T13269] loop4: detected capacity change from 0 to 512 [ 170.674363][T13269] EXT4-fs: Ignoring removed nobh option [ 170.716801][T13269] ext4 filesystem being mounted at /800/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.800521][T13292] syz.2.4238[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.802942][T13292] syz.2.4238[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.815971][T13292] syz.2.4238[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.206156][T13312] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 171.299265][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4246'. [ 171.656534][T13321] loop3: detected capacity change from 0 to 2048 [ 171.686396][T13323] vhci_hcd: default hub control req: 0300 v0302 i0000 l0 [ 171.904287][T13339] loop4: detected capacity change from 0 to 512 [ 171.996558][T13339] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 172.059522][T13339] loop4: detected capacity change from 0 to 512 [ 172.086125][T13339] EXT4-fs: Ignoring removed nobh option [ 172.115962][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 172.115979][ T29] audit: type=1400 audit(2000003161.435:189092): avc: denied { write } for pid=13348 comm="syz.2.4260" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.177139][T13339] ext4 filesystem being mounted at /804/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.313196][T13364] macsec0: entered promiscuous mode [ 172.456814][T13378] loop4: detected capacity change from 0 to 512 [ 172.512598][T13378] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 172.556904][T13378] loop4: detected capacity change from 0 to 512 [ 172.582862][T13378] EXT4-fs: Ignoring removed nobh option [ 172.653733][T13378] ext4 filesystem being mounted at /807/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.759361][ T29] audit: type=1326 audit(2000003162.117:189093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.2.4280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x0 [ 172.887746][ T29] audit: type=1326 audit(2000003162.243:189094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 172.937041][ T29] audit: type=1326 audit(2000003162.274:189095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 172.960957][ T29] audit: type=1326 audit(2000003162.274:189096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 172.984792][ T29] audit: type=1326 audit(2000003162.274:189097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 173.008616][ T29] audit: type=1326 audit(2000003162.274:189098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 173.032540][ T29] audit: type=1326 audit(2000003162.274:189099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 173.056319][ T29] audit: type=1326 audit(2000003162.274:189100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 173.080082][ T29] audit: type=1326 audit(2000003162.274:189101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.1.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 173.125769][T13411] netlink: 'syz.1.4285': attribute type 3 has an invalid length. [ 173.219883][T13417] loop4: detected capacity change from 0 to 512 [ 173.276267][T13417] ext4 filesystem being mounted at /809/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.412842][T13425] syzkaller0: entered promiscuous mode [ 173.418549][T13425] syzkaller0: entered allmulticast mode [ 174.642308][T13461] loop3: detected capacity change from 0 to 512 [ 174.733569][T13461] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 174.761516][T13461] loop3: detected capacity change from 0 to 512 [ 174.782695][T13461] EXT4-fs: Ignoring removed nobh option [ 174.820390][T13461] EXT4-fs mount: 27 callbacks suppressed [ 174.820410][T13461] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.859064][T13461] ext4 filesystem being mounted at /834/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.892215][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 176.242870][T13567] loop3: detected capacity change from 0 to 512 [ 176.277465][T13570] loop4: detected capacity change from 0 to 512 [ 176.298363][T13567] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 176.342826][T13567] loop3: detected capacity change from 0 to 512 [ 176.355275][T13570] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 176.355780][T13567] EXT4-fs: Ignoring removed nobh option [ 176.389204][T13570] loop4: detected capacity change from 0 to 512 [ 176.415376][T13570] EXT4-fs: Ignoring removed nobh option [ 176.425162][T13579] 9pnet: Could not find request transport: f [ 176.454460][T13567] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.481711][T13570] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.494489][T13567] ext4 filesystem being mounted at /849/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.536447][T13570] ext4 filesystem being mounted at /820/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.575636][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 176.626640][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 176.719153][T13607] loop4: detected capacity change from 0 to 512 [ 176.801263][T13607] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 176.859469][T13607] loop4: detected capacity change from 0 to 512 [ 176.899117][T13607] EXT4-fs: Ignoring removed nobh option [ 176.944260][T13607] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.970323][T13607] ext4 filesystem being mounted at /822/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.011162][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 178.113212][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 178.185959][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 178.186052][ T29] audit: type=1326 audit(2000003167.797:189180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.292228][ T29] audit: type=1326 audit(2000003167.850:189181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.316101][ T29] audit: type=1326 audit(2000003167.850:189182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.339834][ T29] audit: type=1326 audit(2000003167.850:189183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.363761][ T29] audit: type=1326 audit(2000003167.850:189184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.387498][ T29] audit: type=1326 audit(2000003167.850:189185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.411468][ T29] audit: type=1326 audit(2000003167.850:189186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.435169][ T29] audit: type=1326 audit(2000003167.850:189187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.458852][ T29] audit: type=1326 audit(2000003167.850:189188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.482623][ T29] audit: type=1326 audit(2000003167.850:189189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 178.644575][T13717] loop3: detected capacity change from 0 to 512 [ 178.728167][T13717] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 178.783605][T13731] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4426'. [ 178.795892][T13717] loop3: detected capacity change from 0 to 512 [ 178.864032][T13717] EXT4-fs: Ignoring removed nobh option [ 178.927683][T13717] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.978939][T13717] ext4 filesystem being mounted at /859/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.041417][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 179.185234][T13756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 179.358638][T13770] loop3: detected capacity change from 0 to 512 [ 179.419966][T13770] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 179.474511][T13770] loop3: detected capacity change from 0 to 512 [ 179.511623][T13770] EXT4-fs: Ignoring removed nobh option [ 179.561286][T13770] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.605201][T13770] ext4 filesystem being mounted at /863/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.681929][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 179.957778][T13828] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4468'. [ 179.981349][T13830] loop3: detected capacity change from 0 to 512 [ 180.027660][T13830] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 180.067749][T13830] loop3: detected capacity change from 0 to 512 [ 180.120952][T13830] EXT4-fs: Ignoring removed nobh option [ 180.180764][T13830] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.235084][T13830] ext4 filesystem being mounted at /866/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.334573][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 180.394876][T13852] loop3: detected capacity change from 0 to 512 [ 180.450689][T13852] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 180.486234][T13852] loop3: detected capacity change from 0 to 512 [ 180.504723][T13852] EXT4-fs: Ignoring removed nobh option [ 180.529183][T13859] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.561843][T13852] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.599129][T13852] ext4 filesystem being mounted at /867/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.633262][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 180.763158][T13877] loop3: detected capacity change from 0 to 512 [ 180.902904][T13877] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 180.936287][T13877] loop3: detected capacity change from 0 to 512 [ 180.966269][T13877] EXT4-fs: Ignoring removed nobh option [ 180.990944][T13877] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.046493][T13877] ext4 filesystem being mounted at /869/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.165069][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 181.459888][T13922] loop3: detected capacity change from 0 to 512 [ 181.649476][T13922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.664151][T13922] ext4 filesystem being mounted at /872/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.840535][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.022114][T13942] vhci_hcd: invalid port number 236 [ 182.027478][T13942] vhci_hcd: default hub control req: 030f v0f00 i00ec l0 [ 182.071301][T13948] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 182.175466][T13956] loop3: detected capacity change from 0 to 1024 [ 182.240198][T13956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.279750][T13956] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.3.4520: corrupted in-inode xattr: bad magic number in in-inode xattr [ 182.296752][T13956] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.4520: attempt to clear invalid blocks 1886221359 len 1 [ 182.331659][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.613577][T13987] loop3: detected capacity change from 0 to 2048 [ 182.645722][T13987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.761067][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.763565][T13999] loop4: detected capacity change from 0 to 512 [ 182.892779][T13999] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 182.956719][T13999] loop4: detected capacity change from 0 to 512 [ 182.989013][T13999] EXT4-fs: Ignoring removed nobh option [ 183.046695][T13999] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.094605][T13999] ext4 filesystem being mounted at /853/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.124346][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 183.234915][T14029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4549'. [ 183.291036][T14032] loop4: detected capacity change from 0 to 512 [ 183.335236][T14032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.350906][T14032] ext4 filesystem being mounted at /855/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.442889][T14038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4554'. [ 183.519622][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.589890][T14053] loop4: detected capacity change from 0 to 512 [ 183.669960][T14053] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 183.746332][T14053] loop4: detected capacity change from 0 to 512 [ 183.777139][T14053] EXT4-fs: Ignoring removed nobh option [ 183.852319][T14053] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.873609][T14053] ext4 filesystem being mounted at /856/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.909834][T14072] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 183.940411][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 184.055042][T14080] loop3: detected capacity change from 0 to 512 [ 184.145577][T14080] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 184.188239][T14080] loop3: detected capacity change from 0 to 512 [ 184.214528][T14080] EXT4-fs: Ignoring removed nobh option [ 184.256843][T14080] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.273441][T14080] ext4 filesystem being mounted at /890/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.293412][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 184.293426][ T29] audit: type=1326 audit(2000003174.223:189360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.360678][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 184.412212][ T29] audit: type=1326 audit(2000003174.254:189361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.436443][ T29] audit: type=1326 audit(2000003174.254:189362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.460139][ T29] audit: type=1326 audit(2000003174.254:189363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.483906][ T29] audit: type=1326 audit(2000003174.254:189364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.507728][ T29] audit: type=1326 audit(2000003174.254:189365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.531411][ T29] audit: type=1326 audit(2000003174.254:189366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.555142][ T29] audit: type=1326 audit(2000003174.254:189367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.578862][ T29] audit: type=1326 audit(2000003174.254:189368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.602682][ T29] audit: type=1326 audit(2000003174.254:189369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f29d5d29 code=0x7ffc0000 [ 184.801367][T14121] loop4: detected capacity change from 0 to 512 [ 184.882673][T14121] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 184.899537][T14121] loop4: detected capacity change from 0 to 512 [ 184.922519][T14121] EXT4-fs: Ignoring removed nobh option [ 184.951684][T14121] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.997980][T14121] ext4 filesystem being mounted at /862/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.103623][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 185.162543][T14136] loop4: detected capacity change from 0 to 512 [ 185.262029][T14136] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 185.269530][T14145] loop3: detected capacity change from 0 to 2048 [ 185.304772][T14136] loop4: detected capacity change from 0 to 512 [ 185.327732][T14136] EXT4-fs: Ignoring removed nobh option [ 185.341548][T14145] loop3: p1 < > p4 [ 185.361407][T14145] loop3: p4 size 8388608 extends beyond EOD, truncated [ 185.379387][T14136] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.436593][ T2998] loop3: p1 < > p4 [ 185.444710][T14136] ext4 filesystem being mounted at /863/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.458165][ T2998] loop3: p4 size 8388608 extends beyond EOD, truncated [ 185.515491][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 185.537739][T14161] loop3: detected capacity change from 0 to 512 [ 185.545537][T10295] udevd[10295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 185.560195][T12027] udevd[12027]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 185.628108][T10295] udevd[10295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 185.643688][T14171] loop4: detected capacity change from 0 to 512 [ 185.655106][T14161] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 185.656238][T12027] udevd[12027]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 185.745390][T14171] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 185.767763][T14171] loop4: detected capacity change from 0 to 512 [ 185.783244][T14171] EXT4-fs: Ignoring removed nobh option [ 185.833053][T14171] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.845815][T14171] ext4 filesystem being mounted at /864/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.914093][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 186.766314][T14219] loop4: detected capacity change from 0 to 512 [ 186.816290][T14219] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 186.847844][T14219] loop4: detected capacity change from 0 to 512 [ 186.854254][T14219] EXT4-fs: Ignoring removed nobh option [ 186.904122][T14219] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.955536][T14219] ext4 filesystem being mounted at /870/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.023976][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 187.080796][T14233] loop4: detected capacity change from 0 to 512 [ 187.094551][T14235] loop3: detected capacity change from 0 to 164 [ 187.117475][T14235] Unable to read rock-ridge attributes [ 187.139603][T14233] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 187.141282][T14235] Unable to read rock-ridge attributes [ 187.197603][T14233] loop4: detected capacity change from 0 to 512 [ 187.229940][T14233] EXT4-fs: Ignoring removed nobh option [ 187.248327][T14246] loop3: detected capacity change from 0 to 1764 [ 187.264418][T14246] ISOFS: unable to read i-node block [ 187.264542][T14233] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.269782][T14246] isofs_fill_super: get root inode failed [ 187.288186][T14233] ext4 filesystem being mounted at /871/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.473941][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 187.497178][T14246] loop3: detected capacity change from 0 to 256 [ 187.818887][T14278] loop3: detected capacity change from 0 to 1024 [ 187.835964][T14278] EXT4-fs: Ignoring removed i_version option [ 187.857326][T14278] EXT4-fs (loop3): orphan cleanup on readonly fs [ 187.920458][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4649'. [ 187.938754][T14278] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4647: Failed to acquire dquot type 0 [ 187.988778][T14278] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 188.032716][T14278] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.4647: corrupted inode contents [ 188.056862][T14278] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #13: comm syz.3.4647: mark_inode_dirty error [ 188.083747][T14278] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.4647: corrupted inode contents [ 188.105480][T14278] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.4647: mark_inode_dirty error [ 188.133750][T14278] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.4647: corrupted inode contents [ 188.158876][T14278] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 188.197005][T14278] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.4647: corrupted inode contents [ 188.236724][T14278] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.4647: mark_inode_dirty error [ 188.251929][T14291] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 188.297493][T14278] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 188.328074][T14278] EXT4-fs (loop3): 1 truncate cleaned up [ 188.346318][T14278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.434446][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.105721][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4678'. [ 189.429970][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 189.430062][ T29] audit: type=1400 audit(2000003179.609:189428): avc: denied { mount } for pid=14365 comm="syz.2.4686" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 189.463495][T14368] xt_hashlimit: max too large, truncated to 1048576 [ 189.519322][ T29] audit: type=1400 audit(2000003179.693:189429): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 189.546443][T14376] bridge0: port 3(bond0) entered blocking state [ 189.552856][T14376] bridge0: port 3(bond0) entered disabled state [ 189.582430][T14376] bond0: entered allmulticast mode [ 189.587618][T14376] bond_slave_0: entered allmulticast mode [ 189.593443][T14376] bond_slave_1: entered allmulticast mode [ 189.599302][T14376] syz_tun: entered allmulticast mode [ 189.609403][T14376] bond0: entered promiscuous mode [ 189.614494][T14376] bond_slave_0: entered promiscuous mode [ 189.620318][T14376] bond_slave_1: entered promiscuous mode [ 189.628108][T14376] bridge0: port 3(bond0) entered blocking state [ 189.634416][T14376] bridge0: port 3(bond0) entered forwarding state [ 189.789715][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.797256][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.804813][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.813623][T14390] xt_hashlimit: size too large, truncated to 1048576 [ 189.850306][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.857789][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.865284][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.872725][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.880238][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.887678][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.895169][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.902571][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.909989][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.917468][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.924921][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.968320][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.975919][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.983388][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.990873][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 189.998304][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.005703][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.013150][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.020595][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.028015][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.035466][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.036356][ T29] audit: type=1326 audit(2000003180.239:189430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.4.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 190.042989][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.043017][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.043043][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.043126][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.043150][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.043176][T11012] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 190.189413][T11012] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 190.259997][ T29] audit: type=1326 audit(2000003180.333:189431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.4.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 190.283879][ T29] audit: type=1326 audit(2000003180.333:189432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.4.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 190.307751][ T29] audit: type=1400 audit(2000003180.438:189433): avc: denied { ioctl } for pid=14414 comm="syz.4.4709" path="socket:[39208]" dev="sockfs" ino=39208 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.371070][T14425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4712'. [ 190.444882][ T29] audit: type=1326 audit(2000003180.648:189434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 190.468706][ T29] audit: type=1326 audit(2000003180.648:189435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 190.492237][ T29] audit: type=1326 audit(2000003180.648:189436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 190.676572][ T29] audit: type=1326 audit(2000003180.858:189437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.4.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 190.690352][T14452] 9pnet_fd: Insufficient options for proto=fd [ 190.909919][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.938091][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.813179][T14483] xt_hashlimit: max too large, truncated to 1048576 [ 191.990106][T14495] syzkaller0: entered promiscuous mode [ 191.995652][T14495] syzkaller0: entered allmulticast mode [ 192.165428][T14515] netlink: 133492 bytes leftover after parsing attributes in process `syz.3.4754'. [ 192.213204][T14519] syz.2.4758[14519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.213352][T14519] syz.2.4758[14519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.259557][T14519] syz.2.4758[14519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.546720][T14544] syzkaller0: entered promiscuous mode [ 192.563873][T14544] syzkaller0: entered allmulticast mode [ 192.818706][T14553] syz.2.4770[14553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.818862][T14553] syz.2.4770[14553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.843874][T14553] syz.2.4770[14553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.218133][T14574] netlink: 133492 bytes leftover after parsing attributes in process `syz.1.4778'. [ 193.618162][T14610] syz.4.4802[14610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.618241][T14610] syz.4.4802[14610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.676920][T14610] syz.4.4802[14610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.696665][T14618] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4796'. [ 193.715633][T14622] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 193.715633][T14622] program syz.0.4798 not setting count and/or reply_len properly [ 193.902256][T14637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.070696][T14649] syz.4.4812[14649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.241708][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 194.241741][ T29] audit: type=1326 audit(2000003184.659:189546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14643 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a8a25d29 code=0x7ffc0000 [ 194.321334][ T29] audit: type=1326 audit(2000003184.722:189547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14643 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a8a25d29 code=0x7ffc0000 [ 194.345087][ T29] audit: type=1326 audit(2000003184.722:189548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14643 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a8a25d29 code=0x7ffc0000 [ 194.369336][ T29] audit: type=1326 audit(2000003184.732:189549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14643 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f03a8a25d29 code=0x7ffc0000 [ 194.393059][ T29] audit: type=1326 audit(2000003184.732:189550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14643 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a8a25d29 code=0x7ffc0000 [ 194.417326][ T29] audit: type=1326 audit(2000003184.732:189551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14643 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a8a25d29 code=0x7ffc0000 [ 194.526945][ T29] audit: type=1400 audit(2000003184.963:189552): avc: denied { create } for pid=14665 comm="syz.0.4820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.546915][ T29] audit: type=1400 audit(2000003184.963:189553): avc: denied { setopt } for pid=14665 comm="syz.0.4820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.566787][ T29] audit: type=1400 audit(2000003184.963:189554): avc: denied { bind } for pid=14665 comm="syz.0.4820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.586597][ T29] audit: type=1400 audit(2000003184.963:189555): avc: denied { name_bind } for pid=14665 comm="syz.0.4820" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 194.669223][T14588] syz.2.4785 (14588) used greatest stack depth: 6288 bytes left [ 194.833995][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.865414][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.382561][T14693] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 195.382561][T14693] program syz.2.4832 not setting count and/or reply_len properly [ 196.096269][T14740] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 196.285150][T14743] lo speed is unknown, defaulting to 1000 [ 196.290929][T14743] lo speed is unknown, defaulting to 1000 [ 196.349202][T14743] lo speed is unknown, defaulting to 1000 [ 196.356028][T14743] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 196.380912][T14743] lo speed is unknown, defaulting to 1000 [ 196.405703][T14743] lo speed is unknown, defaulting to 1000 [ 196.426896][T14743] lo speed is unknown, defaulting to 1000 [ 196.440258][T14743] lo speed is unknown, defaulting to 1000 [ 196.455653][T14743] lo speed is unknown, defaulting to 1000 [ 196.666708][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4865'. [ 196.955275][T14791] binfmt_misc: register: failed to install interpreter file ./file0 [ 197.712417][T14808] siw: device registration error -23 [ 197.937834][T14812] block device autoloading is deprecated and will be removed. [ 198.516394][T14763] syz.3.4864 (14763) used greatest stack depth: 6112 bytes left [ 198.558072][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.580414][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.689397][T14851] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 198.689397][T14851] program syz.3.4902 not setting count and/or reply_len properly [ 199.085792][T14870] siw: device registration error -23 [ 199.180627][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 199.180644][ T29] audit: type=1326 audit(2000003189.856:189678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.255878][ T29] audit: type=1326 audit(2000003189.877:189679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.280226][ T29] audit: type=1326 audit(2000003189.877:189680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.304278][ T29] audit: type=1326 audit(2000003189.877:189681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.320094][T14881] loop3: detected capacity change from 0 to 512 [ 199.328071][ T29] audit: type=1326 audit(2000003189.877:189682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.358003][ T29] audit: type=1326 audit(2000003189.877:189683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.381903][ T29] audit: type=1326 audit(2000003189.877:189684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.405657][ T29] audit: type=1326 audit(2000003189.877:189685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.429550][ T29] audit: type=1326 audit(2000003189.877:189686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.453417][ T29] audit: type=1326 audit(2000003189.877:189687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0401795d29 code=0x7ffc0000 [ 199.503566][T14881] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 199.615628][T14888] bpf_get_probe_write_proto: 5 callbacks suppressed [ 199.615645][T14888] syz.0.4920[14888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.632807][T14888] syz.0.4920[14888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.651106][T14889] vlan2: entered allmulticast mode [ 199.673832][T14888] syz.0.4920[14888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.775013][T14901] syz.1.4925[14901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.817678][T14901] syz.1.4925[14901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.851728][T14901] syz.1.4925[14901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.857147][T14908] loop3: detected capacity change from 0 to 128 [ 199.895935][ T3576] bond0: (slave syz_tun): Releasing backup interface [ 199.928880][T14908] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 199.950959][T14916] syz.1.4933[14916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.951102][T14916] syz.1.4933[14916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.982913][T14916] syz.1.4933[14916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.998380][T14908] +}[@: attempt to access beyond end of device [ 199.998380][T14908] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 200.036736][T14908] +}[@: attempt to access beyond end of device [ 200.036736][T14908] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 200.190305][T14927] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4940'. [ 200.348224][T14928] lo speed is unknown, defaulting to 1000 [ 200.588351][T14928] chnl_net:caif_netlink_parms(): no params data found [ 200.771395][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.778585][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.859095][T14928] bridge_slave_0: entered allmulticast mode [ 200.879490][T14928] bridge_slave_0: entered promiscuous mode [ 200.906149][T14928] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.913277][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.943607][T14928] bridge_slave_1: entered allmulticast mode [ 201.256025][T14928] bridge_slave_1: entered promiscuous mode [ 201.292475][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.314723][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.362636][T14928] team0: Port device team_slave_0 added [ 201.376110][T14928] team0: Port device team_slave_1 added [ 201.423523][ T4703] bond0: (slave syz_tun): Releasing backup interface [ 201.476017][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.483019][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.509200][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.568470][T14980] ALSA: seq fatal error: cannot create timer (-19) [ 201.590398][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.597394][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.623378][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.672585][T14986] vlan3: entered allmulticast mode [ 201.748293][T14928] hsr_slave_0: entered promiscuous mode [ 201.760956][T14928] hsr_slave_1: entered promiscuous mode [ 201.769194][T14928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.778422][T14928] Cannot create hsr debugfs directory [ 201.795502][T14987] lo speed is unknown, defaulting to 1000 [ 202.021255][T14987] chnl_net:caif_netlink_parms(): no params data found [ 202.044693][T14928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.067502][T14928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.486683][T14928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.499623][T14928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.591992][T14987] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.599134][T14987] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.836770][T14987] bridge_slave_0: entered allmulticast mode [ 202.843400][T14987] bridge_slave_0: entered promiscuous mode [ 202.903920][T14987] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.911053][T14987] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.932474][T14987] bridge_slave_1: entered allmulticast mode [ 202.970688][T14987] bridge_slave_1: entered promiscuous mode [ 203.001978][T15034] vlan2: entered allmulticast mode [ 203.050230][T14987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.083859][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.114366][T14987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.148517][T14987] team0: Port device team_slave_0 added [ 203.158709][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.169688][T14987] team0: Port device team_slave_1 added [ 203.179531][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.186671][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.206791][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.213900][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.267001][T14987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.273985][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.300002][T14987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.317778][T14987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.324842][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.350956][T14987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.414389][T14987] hsr_slave_0: entered promiscuous mode [ 203.423450][T14987] hsr_slave_1: entered promiscuous mode [ 203.434592][T14987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.442971][T14987] Cannot create hsr debugfs directory [ 203.461471][T14928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.860491][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.941565][T14987] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.982542][T14987] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.045983][T14987] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.078768][T14987] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.223429][T14928] veth0_vlan: entered promiscuous mode [ 204.231374][T14987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.242260][T14928] veth1_vlan: entered promiscuous mode [ 204.258144][T14987] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.278977][T14928] veth0_macvtap: entered promiscuous mode [ 204.289180][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.296321][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.314480][T14928] veth1_macvtap: entered promiscuous mode [ 204.328310][T14987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.338963][T14987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.357115][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.364214][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.396849][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.407383][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.417325][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.427825][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.437675][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.448280][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.462698][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.482310][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.492887][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.502825][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.513280][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.523199][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.533891][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.544838][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.553884][T14928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.562638][T14928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.571352][T14928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.580077][T14928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.604897][T14987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.623382][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 204.623398][ T29] audit: type=1400 audit(2000003195.557:189729): avc: denied { mounton } for pid=14928 comm="syz-executor" path="/root/syzkaller.csC8js/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 204.694918][ T29] audit: type=1400 audit(2000003195.557:189730): avc: denied { mount } for pid=14928 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.717436][ T29] audit: type=1400 audit(2000003195.557:189731): avc: denied { mount } for pid=14928 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 204.739818][ T29] audit: type=1400 audit(2000003195.557:189732): avc: denied { mounton } for pid=14928 comm="syz-executor" path="/root/syzkaller.csC8js/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 204.766956][ T29] audit: type=1400 audit(2000003195.557:189733): avc: denied { mounton } for pid=14928 comm="syz-executor" path="/root/syzkaller.csC8js/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 204.794821][ T29] audit: type=1400 audit(2000003195.557:189734): avc: denied { unmount } for pid=14928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 204.815137][ T29] audit: type=1400 audit(2000003195.599:189735): avc: denied { mounton } for pid=14928 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 204.838450][ T29] audit: type=1400 audit(2000003195.599:189736): avc: denied { mount } for pid=14928 comm="syz-executor" name="/" dev="gadgetfs" ino=4230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 204.978405][T14987] veth0_vlan: entered promiscuous mode [ 205.004995][T14987] veth1_vlan: entered promiscuous mode [ 205.055527][T14987] veth0_macvtap: entered promiscuous mode [ 205.074905][T14987] veth1_macvtap: entered promiscuous mode [ 205.107330][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.117906][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.127761][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.138337][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.148241][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.158734][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.168635][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.179077][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.212304][T14987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.220898][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.231468][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.241533][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.252009][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.261839][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.272282][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.282184][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.292655][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.305256][T14987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.322303][T14987] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.331096][T14987] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.339867][T14987] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.348634][T14987] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.398455][T15122] loop5: detected capacity change from 0 to 128 [ 205.406883][T15122] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 205.463621][T15122] +}[@: attempt to access beyond end of device [ 205.463621][T15122] loop5: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 205.521181][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5009'. [ 205.523657][T15122] +}[@: attempt to access beyond end of device [ 205.523657][T15122] loop5: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 205.549264][ T29] audit: type=1400 audit(2000003196.533:189737): avc: denied { create } for pid=15128 comm="syz.6.4961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 205.589777][T15127] macvtap1: entered promiscuous mode [ 205.595142][T15127] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 205.629805][T15127] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 205.705507][ T29] audit: type=1400 audit(2000003709.694:189738): avc: denied { read } for pid=15142 comm="syz.2.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.931187][T15167] loop6: detected capacity change from 0 to 128 [ 205.967889][T15167] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 206.032046][T15170] atomic_op ffff888123dda128 conn xmit_atomic 0000000000000000 [ 206.054386][T15167] +}[@: attempt to access beyond end of device [ 206.054386][T15167] loop6: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 206.095324][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5023'. [ 206.109474][T15167] +}[@: attempt to access beyond end of device [ 206.109474][T15167] loop6: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 206.143091][T15181] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 206.173623][T15181] macvtap1: entered promiscuous mode [ 206.208318][T15181] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 206.368401][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5036'. [ 206.730266][T15232] hub 9-0:1.0: USB hub found [ 206.730351][T15232] hub 9-0:1.0: 8 ports detected [ 206.749869][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'. [ 206.749888][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5051'. [ 206.762819][T15234] bond1: entered promiscuous mode [ 206.784394][T15234] bond1: entered allmulticast mode [ 206.789675][T15234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.799195][T15236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5050'. [ 207.323291][T15260] bond0: entered promiscuous mode [ 207.323313][T15260] bond0: entered allmulticast mode [ 207.323586][T15260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.335339][T15260] bond0 (unregistering): Released all slaves [ 207.893317][T15284] netlink: 'syz.6.5071': attribute type 1 has an invalid length. [ 207.916218][T15284] xt_hashlimit: size too large, truncated to 1048576 [ 208.188682][T15300] loop5: detected capacity change from 0 to 512 [ 208.206914][T15300] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 208.259422][T15300] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6 [ 208.734078][T15346] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.891706][T15366] syz.2.5101[15366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.891825][T15366] syz.2.5101[15366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.907819][T15368] syz.4.5102[15368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.932794][T15368] syz.4.5102[15368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.934642][T15366] syz.2.5101[15366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.977037][T15368] syz.4.5102[15368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.090359][T15375] syz.5.5104[15375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.124686][T15375] syz.5.5104[15375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.146504][T15375] syz.5.5104[15375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.176830][T15383] syz.6.5108[15383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.195582][T15385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5106'. [ 209.329208][T15394] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5114'. [ 209.390765][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 209.390779][ T29] audit: type=1400 audit(2000003713.567:189951): avc: denied { read } for pid=15397 comm="syz.5.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.460733][ T29] audit: type=1326 audit(2000003713.567:189952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 209.484615][ T29] audit: type=1326 audit(2000003713.567:189953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 209.508616][ T29] audit: type=1326 audit(2000003713.567:189954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15407 comm="syz.4.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 209.532423][ T29] audit: type=1326 audit(2000003713.567:189955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15407 comm="syz.4.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 209.556338][ T29] audit: type=1326 audit(2000003713.567:189956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15407 comm="syz.4.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 209.559403][T15419] loop5: detected capacity change from 0 to 1024 [ 209.580182][ T29] audit: type=1326 audit(2000003713.567:189957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15407 comm="syz.4.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 209.580219][ T29] audit: type=1326 audit(2000003713.567:189958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15407 comm="syz.4.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 209.580251][ T29] audit: type=1326 audit(2000003713.567:189959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 209.580281][ T29] audit: type=1326 audit(2000003713.567:189960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.2.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 209.652268][T15419] EXT4-fs: Ignoring removed nobh option [ 209.734039][T15419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.774524][T15419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.822870][T15419] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 209.872246][T14928] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.039042][T15448] syzkaller0: entered promiscuous mode [ 210.044583][T15448] syzkaller0: entered allmulticast mode [ 210.479565][T15474] ebtables: ebtables: counters copy to user failed while replacing table [ 210.521769][T15481] loop6: detected capacity change from 0 to 256 [ 210.566582][T15483] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 210.818497][T15497] syzkaller0: entered promiscuous mode [ 210.824061][T15497] syzkaller0: entered allmulticast mode [ 210.843541][T15495] loop6: detected capacity change from 0 to 8192 [ 210.843680][T15500] netlink: 'syz.2.5161': attribute type 4 has an invalid length. [ 211.020451][T15513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.326468][T15549] vhci_hcd: invalid port number 15 [ 211.331658][T15549] vhci_hcd: invalid port number 15 [ 211.745952][ T3372] kernel write not supported for file /2419/projid_map (pid: 3372 comm: kworker/1:3) [ 211.849668][T15584] loop5: detected capacity change from 0 to 512 [ 211.908997][T15584] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 211.961353][T15584] loop5: detected capacity change from 0 to 512 [ 211.997343][T15584] EXT4-fs: Ignoring removed nobh option [ 212.038338][T15584] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.093027][T15584] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.201627][T14928] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 212.246267][T15606] loop6: detected capacity change from 0 to 512 [ 212.302893][T15606] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 212.333898][T15606] EXT4-fs (loop6): 1 truncate cleaned up [ 212.496586][T15606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.642410][T15090] kernel write not supported for file /2284/projid_map (pid: 15090 comm: kworker/0:5) [ 212.667355][T15606] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.907900][T15640] hub 9-0:1.0: USB hub found [ 212.927269][T15640] hub 9-0:1.0: 8 ports detected [ 213.012773][T15645] syzkaller0: entered promiscuous mode [ 213.018466][T15645] syzkaller0: entered allmulticast mode [ 213.095837][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5211'. [ 213.107047][T15653] serio: Serial port ttyS3 [ 213.131216][T15651] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 213.155146][T15651] macvtap1: entered promiscuous mode [ 213.201180][T15651] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 213.224448][ T3373] kernel write not supported for file /70/projid_map (pid: 3373 comm: kworker/1:4) [ 213.388464][T15675] hub 9-0:1.0: USB hub found [ 213.414423][T15675] hub 9-0:1.0: 8 ports detected [ 213.435137][T15684] 9pnet_fd: Insufficient options for proto=fd [ 214.296007][ T3353] kernel write not supported for file /121/projid_map (pid: 3353 comm: kworker/0:2) [ 214.307219][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 214.307261][ T29] audit: type=1400 audit(2000003718.731:190057): avc: denied { execute_no_trans } for pid=15697 comm="syz.1.5242" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.383074][T15703] vhci_hcd: invalid port number 15 [ 214.388256][T15703] vhci_hcd: invalid port number 15 [ 214.427484][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 214.446661][ T29] audit: type=1326 audit(2000003718.868:190058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.470500][ T29] audit: type=1326 audit(2000003718.868:190059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.494540][ T29] audit: type=1326 audit(2000003718.868:190060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.505604][T15708] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 214.518350][ T29] audit: type=1326 audit(2000003718.868:190061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.549400][ T29] audit: type=1326 audit(2000003718.868:190062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.562410][T15708] macvtap1: entered promiscuous mode [ 214.573185][ T29] audit: type=1326 audit(2000003718.868:190063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.602676][ T29] audit: type=1326 audit(2000003718.868:190064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.626792][ T29] audit: type=1326 audit(2000003718.868:190065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.650534][ T29] audit: type=1326 audit(2000003718.868:190066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz.4.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c9115d29 code=0x7ffc0000 [ 214.696543][T15708] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 214.732754][T15715] vlan2: entered allmulticast mode [ 214.739337][T15715] bond0: entered allmulticast mode [ 214.744487][T15715] bond_slave_0: entered allmulticast mode [ 214.750266][T15715] bond_slave_1: entered allmulticast mode [ 214.773386][T15715] bond0: left allmulticast mode [ 214.778456][T15715] bond_slave_0: left allmulticast mode [ 214.783997][T15715] bond_slave_1: left allmulticast mode [ 214.805021][T15718] serio: Serial port ttyS3 [ 214.832301][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5244'. [ 215.053035][T15749] ALSA: seq fatal error: cannot create timer (-22) [ 215.120732][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5261'. [ 215.882297][T15802] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5282'. [ 216.778699][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.786338][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.793792][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.801299][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.808826][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.816284][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.823737][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.831324][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.838728][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.846166][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.853700][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.861171][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.868589][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.876015][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.883533][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.890970][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.898474][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.905866][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.913527][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.920965][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.928381][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.935828][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.943227][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.950655][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.958064][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.965555][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.972955][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.980375][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.988108][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 216.995700][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 217.003129][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 217.010624][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 217.127849][ T3373] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 217.204371][T15842] loop6: detected capacity change from 0 to 512 [ 217.259353][T15848] loop5: detected capacity change from 0 to 128 [ 217.277283][T15842] EXT4-fs (loop6): 1 orphan inode deleted [ 217.289905][T15842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.302875][ T28] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 1 [ 217.321973][T15853] syz.2.5302: attempt to access beyond end of device [ 217.321973][T15853] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 217.382764][T15842] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.498561][T15871] $Hÿ: renamed from bond0 (while UP) [ 217.524536][T14987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.533804][T15871] $Hÿ: entered promiscuous mode [ 217.538926][T15871] bond_slave_0: entered promiscuous mode [ 217.544691][T15871] bond_slave_1: entered promiscuous mode [ 217.592440][T15875] bridge0: port 3(vlan2) entered blocking state [ 217.598888][T15875] bridge0: port 3(vlan2) entered disabled state [ 217.625674][T15875] vlan2: entered allmulticast mode [ 217.657986][T15875] vlan2: left allmulticast mode [ 219.181340][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 219.181358][ T29] audit: type=1400 audit(2000003723.843:190150): avc: denied { remount } for pid=15928 comm="syz.1.5341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.277247][T15937] macvlan2: entered promiscuous mode [ 219.282644][T15937] bridge0: entered promiscuous mode [ 219.314709][T15937] bridge0: port 3(macvlan2) entered blocking state [ 219.314748][T15937] bridge0: port 3(macvlan2) entered disabled state [ 219.314904][T15937] macvlan2: entered allmulticast mode [ 219.314921][T15937] bridge0: entered allmulticast mode [ 219.315542][T15937] macvlan2: left allmulticast mode [ 219.315583][T15937] bridge0: left allmulticast mode [ 219.316006][T15937] bridge0: left promiscuous mode [ 219.798579][ T29] audit: type=1400 audit(2000003724.494:190151): avc: denied { setopt } for pid=15957 comm="syz.2.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.818622][ T29] audit: type=1400 audit(2000003724.494:190152): avc: denied { bind } for pid=15957 comm="syz.2.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.838742][ T29] audit: type=1400 audit(2000003724.494:190153): avc: denied { listen } for pid=15957 comm="syz.2.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.858782][ T29] audit: type=1400 audit(2000003724.494:190154): avc: denied { write } for pid=15957 comm="syz.2.5344" path="socket:[43734]" dev="sockfs" ino=43734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.899510][ T29] audit: type=1400 audit(2000003724.599:190155): avc: denied { accept } for pid=15957 comm="syz.2.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.028015][T15964] loop6: detected capacity change from 0 to 1024 [ 220.101944][T15964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.103697][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.121559][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.129194][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.136639][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.144121][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.145781][T15964] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.151608][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.169441][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.176902][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.184383][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.191899][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.199351][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.206791][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.214287][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.221689][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.229176][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.236794][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.237014][ T29] audit: type=1400 audit(2000003724.956:190156): avc: denied { read write } for pid=15962 comm="syz.6.5347" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.244304][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.244331][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.244356][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.244381][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.297091][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.304569][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.311997][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.319420][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.326946][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.334380][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.341811][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.349290][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.356815][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.364246][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.371671][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.379224][ T3372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.390140][ T29] audit: type=1400 audit(2000003725.114:190157): avc: denied { open } for pid=15962 comm="syz.6.5347" path="/59/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.425424][ T3372] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 220.594006][ T29] audit: type=1326 audit(2000003725.313:190158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.2.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 220.617943][ T29] audit: type=1326 audit(2000003725.313:190159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.2.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 220.784479][T15994] bridge: RTM_NEWNEIGH with invalid ether address [ 220.813935][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5357'. [ 221.213499][T15981] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 221.278520][T15981] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 28 with error 28 [ 221.290973][T15981] EXT4-fs (loop6): This should not happen!! Data will be lost [ 221.290973][T15981] [ 221.300717][T15981] EXT4-fs (loop6): Total free blocks count 0 [ 221.306787][T15981] EXT4-fs (loop6): Free/Dirty block details [ 221.312828][T15981] EXT4-fs (loop6): free_blocks=4293918720 [ 221.318630][T15981] EXT4-fs (loop6): dirty_blocks=9392 [ 221.323943][T15981] EXT4-fs (loop6): Block reservation details [ 221.330041][T15981] EXT4-fs (loop6): i_reserved_data_blocks=587 [ 221.375302][T16018] 9Hÿ: renamed from bond0 (while UP) [ 221.424021][ T3626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 221.440816][T16018] bridge0: port 3(9Hÿ) entered disabled state [ 221.523714][T16023] IPVS: stopping master sync thread 16026 ... [ 221.529945][T16026] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 221.570557][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 221.696301][T16040] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5371'. [ 221.709466][T16042] bpf_get_probe_write_proto: 5 callbacks suppressed [ 221.709484][T16042] syz.1.5379[16042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.716311][T16042] syz.1.5379[16042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.747649][T16042] syz.1.5379[16042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.782953][T16046] can0: slcan on ptm0. [ 221.855690][T16048] pim6reg: entered allmulticast mode [ 221.894654][T16048] pim6reg: left allmulticast mode [ 221.918333][T16045] can0 (unregistered): slcan off ptm0. [ 222.037054][T16070] syz.6.5387[16070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.037270][T16070] syz.6.5387[16070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.081784][T16070] syz.6.5387[16070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.118452][T16081] Cannot find del_set index 0 as target [ 222.244842][T16070] infiniband syz2: set active [ 222.249747][T16070] infiniband syz2: added veth0_to_bond [ 222.333765][T16070] RDS/IB: syz2: added [ 222.352203][T16070] smc: adding ib device syz2 with port count 1 [ 222.367233][T16070] smc: ib device syz2 port 1 has pnetid [ 222.398734][T16105] loop5: detected capacity change from 0 to 512 [ 222.486230][T16105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.603428][T16105] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.697105][T14928] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.061760][T16132] loop2: detected capacity change from 512 to 64 [ 223.745752][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5427'. [ 223.765791][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5427'. [ 223.952569][T16192] loop5: detected capacity change from 0 to 8192 [ 224.093263][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 224.093278][ T29] audit: type=1400 audit(2000003728.997:190260): avc: denied { bind } for pid=16201 comm="syz.1.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.131998][T16203] netlink: 'syz.1.5437': attribute type 10 has an invalid length. [ 224.174057][T16203] team0: Failed to send options change via netlink (err -105) [ 224.181649][T16203] team0: Port device netdevsim1 added [ 224.187269][ T29] audit: type=1326 audit(2000003729.029:190261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.197276][T16213] netlink: 'syz.1.5437': attribute type 10 has an invalid length. [ 224.210999][ T29] audit: type=1326 audit(2000003729.029:190262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.242384][ T29] audit: type=1326 audit(2000003729.029:190263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.266142][ T29] audit: type=1326 audit(2000003729.029:190264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.289717][ T29] audit: type=1326 audit(2000003729.029:190265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.313401][ T29] audit: type=1326 audit(2000003729.029:190266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.337128][ T29] audit: type=1326 audit(2000003729.029:190267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16202 comm="syz.2.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f47065d29 code=0x7ffc0000 [ 224.360916][ T29] audit: type=1400 audit(2000003729.039:190268): avc: denied { watch watch_reads } for pid=16205 comm="syz.5.5438" path="/86/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.388316][ T57] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 224.403009][T16213] team0: Failed to send options change via netlink (err -105) [ 224.414230][T16213] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 224.424026][T16213] team0: Port device netdevsim1 removed [ 224.432650][T16213] : (slave netdevsim1): Enslaving as an active interface with an up link [ 224.487559][ T29] audit: type=1400 audit(2000003729.407:190269): avc: denied { mount } for pid=16218 comm="syz.1.5444" name="/" dev="ramfs" ino=44217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 224.513575][T16221] smc: net device bond0 applied user defined pnetid SYZ0 [ 224.549384][T16221] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5445'. [ 224.608086][T16221] smc: net device bond0 erased user defined pnetid SYZ0 [ 224.723030][ T36] ================================================================== [ 224.731167][ T36] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 224.739712][ T36] [ 224.742048][ T36] write to 0xffff888125323922 of 1 bytes by task 16241 on cpu 0: [ 224.749861][ T36] tty_set_termios+0x4c9/0x8b0 [ 224.754646][ T36] set_termios+0x497/0x4e0 [ 224.759089][ T36] tty_mode_ioctl+0x391/0x5d0 [ 224.763806][ T36] n_tty_ioctl_helper+0x8d/0x240 [ 224.768784][ T36] n_tty_ioctl+0xfd/0x200 [ 224.773137][ T36] tty_ioctl+0x87a/0xbe0 [ 224.777387][ T36] __se_sys_ioctl+0xc9/0x140 [ 224.782007][ T36] __x64_sys_ioctl+0x43/0x50 [ 224.786619][ T36] x64_sys_call+0x1690/0x2dc0 [ 224.791404][ T36] do_syscall_64+0xc9/0x1c0 [ 224.796034][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.801956][ T36] [ 224.804283][ T36] read to 0xffff888125323922 of 1 bytes by task 36 on cpu 1: [ 224.811665][ T36] n_tty_receive_char_flow_ctrl+0x58/0x1a0 [ 224.817545][ T36] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 224.823109][ T36] tty_port_default_lookahead_buf+0x8a/0xc0 [ 224.829027][ T36] flush_to_ldisc+0x31c/0x410 [ 224.833724][ T36] process_scheduled_works+0x483/0x9a0 [ 224.839226][ T36] worker_thread+0x51d/0x6f0 [ 224.843852][ T36] kthread+0x4ae/0x520 [ 224.847942][ T36] ret_from_fork+0x4b/0x60 [ 224.852370][ T36] ret_from_fork_asm+0x1a/0x30 [ 224.857163][ T36] [ 224.859491][ T36] value changed: 0x13 -> 0x20 [ 224.864170][ T36] [ 224.866501][ T36] Reported by Kernel Concurrency Sanitizer on: [ 224.872654][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 224.882995][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 224.893061][ T36] Workqueue: events_unbound flush_to_ldisc [ 224.898894][ T36] ==================================================================