last executing test programs: 49.257639032s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f0000000380)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) 49.118508552s ago: executing program 2 (id=9): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@mask_fadd={0x58, 0x114, 0x8, {{0xa, 0xfff}, &(0x7f0000000600)=0x5, 0x0, 0x0, 0x8, 0x1, 0x2, 0xb, 0x9}}], 0x58}, 0x0) 49.015521992s ago: executing program 2 (id=11): chroot(&(0x7f0000000200)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x2000, 0x0, 0x400, 0x0, 0x4}) 48.12452371s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 48.07528013s ago: executing program 2 (id=34): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1219, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0xffffffff, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 47.266450739s ago: executing program 2 (id=52): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 47.266207269s ago: executing program 32 (id=52): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 40.028743679s ago: executing program 3 (id=176): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) poll(0x0, 0x0, 0x81) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 39.854898418s ago: executing program 3 (id=181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) 38.990686157s ago: executing program 3 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36) 38.751918907s ago: executing program 3 (id=204): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file2\x00', 0x0, 0x12081, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 38.197620696s ago: executing program 3 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) 37.851533045s ago: executing program 3 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 37.752033905s ago: executing program 33 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 22.574028803s ago: executing program 6 (id=533): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) 21.920846802s ago: executing program 6 (id=548): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x709d23, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 21.688498171s ago: executing program 6 (id=556): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 21.593747041s ago: executing program 6 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x400) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 21.537078211s ago: executing program 6 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd, 0x0, 0x0, 0x0, {0x4080}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 21.226464471s ago: executing program 6 (id=567): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x8, 0x18, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f943138fae1b43b3983d7433f8f9a2df4e1857ad78ca88090d709b29ee7c21514bb85393764aaa5f78a", "012a519a6f0231ce4623c52b637a4b34dcce6a392e161f8e3010abda97c64ba2", [0x7, 0xb]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 21.226233571s ago: executing program 34 (id=567): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x8, 0x18, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f943138fae1b43b3983d7433f8f9a2df4e1857ad78ca88090d709b29ee7c21514bb85393764aaa5f78a", "012a519a6f0231ce4623c52b637a4b34dcce6a392e161f8e3010abda97c64ba2", [0x7, 0xb]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 2.136356052s ago: executing program 7 (id=935): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ff, 0x12, r0, 0x0) 2.036402793s ago: executing program 7 (id=937): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/129, 0x40000, 0x40010020, 0x0, 0x0) 1.894530722s ago: executing program 7 (id=942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) iopl(0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x108004, 0x5dd8, 0x3, 0x0, 0xfffffffffffffffc, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x103f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.868943442s ago: executing program 4 (id=943): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1.496593112s ago: executing program 4 (id=946): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 1.233293282s ago: executing program 4 (id=949): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000112000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 1.210398761s ago: executing program 4 (id=950): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800001e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000004000000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 1.168322941s ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x6, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r3, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) r4 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r4}, 0x20) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1.118455401s ago: executing program 4 (id=953): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 948.983881ms ago: executing program 7 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 699.398721ms ago: executing program 1 (id=963): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010006691c5f014feb37030000000800090002"], 0x24}}, 0x0) 610.35924ms ago: executing program 5 (id=965): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x545, &(0x7f0000000ac0)="$eJzs3V1v08gawPHHpT305Ejo6JwjhKoCQzkrFakEJ4GgiCuvM0kHHDuyHdReoYqmqCKFFWWlbW92uWF3pd0Pwe1+iP1GaO/3hpXtpLS0iVv6Erb6/yKYiT32PJNGfuomHgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdt2yRLP+J0lNZxbD4PWx6f9rfctkFt7ihH9iljJP5melivZoiv/+7j6cvLfnMxmz2ZlOimmZftfl//94L+TE4PtRwR8Jja3tp+v9HrdV+MO5BRdvTh8XVP7JgpMy2lqZaJA1apV+85iI1IN4+loOYp1S7mhduIgVPPuLVWq1SpKF5eDjt+sO54eLLx/u2zbVfWw2NZOGAX+nYfFyF00nmf8ZtomWZ20uZ+8ER+ZWMXaaSm1tt7rVvIGkDQqHaZReWQLEVW2y+VSqVwuVe/V7t237cl9C+xPyL4W43/TYrxO8OgNHM9EP/+LJ0Z86ciSqAMfrtQllEBaQ9b3DfL/V3f0yH535/9Blr/ycfWMpPn/Wvbs2rD8PySWs3tsypZsy3NZkZ70pCuvxh7R2T6aosUXI5EEYqQlTrpE9ZcoqUlVqmLLE1mUhkSipCFGPNESybJEEotO31GuhKLFkVgCCUXJvLhyS5SUpCY1qYgSLUVZlkA64ktT6uKke1mT9fR1r4iyhsW406g0dBiFwfuuK+URoyX/4/hO9PgNHMeHQf4HAAAAAADnlpX+9T05/5+Sq2mtYTxtjzssAAAAAABwgtJP/meTYiqpXRWL838AAAAAAM4bK73GzhKRglzPamtipZdL8UcAAAAAAADOifTz/2tJkc6Bcl2snelSOP8HAAAAAOCc+Cl3jv2ofdH6/Q8JwynrTXvp/9aGk7RzNi5k2134dI9xY8a61N9JUvz5ITM56epZazprtDMJ5vt+sZYXh3VQAD8cJoAH1cn+M/lFbmRtbqxm5epgTdZLoWE8XXQD70FJHOfSRKyX4m9frH8n6fB/9luXLFlb73WLT1/2VtNY3iR7ebPRn0Bx3zyKI2J5nc63kF5zceCIp9ILMfr9FrJ+7d3jn8g2nzhCn29lLmsz15/xtrB3/NNJn6XisNH3oygdc+Rv5WbW5ub8zaw4IIpyXhTl3VF81mtxiCgqeVFUjhkFAIzLWk4WsvYn/s84yn1edpcjZve3Mp+1mZ9JD6yTMwcc0e28I7p9zOz22757IA3LsUm/v36SVd8lG7wb2m/kla3kJbzweuMbuby5tX17fWPlWfdZ90W5XKnad237Xlmm0mH0C3IPAOAAuffY+XAxr4V1N+es+j87XykoylN5KT1ZlYX0aoP0GwcH7rWw62sICzlnrYU0TWZ3eFkYcVb3j/Qqh8F+yyPb7o2hcvo/CAAAztBcTh628n9DsBZyzrv35vLRZ8eFXXdrAwAAp0OH761C/KMVhqb9pFSrlZx4UaswcB+p0NSbWhk/1qG76PhNrdphEAdu4CWVx6auIxV12u0gjFUjCFU7iMxSeud31b/1e6Rbjh8bN2p72om0cgM/dtxY1U3kqnbna89EizpMN47a2jUN4zqxCXwVBZ3Q1UWlIq13NTR17cemYZKqr9qhaTnhsnoceJ2WVnUduaFpx0G2w0Ffxm8EYSvdbXHcLzYAAF+Iza3t5yu9XvfVoSr/PErjncq4xwgAAPYiSwMAAAAAAAAAAAAAAAAAAAAA8OU72pV8VP5ulYf9n/Op9jWYCvrLGDKVE6nkHjq+P9UDE4BT91cAAAD//xEAUzs=") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x40007fffffff) 564.75857ms ago: executing program 5 (id=966): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 531.63961ms ago: executing program 5 (id=967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000980)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_nolock}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='.\x00') pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 484.56707ms ago: executing program 1 (id=968): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9e2d, 0x0, 0x800, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000003280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\xefV\xc2\x90b\x1b\xd8\x1a\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x02\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\b\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\x05\x00\x00\x00\x00\x00\x00\x00\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 350.01602ms ago: executing program 0 (id=970): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000600)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x40000) 315.51534ms ago: executing program 0 (id=971): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000110001"], 0x61}}, 0x4004800) 243.103309ms ago: executing program 0 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c880, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="ee8b", 0x2}], 0x1}}], 0x2, 0x404c484) 227.20782ms ago: executing program 5 (id=973): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x72, &(0x7f0000000000)=r5, 0xc) 215.81032ms ago: executing program 0 (id=974): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @lsrr={0x83, 0x3}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce6000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/151], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 185.70181ms ago: executing program 1 (id=975): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 166.98722ms ago: executing program 7 (id=976): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0xd) preadv(r0, 0x0, 0x0, 0x401, 0x3649) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0xee00, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) 154.54683ms ago: executing program 5 (id=977): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$int_in(r1, 0x5452, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) write$binfmt_script(r0, &(0x7f0000000180), 0xfea7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) 131.3582ms ago: executing program 1 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r2}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 85.590239ms ago: executing program 0 (id=979): r0 = semget$private(0x0, 0x4, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, &(0x7f0000003640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x0, @fd_index=0x4, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x40}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x1e, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000000000000000000008cd8ffff180000000900000000000000040000000935100007000000852000000400000018110000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 76.124009ms ago: executing program 5 (id=980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 47.480899ms ago: executing program 1 (id=981): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) 19.929179ms ago: executing program 0 (id=982): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0xc17a) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 0s ago: executing program 1 (id=983): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @local}, 0x14) close_range(r0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099"], 0x48) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) kernel console output (not intermixed with test programs): .465654][ T3503] netlink: 'syz.4.27': attribute type 4 has an invalid length. [ 34.482343][ T3503] netlink: 'syz.4.27': attribute type 4 has an invalid length. [ 34.660221][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 34.695395][ T3521] syzkaller0: entered promiscuous mode [ 34.701888][ T3521] syzkaller0: entered allmulticast mode [ 34.873450][ T3529] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 34.901364][ T3529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.930265][ T3529] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 35.083014][ T3535] loop3: detected capacity change from 0 to 2048 [ 35.115786][ T3535] EXT4-fs: Ignoring removed bh option [ 35.141532][ T3535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.258300][ T3553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.276461][ T3553] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1728 with error 28 [ 35.289344][ T3553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.289344][ T3553] [ 35.299215][ T3553] EXT4-fs (loop3): Total free blocks count 0 [ 35.305330][ T3553] EXT4-fs (loop3): Free/Dirty block details [ 35.311384][ T3553] EXT4-fs (loop3): free_blocks=2415919104 [ 35.317255][ T3553] EXT4-fs (loop3): dirty_blocks=1744 [ 35.322862][ T3553] EXT4-fs (loop3): Block reservation details [ 35.328934][ T3553] EXT4-fs (loop3): i_reserved_data_blocks=109 [ 35.397644][ T292] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.441471][ T3562] syzkaller0: entered allmulticast mode [ 35.462748][ T3562] syzkaller0 (unregistering): left allmulticast mode [ 35.538227][ T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 35.656013][ T292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.743691][ T292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.812064][ T292] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.970869][ T292] bridge_slave_1: left allmulticast mode [ 35.977106][ T292] bridge_slave_1: left promiscuous mode [ 35.983024][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.028655][ T3604] loop4: detected capacity change from 0 to 1024 [ 36.036295][ T292] bridge_slave_0: left allmulticast mode [ 36.039266][ T3604] EXT4-fs: Ignoring removed orlov option [ 36.042405][ T292] bridge_slave_0: left promiscuous mode [ 36.054180][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.074757][ T3604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.113322][ T3609] ref_ctr increment failed for inode: 0x36 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888116781a40 [ 36.125278][ T3608] uprobe: syz.3.66:3608 failed to unregister, leaking uprobe [ 36.234013][ T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.264909][ T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.276325][ T292] bond0 (unregistering): Released all slaves [ 36.288440][ T3565] chnl_net:caif_netlink_parms(): no params data found [ 36.362732][ T292] hsr_slave_0: left promiscuous mode [ 36.390910][ T292] hsr_slave_1: left promiscuous mode [ 36.400760][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.408400][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.431487][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.439827][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.453143][ T292] veth1_macvtap: left promiscuous mode [ 36.458925][ T292] veth0_macvtap: left promiscuous mode [ 36.465091][ T292] veth1_vlan: left promiscuous mode [ 36.471083][ T292] veth0_vlan: left promiscuous mode [ 36.573230][ T292] team0 (unregistering): Port device team_slave_1 removed [ 36.587223][ T292] team0 (unregistering): Port device team_slave_0 removed [ 36.703570][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.710924][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.739034][ T3565] bridge_slave_0: entered allmulticast mode [ 36.747290][ T3565] bridge_slave_0: entered promiscuous mode [ 36.760771][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.768417][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.798388][ T3565] bridge_slave_1: entered allmulticast mode [ 36.816834][ T3565] bridge_slave_1: entered promiscuous mode [ 36.877843][ T3565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.912977][ T3565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.963143][ T3565] team0: Port device team_slave_0 added [ 36.981190][ T3565] team0: Port device team_slave_1 added [ 37.051329][ T3565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.058683][ T3565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.086018][ T3565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.227570][ T3565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.234922][ T3565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.260961][ T3565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.296139][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.326827][ T3565] hsr_slave_0: entered promiscuous mode [ 37.340648][ T3565] hsr_slave_1: entered promiscuous mode [ 37.369636][ T3565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.383149][ T3565] Cannot create hsr debugfs directory [ 37.570895][ T3565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.610316][ T3565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.631805][ T3708] syz.0.86[3708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.631874][ T3708] syz.0.86[3708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.649675][ T3565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.677592][ T3708] syz.0.86[3708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.699050][ T3708] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 37.723897][ T3565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.790824][ T3713] Zero length message leads to an empty skb [ 37.908364][ T3722] syz.0.90[3722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.908609][ T3722] syz.0.90[3722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.925766][ T3565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.944216][ T3722] syz.0.90[3722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.946164][ T3722] xt_hashlimit: max too large, truncated to 1048576 [ 37.986218][ T3565] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.015264][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 38.015281][ T29] audit: type=1326 audit(1737241796.447:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.036768][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.047408][ T29] audit: type=1326 audit(1737241796.447:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.055280][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.068423][ T3565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.100326][ T3565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.103649][ T29] audit: type=1326 audit(1737241796.447:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.136095][ T29] audit: type=1326 audit(1737241796.447:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.160735][ T29] audit: type=1326 audit(1737241796.447:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.185718][ T29] audit: type=1326 audit(1737241796.457:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.210182][ T29] audit: type=1326 audit(1737241796.457:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.220150][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.234837][ T29] audit: type=1326 audit(1737241796.457:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.242326][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.267593][ T29] audit: type=1326 audit(1737241796.457:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.267622][ T29] audit: type=1326 audit(1737241796.457:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb829f5d29 code=0x7ffc0000 [ 38.330875][ T3731] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 38.336533][ T3565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.410164][ T3747] capability: warning: `syz.0.94' uses 32-bit capabilities (legacy support in use) [ 38.410543][ T3745] macvlan0: entered promiscuous mode [ 38.438012][ T3745] ipvlan0: entered promiscuous mode [ 38.444303][ T3745] ipvlan0: left promiscuous mode [ 38.469369][ T3745] macvlan0: left promiscuous mode [ 38.489492][ T3755] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 38.854574][ T3565] veth0_vlan: entered promiscuous mode [ 38.890845][ T3565] veth1_vlan: entered promiscuous mode [ 38.964855][ T3565] veth0_macvtap: entered promiscuous mode [ 38.991894][ T3565] veth1_macvtap: entered promiscuous mode [ 39.005236][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.016815][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.027963][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.039092][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.050384][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.062777][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.073962][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.085863][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.121739][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.132687][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.144705][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.155425][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.166357][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.176855][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.188190][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.199705][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.210958][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.236908][ T3803] loop3: detected capacity change from 0 to 512 [ 39.275920][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.331567][ T3565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.341859][ T3565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.352325][ T3565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.362427][ T3565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.840852][ T1031] IPVS: starting estimator thread 0... [ 39.928663][ T3852] IPVS: using max 2448 ests per chain, 122400 per kthread [ 40.518054][ T3894] loop4: detected capacity change from 0 to 1024 [ 40.555704][ T3894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.585455][ T3894] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.728017][ T3907] loop3: detected capacity change from 0 to 128 [ 40.753514][ T3907] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.810823][ T3907] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.967228][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.993608][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.036285][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 41.044556][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 41.061905][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.070818][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.079535][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.087430][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.095457][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.103481][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.111450][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.119253][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.126977][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.135212][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.143206][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.151113][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.160545][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.169397][ T1031] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.180963][ T1031] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 41.317847][ T3935] loop0: detected capacity change from 0 to 8192 [ 41.359310][ T3947] netlink: 36 bytes leftover after parsing attributes in process `syz.5.144'. [ 41.437060][ T3951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.549040][ T3969] xt_connbytes: Forcing CT accounting to be enabled [ 41.556618][ T3969] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 41.640750][ T3951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.691628][ T3951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.754792][ T3985] loop5: detected capacity change from 0 to 1024 [ 41.768761][ T3985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.780754][ T3951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.793686][ T3985] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.809761][ T3985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 41.819493][ T3985] System zones: 0-1, 3-12 [ 41.825638][ T3985] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #11: comm syz.5.160: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 41.852912][ T3985] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.160: couldn't read orphan inode 11 (err -117) [ 41.877489][ T3951] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.897114][ T3951] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.899312][ T3985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.931703][ T3951] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.948842][ T3951] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.089895][ T4006] loop0: detected capacity change from 0 to 1024 [ 42.127878][ T4006] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 42.148786][ T4006] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.198263][ T4006] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.166: iget: special inode unallocated [ 42.219734][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.228993][ T4006] EXT4-fs (loop0): no journal found [ 42.236136][ T4006] EXT4-fs (loop0): can't get journal size [ 42.244091][ T4006] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.166: iget: special inode unallocated [ 42.260014][ T4006] EXT4-fs (loop0): failed to initialize system zone (-117) [ 42.269036][ T4006] EXT4-fs (loop0): mount failed [ 42.380079][ T4033] loop3: detected capacity change from 0 to 8192 [ 42.640617][ T4072] veth0_virt_wifi: entered promiscuous mode [ 42.650055][ T4072] veth0_virt_wifi: left promiscuous mode [ 42.727841][ T4077] loop5: detected capacity change from 0 to 512 [ 42.740180][ T4077] EXT4-fs: Ignoring removed bh option [ 42.746828][ T4077] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.763034][ T4077] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 42.777305][ T4077] EXT4-fs (loop5): 1 truncate cleaned up [ 42.784812][ T4077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.825598][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.852709][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.010906][ T4108] mmap: syz.0.189 (4108) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.026587][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 43.026604][ T29] audit: type=1400 audit(1737241801.457:723): avc: denied { execute } for pid=4107 comm="syz.0.189" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 43.082959][ T29] audit: type=1400 audit(1737241801.517:724): avc: denied { getopt } for pid=4109 comm="syz.4.190" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.283519][ T4119] batadv_slave_1: entered promiscuous mode [ 43.293717][ T29] audit: type=1326 audit(1737241801.727:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.294481][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 43.319664][ T29] audit: type=1326 audit(1737241801.727:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.319702][ T29] audit: type=1326 audit(1737241801.727:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.330932][ T4119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.360368][ T29] audit: type=1326 audit(1737241801.727:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.425470][ T29] audit: type=1326 audit(1737241801.727:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.455347][ T29] audit: type=1326 audit(1737241801.827:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.484521][ T29] audit: type=1326 audit(1737241801.827:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.510914][ T29] audit: type=1326 audit(1737241801.827:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 43.543676][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.556217][ T4119] batadv_slave_1 (unregistering): left promiscuous mode [ 43.564603][ T4119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.586104][ T4125] loop5: detected capacity change from 0 to 512 [ 43.602503][ T4125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.621604][ T4125] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.696260][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.716081][ T4132] loop0: detected capacity change from 0 to 512 [ 43.724126][ T4132] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.731812][ T4130] loop4: detected capacity change from 0 to 1024 [ 43.747388][ T4130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.760480][ T4130] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 43.771114][ T4130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 43.782833][ T4130] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 43.795406][ T4130] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: inode #5: comm syz.4.198: unexpected bad inode w/o EXT4_IGET_BAD [ 43.806817][ T4132] EXT4-fs (loop0): 1 truncate cleaned up [ 43.815544][ T4134] syzkaller0: entered promiscuous mode [ 43.821742][ T4134] syzkaller0: entered allmulticast mode [ 43.828439][ T4130] EXT4-fs (loop4): no journal found [ 43.834404][ T4130] EXT4-fs (loop4): can't get journal size [ 43.842503][ T4132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.857547][ T4130] EXT4-fs (loop4): failed to initialize system zone (-117) [ 43.867359][ T4130] EXT4-fs (loop4): mount failed [ 44.002792][ T4148] loop3: detected capacity change from 0 to 512 [ 44.012859][ T4148] EXT4-fs: Ignoring removed i_version option [ 44.134857][ T4158] loop1: detected capacity change from 0 to 128 [ 44.162189][ T4148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.188806][ T4148] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.240525][ T50] kworker/u8:3: attempt to access beyond end of device [ 44.240525][ T50] loop1: rw=1, sector=129, nr_sectors = 912 limit=128 [ 44.273360][ T4148] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.350213][ T4167] loop1: detected capacity change from 0 to 128 [ 44.367687][ T4167] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 44.379650][ T4164] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.204: corrupted inode contents [ 44.401042][ T4164] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.204: mark_inode_dirty error [ 44.415758][ T4164] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.204: corrupted inode contents [ 44.431015][ T4164] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.204: mark_inode_dirty error [ 44.444265][ T4164] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.204: Failed to acquire dquot type 1 [ 44.462913][ T4164] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 44.489368][ T4164] syz.3.204 (4164) used greatest stack depth: 9840 bytes left [ 44.501837][ T36] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 44.514447][ T3300] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.540806][ T3300] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.553606][ T4171] syz.1.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.571869][ T3300] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.603227][ T3300] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.631994][ T3300] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.798670][ T4178] loop1: detected capacity change from 0 to 764 [ 44.813371][ T4178] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 44.829946][ T4178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.855022][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.932620][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.007912][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.057157][ T4132] syz.0.199 (4132) used greatest stack depth: 7184 bytes left [ 45.082609][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.087822][ T4192] netlink: 'syz.5.223': attribute type 4 has an invalid length. [ 45.102697][ T4190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.112681][ T4190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.121281][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.146730][ T4190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.155119][ T4190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.282368][ T4217] loop0: detected capacity change from 0 to 164 [ 45.433795][ T4247] loop0: detected capacity change from 0 to 512 [ 45.445557][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.460225][ T4247] journal_path: Non-blockdev passed as './bus' [ 45.466976][ T4247] EXT4-fs: error: could not find journal device path [ 45.496374][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.517108][ T36] bond0 (unregistering): Released all slaves [ 45.591939][ T36] hsr_slave_0: left promiscuous mode [ 45.602467][ T36] hsr_slave_1: left promiscuous mode [ 45.621310][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.629833][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.649045][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.657281][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.679449][ T36] veth1_macvtap: left promiscuous mode [ 45.687021][ T36] veth0_macvtap: left promiscuous mode [ 45.693851][ T36] veth1_vlan: left promiscuous mode [ 45.700602][ T36] veth0_vlan: left promiscuous mode [ 45.822100][ T36] team0 (unregistering): Port device team_slave_1 removed [ 45.836624][ T36] team0 (unregistering): Port device team_slave_0 removed [ 46.074857][ T4279] bond1: entered promiscuous mode [ 46.080800][ T4279] bond1: entered allmulticast mode [ 46.098885][ T4279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.114384][ T4301] loop1: detected capacity change from 0 to 164 [ 46.115593][ T4279] bond1 (unregistering): Released all slaves [ 46.140986][ T4301] Unable to read rock-ridge attributes [ 46.150640][ T4301] Unable to read rock-ridge attributes [ 46.157646][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 46.226718][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.234543][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.249522][ T4186] bridge_slave_0: entered allmulticast mode [ 46.259281][ T4186] bridge_slave_0: entered promiscuous mode [ 46.260446][ T4308] syz.5.237[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.266516][ T4308] syz.5.237[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.267163][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.300539][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.308421][ T4186] bridge_slave_1: entered allmulticast mode [ 46.308566][ T4308] syz.5.237[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.316094][ T4186] bridge_slave_1: entered promiscuous mode [ 46.385687][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.398312][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.440978][ T4186] team0: Port device team_slave_0 added [ 46.450940][ T4186] team0: Port device team_slave_1 added [ 46.461058][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.243'. [ 46.485208][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.493827][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.523674][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.536940][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.545254][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.576019][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.630923][ T4186] hsr_slave_0: entered promiscuous mode [ 46.649415][ T4186] hsr_slave_1: entered promiscuous mode [ 46.665920][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.677383][ T4186] Cannot create hsr debugfs directory [ 46.801914][ T4186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.813694][ T4186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.853543][ T4186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.860445][ C0] hrtimer: interrupt took 47479 ns [ 46.870872][ T4186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.932387][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.966407][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.985863][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.998249][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.011475][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.020747][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.031644][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.032271][ T4345] loop1: detected capacity change from 0 to 128 [ 47.039929][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.052593][ T4345] EXT4-fs: Ignoring removed nobh option [ 47.056565][ T4342] mmap: syz.0.252 (4342): VmData 29208576 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 47.091228][ T4345] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.137759][ T4345] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.221700][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.225464][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.244294][ T4360] pimreg: entered allmulticast mode [ 47.254920][ T4360] pimreg: left allmulticast mode [ 47.316206][ T4367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'. [ 47.326740][ T4367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 47.339242][ T4369] loop4: detected capacity change from 0 to 1024 [ 47.353546][ T4367] geneve2: entered allmulticast mode [ 47.360119][ T4369] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.370123][ T4369] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 47.656086][ T4186] veth0_vlan: entered promiscuous mode [ 47.690535][ T4186] veth1_vlan: entered promiscuous mode [ 47.707434][ T4186] veth0_macvtap: entered promiscuous mode [ 47.717223][ T4186] veth1_macvtap: entered promiscuous mode [ 47.757968][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.770150][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.781874][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.794303][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.803486][ T4414] loop4: detected capacity change from 0 to 512 [ 47.804923][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.818227][ T4414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.822562][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.825461][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.853913][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.865189][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.876639][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.886354][ T4414] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.276: corrupted in-inode xattr: e_name out of bounds [ 47.888270][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.915264][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.929308][ T4186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.939487][ T4186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.941817][ T4408] loop1: detected capacity change from 0 to 512 [ 47.949741][ T4186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.966314][ T4186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.976155][ T4414] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.276: couldn't read orphan inode 15 (err -117) [ 47.979939][ T4416] netlink: zone id is out of range [ 47.990901][ T4414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.012276][ T4408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.028734][ T4408] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.036842][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 48.036861][ T29] audit: type=1400 audit(1737241806.467:829): avc: denied { append } for pid=4410 comm="syz.4.276" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.071555][ T4414] Process accounting resumed [ 48.080374][ T4413] bond_slave_1: mtu less than device minimum [ 48.116795][ T4414] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 48.187281][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.201624][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.226582][ T4425] 9pnet_fd: Insufficient options for proto=fd [ 48.249910][ T4425] netlink: 'syz.5.279': attribute type 27 has an invalid length. [ 48.272186][ T29] audit: type=1326 audit(1737241806.707:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 48.298399][ T29] audit: type=1326 audit(1737241806.707:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 48.326587][ T29] audit: type=1326 audit(1737241806.707:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 48.352521][ T29] audit: type=1326 audit(1737241806.707:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 48.378749][ T29] audit: type=1326 audit(1737241806.707:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 48.403361][ T29] audit: type=1326 audit(1737241806.707:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f353a275d63 code=0x7ffc0000 [ 48.467866][ T29] audit: type=1326 audit(1737241806.897:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f353a2747df code=0x7ffc0000 [ 48.501608][ T29] audit: type=1326 audit(1737241806.937:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f353a275db7 code=0x7ffc0000 [ 48.516689][ T4431] loop4: detected capacity change from 0 to 8192 [ 48.529652][ T29] audit: type=1326 audit(1737241806.947:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353a274690 code=0x7ffc0000 [ 48.576639][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.585602][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.599234][ T4431] loop4: p1 p2 [ 48.603150][ T4431] loop4: p1 start 33556480 is beyond EOD, truncated [ 48.610729][ T4431] loop4: p2 size 79757312 extends beyond EOD, truncated [ 48.675347][ T3376] udevd[3376]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 48.711280][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.723693][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.759920][ T4425] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.769969][ T4425] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.780140][ T4425] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.790044][ T4425] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.825484][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 48.983177][ T4459] dccp_close: ABORT with 20 bytes unread [ 49.057239][ T4472] loop1: detected capacity change from 0 to 2048 [ 49.070334][ T4474] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 49.209804][ T4472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.251681][ T4472] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 49.265522][ T4472] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.265522][ T4472] [ 49.277535][ T4472] EXT4-fs (loop1): Total free blocks count 0 [ 49.284051][ T4472] EXT4-fs (loop1): Free/Dirty block details [ 49.290580][ T4472] EXT4-fs (loop1): free_blocks=0 [ 49.295886][ T4472] EXT4-fs (loop1): dirty_blocks=0 [ 49.301187][ T4472] EXT4-fs (loop1): Block reservation details [ 49.307787][ T4472] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 49.473989][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.485371][ T4477] Set syz1 is full, maxelem 65536 reached [ 49.552240][ T4489] IPv6: Can't replace route, no match found [ 49.629451][ T4497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.310'. [ 49.736143][ T4505] loop4: detected capacity change from 0 to 512 [ 49.781576][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.798708][ T4505] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.828389][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 49.864381][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.903135][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 49.924944][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 49.939850][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 49.958315][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 49.972343][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 49.987714][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 50.003529][ T4527] pim6reg1: entered promiscuous mode [ 50.003747][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 50.010037][ T4527] pim6reg1: entered allmulticast mode [ 50.064032][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 50.068927][ T4532] vlan2: entered promiscuous mode [ 50.081160][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4518 comm=syz.5.319 [ 50.097862][ T4532] bond0: entered promiscuous mode [ 50.106785][ T4532] bond_slave_0: entered promiscuous mode [ 50.113140][ T4532] bond_slave_1: entered promiscuous mode [ 50.120579][ T4532] bond0: left promiscuous mode [ 50.125960][ T4532] bond_slave_0: left promiscuous mode [ 50.131964][ T4532] bond_slave_1: left promiscuous mode [ 50.459081][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 50.480735][ T4559] veth1_macvtap: left promiscuous mode [ 50.767540][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.339'. [ 50.790638][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.339'. [ 50.929814][ T4579] loop5: detected capacity change from 0 to 2048 [ 50.989676][ T4579] loop5: p1 < > p4 [ 50.994360][ T4579] loop5: p4 size 8388608 extends beyond EOD, truncated [ 51.007440][ T3001] loop5: p1 < > p4 [ 51.013297][ T3001] loop5: p4 size 8388608 extends beyond EOD, truncated [ 51.079050][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 51.082042][ T3376] udevd[3376]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 51.106797][ T4585] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.126399][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 51.127318][ T3376] udevd[3376]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 51.412290][ T4593] bridge_slave_0: left allmulticast mode [ 51.418277][ T4593] bridge_slave_0: left promiscuous mode [ 51.424490][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.435752][ T4593] bridge_slave_1: left allmulticast mode [ 51.441725][ T4593] bridge_slave_1: left promiscuous mode [ 51.447722][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.474630][ T4593] bond0: (slave bond_slave_0): Releasing backup interface [ 51.486260][ T4593] bond0: (slave bond_slave_1): Releasing backup interface [ 51.503713][ T4593] team0: Port device team_slave_0 removed [ 51.520369][ T4593] team0: Port device team_slave_1 removed [ 51.529896][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.538353][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.752996][ T4621] netlink: 96 bytes leftover after parsing attributes in process `syz.5.362'. [ 51.784482][ T4623] netlink: 'syz.5.363': attribute type 1 has an invalid length. [ 51.817624][ T4627] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 51.837893][ T4623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.869100][ T4630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.877476][ T4630] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 51.897434][ T4630] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 51.911196][ T4629] vlan2: entered allmulticast mode [ 51.916552][ T4629] macvlan0: entered allmulticast mode [ 51.922113][ T4629] veth1_vlan: entered allmulticast mode [ 51.930727][ T4629] macvlan0: left allmulticast mode [ 51.936546][ T4629] veth1_vlan: left allmulticast mode [ 52.007358][ T4635] netlink: 'syz.0.367': attribute type 13 has an invalid length. [ 52.018093][ T4635] gretap0: refused to change device tx_queue_len [ 52.026840][ T4635] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.087804][ T4639] veth0_to_team: entered promiscuous mode [ 52.094962][ T4639] veth0_to_team: entered allmulticast mode [ 52.194161][ T4649] bond_slave_1: mtu less than device minimum [ 52.416500][ T4663] loop5: detected capacity change from 0 to 512 [ 52.437984][ T4663] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.380: invalid indirect mapped block 256 (level 2) [ 52.459673][ T4663] EXT4-fs (loop5): 2 truncates cleaned up [ 52.466481][ T4663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.499805][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.647505][ T4667] syzkaller0: entered promiscuous mode [ 52.654288][ T4667] syzkaller0: entered allmulticast mode [ 52.671856][ T4674] loop4: detected capacity change from 0 to 128 [ 52.708377][ T4674] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 52.710823][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 52.734480][ T4676] bond_slave_1: mtu less than device minimum [ 52.755389][ T4674] syz.4.384: attempt to access beyond end of device [ 52.755389][ T4674] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 52.772168][ T4680] IPv6: Can't replace route, no match found [ 52.774770][ T4674] syz.4.384: attempt to access beyond end of device [ 52.774770][ T4674] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 52.876097][ T4688] ref_ctr increment failed for inode: 0x1c9 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b3964c0 [ 52.892023][ T4687] uprobe: syz.0.391:4687 failed to unregister, leaking uprobe [ 52.963517][ T4697] batadv_slave_1: entered promiscuous mode [ 52.972458][ T4697] batadv_slave_1: left promiscuous mode [ 53.023827][ T4704] netlink: 'syz.4.398': attribute type 16 has an invalid length. [ 53.032441][ T4704] netlink: 'syz.4.398': attribute type 17 has an invalid length. [ 53.033181][ T4700] pim6reg1: entered promiscuous mode [ 53.049135][ T4700] pim6reg1: entered allmulticast mode [ 53.087251][ T4704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.128624][ T4706] syzkaller0: entered promiscuous mode [ 53.136284][ T4706] syzkaller0: entered allmulticast mode [ 53.208974][ T4711] SELinux: syz.6.401 (4711) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 53.382218][ T4727] pim6reg1: entered promiscuous mode [ 53.390972][ T4727] pim6reg1: entered allmulticast mode [ 53.430160][ T4725] infiniband syz2: set active [ 53.435504][ T4725] infiniband syz2: added veth0_to_bond [ 53.449850][ T4725] RDS/IB: syz2: added [ 53.457865][ T4725] smc: adding ib device syz2 with port count 1 [ 53.464676][ T4725] smc: ib device syz2 port 1 has pnetid [ 53.538901][ T4734] 9pnet: p9_errstr2errno: server reported unknown error [ 53.682282][ T4736] loop6: detected capacity change from 0 to 512 [ 53.692876][ T4736] EXT4-fs: Ignoring removed oldalloc option [ 53.706847][ T4736] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.412: Parent and EA inode have the same ino 15 [ 53.755958][ T4736] EXT4-fs (loop6): Remounting filesystem read-only [ 53.764010][ T4736] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.779021][ T4736] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 53.805888][ T4736] EXT4-fs (loop6): 1 orphan inode deleted [ 53.813107][ T4736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.826141][ T4736] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 53.833873][ T4736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.853423][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 53.853442][ T29] audit: type=1400 audit(1737241812.287:1013): avc: denied { ioctl } for pid=4744 comm="syz.5.414" path="socket:[9331]" dev="sockfs" ino=9331 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.944463][ T4752] pim6reg1: entered promiscuous mode [ 53.950083][ T4752] pim6reg1: entered allmulticast mode [ 53.965229][ T4750] loop5: detected capacity change from 0 to 128 [ 54.002653][ T29] audit: type=1400 audit(1737241812.427:1014): avc: denied { mounton } for pid=4749 comm="syz.5.417" path="/77/file0/file0" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 54.072618][ T29] audit: type=1326 audit(1737241812.507:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.5.421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x0 [ 54.181212][ T29] audit: type=1400 audit(1737241812.617:1016): avc: denied { create } for pid=4764 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.214804][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 54.256721][ T29] audit: type=1400 audit(1737241812.687:1017): avc: denied { mount } for pid=4772 comm="syz.1.427" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.348966][ T29] audit: type=1400 audit(1737241812.777:1018): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.392023][ T4783] veth0_vlan: entered allmulticast mode [ 54.417512][ T4783] €Â: renamed from vlan0 [ 54.438223][ T4785] loop4: detected capacity change from 0 to 1024 [ 54.462535][ T4785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.478648][ T4785] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.501926][ T29] audit: type=1400 audit(1737241812.937:1019): avc: denied { create } for pid=4789 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.507509][ T4790] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 54.544712][ T29] audit: type=1400 audit(1737241812.967:1020): avc: denied { relabelto } for pid=4789 comm="syz.6.434" name="pids.max" dev="cgroup2" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 54.574481][ T29] audit: type=1400 audit(1737241812.967:1021): avc: denied { associate } for pid=4789 comm="syz.6.434" name="pids.max" dev="cgroup2" ino=180 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 54.605395][ T29] audit: type=1400 audit(1737241812.977:1022): avc: denied { link } for pid=4784 comm="syz.4.433" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.726940][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.746935][ T4798] loop6: detected capacity change from 0 to 512 [ 54.800899][ T4798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.831922][ T4804] pim6reg1: entered promiscuous mode [ 54.838420][ T4804] pim6reg1: entered allmulticast mode [ 54.850260][ T4798] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.989623][ T4186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.995310][ T4812] syz.5.441[4812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.999308][ T4812] syz.5.441[4812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.013247][ T4812] syz.5.441[4812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.016364][ T4811] syz.4.440[4811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.061155][ T4811] syz.4.440[4811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.082035][ T4814] tipc: Enabling of bearer rejected, failed to enable media [ 55.105103][ T4811] syz.4.440[4811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.169051][ T4817] loop6: detected capacity change from 0 to 8192 [ 55.273364][ T4825] tipc: Started in network mode [ 55.279172][ T4825] tipc: Node identity c2ce88f199cc, cluster identity 4711 [ 55.288277][ T4825] tipc: Enabled bearer , priority 0 [ 55.343786][ T4825] syzkaller0: entered promiscuous mode [ 55.351025][ T4825] syzkaller0: entered allmulticast mode [ 55.358090][ T4825] tipc: Resetting bearer [ 55.374047][ T4824] tipc: Resetting bearer [ 55.395026][ T4824] tipc: Disabling bearer [ 55.462695][ T4830] loop6: detected capacity change from 0 to 1024 [ 55.480725][ T4830] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.493543][ T4830] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 55.503027][ T4830] EXT4-fs (loop6): orphan cleanup on readonly fs [ 55.511335][ T4830] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 55.521888][ T4830] EXT4-fs (loop6): Remounting filesystem read-only [ 55.528750][ T4830] EXT4-fs (loop6): 1 orphan inode deleted [ 55.537588][ T4830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.548405][ T4835] loop0: detected capacity change from 0 to 8192 [ 55.551061][ T4830] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 55.565817][ T4830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.996966][ T4855] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 56.009492][ T4855] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 56.020403][ T4855] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 56.121254][ T4859] loop4: detected capacity change from 0 to 512 [ 56.124375][ T4861] netlink: 'syz.5.460': attribute type 7 has an invalid length. [ 56.135850][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 56.160314][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.179577][ T4859] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.335615][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.406462][ T4878] netlink: 'syz.5.467': attribute type 7 has an invalid length. [ 56.415114][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 56.451064][ T4881] xfrm1: entered allmulticast mode [ 56.482519][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 56.552676][ T4891] loop5: detected capacity change from 0 to 1024 [ 56.571440][ T4891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.591734][ T4896] loop6: detected capacity change from 0 to 512 [ 56.601429][ T4896] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 56.627461][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.644394][ T4898] loop0: detected capacity change from 0 to 8192 [ 56.659865][ T4896] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.474: corrupted in-inode xattr: e_name out of bounds [ 56.677152][ T4896] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.474: couldn't read orphan inode 15 (err -117) [ 56.692306][ T4896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.714141][ T4896] Process accounting resumed [ 56.720988][ T4896] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.759097][ T4186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.784727][ T4912] netlink: 132 bytes leftover after parsing attributes in process `syz.5.480'. [ 56.795535][ T4912] netlink: 'syz.5.480': attribute type 10 has an invalid length. [ 56.811415][ T4912] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.815014][ T4914] netlink: 60 bytes leftover after parsing attributes in process `syz.6.481'. [ 56.876089][ T4918] tipc: Started in network mode [ 56.881144][ T4918] tipc: Node identity 7ec0942ecc7a, cluster identity 4711 [ 56.888437][ T4918] tipc: Enabled bearer , priority 0 [ 56.900043][ T4916] loop6: detected capacity change from 0 to 8192 [ 56.911228][ T4918] syzkaller0: entered promiscuous mode [ 56.917095][ T4918] syzkaller0: entered allmulticast mode [ 56.923057][ T4918] tipc: Resetting bearer [ 56.935037][ T4917] tipc: Resetting bearer [ 56.946740][ T4917] tipc: Disabling bearer [ 56.949498][ T4916] loop6: p1 p2 [ 56.956393][ T4916] loop6: p1 start 33556480 is beyond EOD, truncated [ 56.963724][ T4916] loop6: p2 size 79757312 extends beyond EOD, truncated [ 56.991782][ T3001] loop6: p1 p2 [ 56.995403][ T3001] loop6: p1 start 33556480 is beyond EOD, truncated [ 57.002956][ T3001] loop6: p2 size 79757312 extends beyond EOD, truncated [ 57.031968][ T3376] udevd[3376]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 57.531934][ T4941] loop0: detected capacity change from 0 to 512 [ 57.563504][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.613419][ T4941] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.711413][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.493'. [ 57.721340][ T4945] netlink: 84 bytes leftover after parsing attributes in process `syz.6.493'. [ 57.789500][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.295678][ T4971] loop4: detected capacity change from 0 to 512 [ 58.314256][ T4971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.336076][ T4971] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.383006][ T4981] @: renamed from vlan0 (while UP) [ 58.411095][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.646758][ T5001] loop6: detected capacity change from 0 to 512 [ 58.671596][ T5001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.685167][ T5001] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.733838][ T4186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.879137][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 58.879154][ T29] audit: type=1400 audit(1737241817.317:1182): avc: denied { read } for pid=5002 comm="syz.4.513" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.940824][ T29] audit: type=1400 audit(1737241817.347:1183): avc: denied { open } for pid=5002 comm="syz.4.513" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.965277][ T29] audit: type=1400 audit(1737241817.347:1184): avc: denied { ioctl } for pid=5002 comm="syz.4.513" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.325870][ T29] audit: type=1326 audit(1737241817.757:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7fc00000 [ 59.405539][ T29] audit: type=1400 audit(1737241817.797:1186): avc: denied { read } for pid=5027 comm="syz.5.523" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.428732][ T29] audit: type=1400 audit(1737241817.797:1187): avc: denied { open } for pid=5027 comm="syz.5.523" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.568091][ T5039] ip6gre1: entered allmulticast mode [ 59.828341][ T5045] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 59.855290][ T5045] geneve1: entered promiscuous mode [ 59.883669][ T5045] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 60.068936][ T29] audit: type=1326 audit(1737241818.497:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.6.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14851a5d29 code=0x7ffc0000 [ 60.072826][ T5050] loop4: detected capacity change from 0 to 2048 [ 60.092610][ T29] audit: type=1326 audit(1737241818.497:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.6.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14851a5d29 code=0x7ffc0000 [ 60.125069][ T29] audit: type=1326 audit(1737241818.537:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.6.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14851a5d29 code=0x7ffc0000 [ 60.148865][ T29] audit: type=1326 audit(1737241818.537:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.6.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14851a5d29 code=0x7ffc0000 [ 60.199547][ T5050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.319164][ T5050] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 60.331671][ T5050] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.331671][ T5050] [ 60.341544][ T5050] EXT4-fs (loop4): Total free blocks count 0 [ 60.347673][ T5050] EXT4-fs (loop4): Free/Dirty block details [ 60.353760][ T5050] EXT4-fs (loop4): free_blocks=0 [ 60.358877][ T5050] EXT4-fs (loop4): dirty_blocks=0 [ 60.363918][ T5050] EXT4-fs (loop4): Block reservation details [ 60.370053][ T5050] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 60.417443][ T5065] bond_slave_1: mtu less than device minimum [ 60.494110][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.504525][ T5071] pim6reg1: entered promiscuous mode [ 60.510201][ T5071] pim6reg1: entered allmulticast mode [ 60.731135][ T5084] syzkaller0: entered allmulticast mode [ 60.778438][ T5084] syzkaller0 (unregistering): left allmulticast mode [ 60.909550][ T5078] Set syz1 is full, maxelem 65536 reached [ 60.915423][ T5090] tipc: Started in network mode [ 60.920575][ T5090] tipc: Node identity 6, cluster identity 4711 [ 60.926814][ T5090] tipc: Node number set to 6 [ 61.190940][ T5120] pim6reg1: entered promiscuous mode [ 61.196328][ T5120] pim6reg1: entered allmulticast mode [ 61.275355][ T5122] bond0: (slave dummy0): Releasing backup interface [ 61.291557][ T5122] batman_adv: batadv0: Adding interface: dummy0 [ 61.297907][ T5122] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.323634][ T5122] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 61.356437][ T5125] syzkaller0: entered allmulticast mode [ 61.370777][ T5125] syzkaller0 (unregistering): left allmulticast mode [ 61.456478][ T4201] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.512425][ T4201] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.557583][ T5137] loop1: detected capacity change from 0 to 1024 [ 61.567172][ T4201] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.573033][ T5137] EXT4-fs: inline encryption not supported [ 61.597792][ T5137] EXT4-fs: inline encryption not supported [ 61.622083][ T5137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.641724][ T4201] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.662652][ T5148] syz.5.570[5148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.662845][ T5148] syz.5.570[5148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.674875][ T5148] syz.5.570[5148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.775120][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.815931][ T4201] bridge_slave_1: left allmulticast mode [ 61.822020][ T4201] bridge_slave_1: left promiscuous mode [ 61.827677][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.850065][ T4201] bridge_slave_0: left allmulticast mode [ 61.855801][ T4201] bridge_slave_0: left promiscuous mode [ 61.861964][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.082103][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 62.096173][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 62.114980][ T4201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.174835][ T4201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.230966][ T4201] bond0 (unregistering): Released all slaves [ 62.286537][ T5134] chnl_net:caif_netlink_parms(): no params data found [ 62.305827][ T5162] Set syz1 is full, maxelem 65536 reached [ 62.325791][ T5172] syzkaller0: entered promiscuous mode [ 62.331374][ T5172] syzkaller0: entered allmulticast mode [ 62.391581][ T4201] tipc: Left network mode [ 62.400151][ T5180] loop0: detected capacity change from 0 to 164 [ 62.407331][ T5180] Unable to read rock-ridge attributes [ 62.417689][ T5180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 62.429842][ T5178] pim6reg1: entered promiscuous mode [ 62.435535][ T5178] pim6reg1: entered allmulticast mode [ 62.474140][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.481666][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.492046][ T5134] bridge_slave_0: entered allmulticast mode [ 62.500940][ T5134] bridge_slave_0: entered promiscuous mode [ 62.518628][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.525789][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.555334][ T5134] bridge_slave_1: entered allmulticast mode [ 62.562489][ T5134] bridge_slave_1: entered promiscuous mode [ 62.570915][ T4201] hsr_slave_0: left promiscuous mode [ 62.576808][ T4201] hsr_slave_1: left promiscuous mode [ 62.582388][ T3373] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 62.590002][ T3373] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 62.599702][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.601964][ T3373] hid-generic 0000:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.607246][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.626476][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.634004][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.645409][ T4201] veth0_macvtap: left promiscuous mode [ 62.650999][ T4201] veth1_vlan: left promiscuous mode [ 62.689216][ T5194] netlink: 'syz.5.587': attribute type 3 has an invalid length. [ 62.749020][ T5200] ref_ctr increment failed for inode: 0x2af offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b394a80 [ 62.765655][ T5199] uprobe: syz.4.589:5199 failed to unregister, leaking uprobe [ 62.796217][ T4201] team0 (unregistering): Port device team_slave_1 removed [ 62.807924][ T4201] team0 (unregistering): Port device team_slave_0 removed [ 62.894864][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.911993][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.936168][ T5134] team0: Port device team_slave_0 added [ 62.946734][ T5134] team0: Port device team_slave_1 added [ 62.995672][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.002769][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.029067][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.043566][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.050748][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.077088][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.109112][ T5134] hsr_slave_0: entered promiscuous mode [ 63.115267][ T5134] hsr_slave_1: entered promiscuous mode [ 63.121694][ T5134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.131353][ T5134] Cannot create hsr debugfs directory [ 63.201450][ T5229] loop4: detected capacity change from 0 to 256 [ 63.209929][ T5229] vfat: Bad value for 'fmask' [ 63.315050][ T5134] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 63.333107][ T5134] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 63.364451][ T5134] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 63.387055][ T5134] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 63.537434][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.587113][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.605995][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.613162][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.644814][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.651964][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.776026][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.069272][ T5134] veth0_vlan: entered promiscuous mode [ 64.088122][ T5134] veth1_vlan: entered promiscuous mode [ 64.113664][ T5134] veth0_macvtap: entered promiscuous mode [ 64.122053][ T5134] veth1_macvtap: entered promiscuous mode [ 64.134614][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.145255][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.156463][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.169573][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.180553][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.191724][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.201900][ T5134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.210721][ T5134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.219515][ T5134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.228646][ T5134] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.272179][ T5271] selinux_netlink_send: 58 callbacks suppressed [ 64.272198][ T5271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5271 comm=syz.5.609 [ 64.291409][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 64.291433][ T29] audit: type=1400 audit(1737241822.717:1384): avc: denied { mount } for pid=5134 comm="syz-executor" name="/" dev="gadgetfs" ino=4251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.304420][ T5271] netlink: 'syz.5.609': attribute type 1 has an invalid length. [ 64.337853][ T5271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.416171][ T5271] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.427514][ T5271] bond2: (slave batadv1): making interface the new active one [ 64.437353][ T5271] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 64.529557][ T29] audit: type=1400 audit(1737241822.957:1385): avc: denied { setopt } for pid=5283 comm="syz.7.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.686902][ T5295] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.989112][ T5305] xt_connbytes: Forcing CT accounting to be enabled [ 64.995876][ T5305] set match dimension is over the limit! [ 65.033627][ T29] audit: type=1326 audit(1737241823.467:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.058010][ T29] audit: type=1326 audit(1737241823.467:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.081600][ T29] audit: type=1326 audit(1737241823.467:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.105200][ T29] audit: type=1326 audit(1737241823.467:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.129092][ T29] audit: type=1326 audit(1737241823.467:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.152875][ T29] audit: type=1326 audit(1737241823.467:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.176520][ T29] audit: type=1326 audit(1737241823.467:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.199871][ T29] audit: type=1326 audit(1737241823.467:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28345c5d29 code=0x7ffc0000 [ 65.248695][ T5309] netlink: 'syz.4.623': attribute type 10 has an invalid length. [ 65.256873][ T5309] geneve1: entered promiscuous mode [ 65.269842][ T5309] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 65.290653][ T5317] : renamed from bond0 (while UP) [ 65.347276][ T5321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.627'. [ 65.425699][ T5328] loop1: detected capacity change from 0 to 4096 [ 65.434418][ T5330] bond_slave_1: mtu less than device minimum [ 65.459441][ T5328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.498514][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.569408][ T5346] syzkaller0: entered allmulticast mode [ 65.743523][ T5362] loop2: detected capacity change from 0 to 7 [ 65.848324][ T5367] syzkaller0: entered promiscuous mode [ 65.854106][ T5367] syzkaller0: entered allmulticast mode [ 65.886406][ T5370] ebtables: ebtables: counters copy to user failed while replacing table [ 66.182185][ T5387] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 66.188766][ T5387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.196560][ T5387] vhci_hcd vhci_hcd.0: Device attached [ 66.203534][ T5388] vhci_hcd: connection closed [ 66.203664][ T4297] vhci_hcd: stop threads [ 66.212904][ T4297] vhci_hcd: release socket [ 66.217504][ T4297] vhci_hcd: disconnect device [ 66.707497][ T5414] syzkaller0: entered allmulticast mode [ 66.722136][ T5414] syzkaller0 (unregistering): left allmulticast mode [ 67.028357][ T5435] loop0: detected capacity change from 0 to 256 [ 67.050233][ T5435] vfat: Unknown parameter '' [ 67.169508][ T5442] netlink: 'syz.5.676': attribute type 10 has an invalid length. [ 67.177372][ T5442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.676'. [ 67.242897][ T5442] bridge0: port 3(ipvlan0) entered blocking state [ 67.249518][ T5442] bridge0: port 3(ipvlan0) entered disabled state [ 67.279595][ T5442] ipvlan0: entered allmulticast mode [ 67.285058][ T5442] veth0_vlan: entered allmulticast mode [ 67.326872][ T5442] ipvlan0: left allmulticast mode [ 67.332062][ T5442] veth0_vlan: left allmulticast mode [ 67.368146][ T5442] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 67.451867][ T5449] pim6reg1: entered promiscuous mode [ 67.457249][ T5449] pim6reg1: entered allmulticast mode [ 67.822146][ T5480] loop4: detected capacity change from 0 to 512 [ 67.860573][ T5480] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.687: corrupted in-inode xattr: e_value size too large [ 67.943869][ T5480] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.687: couldn't read orphan inode 15 (err -117) [ 67.965311][ T5479] loop7: detected capacity change from 0 to 8192 [ 67.987089][ T5480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.999046][ T5479] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 68.062536][ T5480] EXT4-fs (loop4): shut down requested (2) [ 68.085269][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.103551][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.127138][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.145898][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.175212][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.177938][ T5506] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.203435][ T5508] loop7: detected capacity change from 0 to 256 [ 68.210937][ T5506] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.232597][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.264033][ T5508] FAT-fs (loop7): Directory bread(block 64) failed [ 68.270745][ T5508] FAT-fs (loop7): Directory bread(block 65) failed [ 68.277628][ T5508] FAT-fs (loop7): Directory bread(block 66) failed [ 68.284691][ T5508] FAT-fs (loop7): Directory bread(block 67) failed [ 68.291546][ T5508] FAT-fs (loop7): Directory bread(block 68) failed [ 68.294696][ T5480] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 68.298247][ T5508] FAT-fs (loop7): Directory bread(block 69) failed [ 68.314601][ T5508] FAT-fs (loop7): Directory bread(block 70) failed [ 68.332067][ T5508] FAT-fs (loop7): Directory bread(block 71) failed [ 68.339075][ T5508] FAT-fs (loop7): Directory bread(block 72) failed [ 68.345911][ T5508] FAT-fs (loop7): Directory bread(block 73) failed [ 68.368018][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.402360][ T5508] syz.7.691: attempt to access beyond end of device [ 68.402360][ T5508] loop7: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 68.424252][ T5508] syz.7.691: attempt to access beyond end of device [ 68.424252][ T5508] loop7: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 68.426752][ T5520] loop5: detected capacity change from 0 to 256 [ 68.449019][ T5520] vfat: Unknown parameter '' [ 68.520304][ T5530] ip6gretap0: entered promiscuous mode [ 68.529067][ T5530] batadv_slave_0: entered promiscuous mode [ 68.544426][ T5530] ip6gretap0: left promiscuous mode [ 68.554919][ T5530] batadv_slave_0: left promiscuous mode [ 68.650331][ T5537] loop5: detected capacity change from 0 to 2048 [ 68.694833][ T5537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.714334][ T5541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.703'. [ 68.821673][ T5545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.705'. [ 68.922470][ T5543] loop7: detected capacity change from 0 to 8192 [ 69.003449][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.191615][ T5558] loop0: detected capacity change from 0 to 128 [ 69.270467][ T5558] syz.0.710: attempt to access beyond end of device [ 69.270467][ T5558] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 69.378037][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 69.378053][ T29] audit: type=1400 audit(1737241827.807:1561): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.446517][ T29] audit: type=1400 audit(1737241827.847:1562): avc: denied { append } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.470086][ T29] audit: type=1400 audit(1737241827.847:1563): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.494905][ T29] audit: type=1400 audit(1737241827.847:1564): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.520911][ T29] audit: type=1400 audit(1737241827.877:1565): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.542964][ T29] audit: type=1400 audit(1737241827.877:1566): avc: denied { create } for pid=5564 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.562624][ T29] audit: type=1400 audit(1737241827.877:1567): avc: denied { open } for pid=5564 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.582149][ T29] audit: type=1400 audit(1737241827.877:1568): avc: denied { perfmon } for pid=5564 comm="syz.4.713" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.603324][ T29] audit: type=1400 audit(1737241827.877:1569): avc: denied { kernel } for pid=5564 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.634216][ T29] audit: type=1400 audit(1737241828.017:1570): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 69.820392][ T5573] ip6gretap1: entered allmulticast mode [ 69.827343][ T5573] bridge0: port 3(ip6gretap1) entered blocking state [ 69.834307][ T5573] bridge0: port 3(ip6gretap1) entered disabled state [ 69.849705][ T5573] ip6gretap1: entered promiscuous mode [ 69.855529][ T5573] bridge0: port 3(ip6gretap1) entered blocking state [ 69.862333][ T5573] bridge0: port 3(ip6gretap1) entered forwarding state [ 69.876430][ T5574] bridge0: port 4(syz_tun) entered blocking state [ 69.883096][ T5574] bridge0: port 4(syz_tun) entered disabled state [ 69.944168][ T5573] netlink: 'syz.4.716': attribute type 10 has an invalid length. [ 69.963854][ T5574] syz_tun: entered allmulticast mode [ 69.975307][ T5574] syz_tun: entered promiscuous mode [ 69.980964][ T5574] bridge0: port 4(syz_tun) entered blocking state [ 69.987466][ T5574] bridge0: port 4(syz_tun) entered forwarding state [ 69.995967][ T5582] tipc: Enabling of bearer rejected, failed to enable media [ 70.005366][ T5576] lo speed is unknown, defaulting to 1000 [ 70.021504][ T5573] bridge0: port 4(syz_tun) entered disabled state [ 70.028106][ T5573] bridge0: port 3(ip6gretap1) entered disabled state [ 70.034971][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.042248][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.052745][ T5587] netlink: 256 bytes leftover after parsing attributes in process `syz.1.722'. [ 70.058542][ T5573] bridge0: port 4(syz_tun) entered blocking state [ 70.069040][ T5573] bridge0: port 4(syz_tun) entered forwarding state [ 70.075784][ T5573] bridge0: port 3(ip6gretap1) entered blocking state [ 70.082763][ T5573] bridge0: port 3(ip6gretap1) entered forwarding state [ 70.089876][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.097109][ T5573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.104433][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.111642][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.121324][ T5573] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.130946][ T5576] lo speed is unknown, defaulting to 1000 [ 70.145204][ T5576] lo speed is unknown, defaulting to 1000 [ 70.347799][ T5576] infiniband syz0: set active [ 70.353428][ T5576] infiniband syz0: added lo [ 70.362962][ T3435] lo speed is unknown, defaulting to 1000 [ 70.426150][ T5576] RDS/IB: syz0: added [ 70.436330][ T5576] smc: adding ib device syz0 with port count 1 [ 70.442741][ T5576] smc: ib device syz0 port 1 has pnetid [ 70.468592][ T1031] lo speed is unknown, defaulting to 1000 [ 70.483019][ T5624] syzkaller0: entered promiscuous mode [ 70.488834][ T5624] syzkaller0: entered allmulticast mode [ 70.497341][ T5576] lo speed is unknown, defaulting to 1000 [ 70.540410][ T5627] pim6reg1: entered promiscuous mode [ 70.545944][ T5627] pim6reg1: entered allmulticast mode [ 70.557693][ T5576] lo speed is unknown, defaulting to 1000 [ 70.646334][ T5636] loop7: detected capacity change from 0 to 512 [ 70.673007][ T5636] EXT4-fs: Ignoring removed nobh option [ 70.698110][ T5576] lo speed is unknown, defaulting to 1000 [ 70.711099][ T5636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.738415][ T5636] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.785904][ T5576] lo speed is unknown, defaulting to 1000 [ 70.810884][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 70.810928][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.811013][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.811690][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.811713][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.832834][ T5636] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.742: bg 0: block 224: padding at end of block bitmap is not set [ 70.833037][ T5636] EXT4-fs (loop7): Remounting filesystem read-only [ 70.835733][ T5652] netlink: 'syz.5.748': attribute type 27 has an invalid length. [ 70.854982][ T5643] : (slave batadv0): Releasing backup interface [ 70.899401][ T5134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.942426][ T5576] lo speed is unknown, defaulting to 1000 [ 70.964045][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.972428][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.981830][ T5649] batman_adv: batadv0: Interface activated: dummy0 [ 70.988445][ T5649] batadv0: mtu less than device minimum [ 70.994934][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.005858][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.016848][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.027715][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.038563][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.049651][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.060578][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.071871][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.082646][ T5649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.098894][ T5656] : renamed from bond0 (while UP) [ 71.110468][ T5576] lo speed is unknown, defaulting to 1000 [ 71.116539][ T5659] loop1: detected capacity change from 0 to 164 [ 71.117088][ T5660] netlink: 'syz.7.751': attribute type 4 has an invalid length. [ 71.138594][ T5659] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 71.345131][ T5677] loop5: detected capacity change from 0 to 4096 [ 71.371322][ T5677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.416798][ T5677] syz.5.760: attempt to access beyond end of device [ 71.416798][ T5677] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 71.465484][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.513753][ T5686] loop5: detected capacity change from 0 to 512 [ 71.554863][ T5686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.570255][ T5686] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.598675][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.676010][ T5691] loop5: detected capacity change from 0 to 256 [ 71.775476][ T5695] loop5: detected capacity change from 0 to 1024 [ 71.791015][ T5695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.874038][ T5700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.767'. [ 71.934360][ T5709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.951493][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.970434][ T5711] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 71.982357][ T5709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.035809][ T5715] program syz.5.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.052294][ T5709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.102541][ T5709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.168052][ T5709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.182126][ T5709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194455][ T5709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.212022][ T5709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.214104][ T5728] rdma_rxe: rxe_newlink: failed to add lo [ 72.293804][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.7.782'. [ 72.305479][ T5731] ref_ctr increment failed for inode: 0x35b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881043139c0 [ 72.324064][ T5731] ref_ctr increment failed for inode: 0x35b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881043139c0 [ 72.335751][ T5730] uprobe: syz.5.781:5730 failed to unregister, leaking uprobe [ 72.428854][ T5730] uprobe: syz.5.781:5730 failed to unregister, leaking uprobe [ 72.541520][ T5741] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 72.548456][ T5741] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 72.556326][ T5741] vhci_hcd vhci_hcd.0: Device attached [ 72.584084][ T5744] vhci_hcd: connection closed [ 72.584353][ T28] vhci_hcd: stop threads [ 72.593545][ T28] vhci_hcd: release socket [ 72.598058][ T28] vhci_hcd: disconnect device [ 72.611610][ T5747] loop5: detected capacity change from 0 to 764 [ 72.656086][ T5751] syz.0.789[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.656212][ T5751] syz.0.789[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.669222][ T5751] syz.0.789[5751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.781277][ T5759] rdma_rxe: rxe_newlink: failed to add lo [ 72.849753][ T5763] loop0: detected capacity change from 0 to 256 [ 72.863029][ T5717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 72.892325][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.901397][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.134179][ T5777] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.161442][ T5777] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.232129][ T5777] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.282464][ T5777] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.325459][ T5777] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.337270][ T5777] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.349176][ T5777] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.362082][ T5777] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.598032][ T5804] ref_ctr increment failed for inode: 0xf5 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104310540 [ 73.611118][ T5803] uprobe: syz.7.813:5803 failed to unregister, leaking uprobe [ 73.728440][ T5800] loop0: detected capacity change from 0 to 8192 [ 73.730578][ T5808] loop7: detected capacity change from 0 to 256 [ 73.740444][ T5800] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 73.867708][ T5820] delete_channel: no stack [ 73.936162][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.824'. [ 73.970119][ T5834] syzkaller0: entered allmulticast mode [ 73.980099][ T5834] syzkaller0 (unregistering): left allmulticast mode [ 74.045005][ T5842] loop7: detected capacity change from 0 to 512 [ 74.054971][ T5842] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.067621][ T5842] EXT4-fs (loop7): 1 truncate cleaned up [ 74.074304][ T5842] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.154325][ T5849] tipc: Enabled bearer , priority 0 [ 74.173927][ T5849] syzkaller0: entered promiscuous mode [ 74.179510][ T5849] syzkaller0: entered allmulticast mode [ 74.186934][ T5849] tipc: Resetting bearer [ 74.214995][ T5848] tipc: Resetting bearer [ 74.250934][ T5848] tipc: Disabling bearer [ 74.252908][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 74.267065][ T5854] hsr_slave_0: left promiscuous mode [ 74.273462][ T5854] hsr_slave_1: left promiscuous mode [ 74.389094][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 74.389110][ T29] audit: type=1400 audit(1737241832.827:1796): avc: denied { read } for pid=5861 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.415349][ T5867] loop4: detected capacity change from 0 to 2048 [ 74.424385][ T5867] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.431083][ T5867] EXT4-fs: Ignoring removed i_version option [ 74.451155][ T5867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.466569][ T29] audit: type=1400 audit(1737241832.897:1797): avc: denied { read write open } for pid=5866 comm="syz.4.839" path="/183/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.522878][ T29] audit: type=1400 audit(1737241832.957:1798): avc: denied { write } for pid=5873 comm="syz.0.841" name="route" dev="proc" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.546251][ T29] audit: type=1400 audit(1737241832.957:1799): avc: denied { bind } for pid=5875 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.565779][ T29] audit: type=1400 audit(1737241832.957:1800): avc: denied { name_bind } for pid=5875 comm="syz.5.842" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.587817][ T29] audit: type=1400 audit(1737241832.957:1801): avc: denied { node_bind } for pid=5875 comm="syz.5.842" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 74.610727][ T29] audit: type=1326 audit(1737241832.977:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 74.635016][ T29] audit: type=1326 audit(1737241832.977:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 74.658575][ T29] audit: type=1326 audit(1737241832.977:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 74.682017][ T29] audit: type=1326 audit(1737241832.977:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a275d29 code=0x7ffc0000 [ 74.918951][ T5134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.376333][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.847'. [ 75.387898][ T5891] gretap0: entered promiscuous mode [ 75.394895][ T5891] gretap0: left promiscuous mode [ 75.603293][ T5896] loop0: detected capacity change from 0 to 128 [ 75.680070][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 75.692398][ T5902] loop0: detected capacity change from 0 to 512 [ 75.699600][ T5902] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 75.708155][ T5902] EXT4-fs (loop0): invalid journal inode [ 75.753435][ T5906] loop0: detected capacity change from 0 to 128 [ 75.772611][ T5906] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.786667][ T5906] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.374852][ T5916] loop5: detected capacity change from 0 to 2048 [ 76.389941][ T5916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.407879][ T5916] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.856: bg 0: block 234: padding at end of block bitmap is not set [ 76.424160][ T5916] EXT4-fs (loop5): Remounting filesystem read-only [ 76.442856][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.545023][ T5922] lo speed is unknown, defaulting to 1000 [ 76.577219][ T5923] pim6reg1: entered promiscuous mode [ 76.582735][ T5923] pim6reg1: entered allmulticast mode [ 76.611221][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.891699][ T5943] loop7: detected capacity change from 0 to 2048 [ 76.899102][ T5943] EXT4-fs: inline encryption not supported [ 76.944413][ T5943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.022862][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5952 comm=syz.1.872 [ 77.035757][ T5952] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 77.059231][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.074631][ T5952] bond0: (slave bridge1): making interface the new active one [ 77.083143][ T5952] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 77.096075][ T5952] vlan2: entered promiscuous mode [ 77.101394][ T5952] bond0: entered promiscuous mode [ 77.106581][ T5952] bridge1: entered promiscuous mode [ 77.112324][ T5952] vlan2: entered allmulticast mode [ 77.117641][ T5952] bond0: entered allmulticast mode [ 77.123256][ T5952] bridge1: entered allmulticast mode [ 77.176222][ T5962] netlink: 96 bytes leftover after parsing attributes in process `syz.0.875'. [ 77.202299][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.877'. [ 77.222285][ T5966] bridge_slave_1: left allmulticast mode [ 77.229353][ T5966] bridge_slave_1: left promiscuous mode [ 77.235136][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.245551][ T5966] bridge_slave_0: left allmulticast mode [ 77.252188][ T5966] bridge_slave_0: left promiscuous mode [ 77.257957][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.319399][ T5955] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.340029][ T5955] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 77.353051][ T5955] EXT4-fs (loop7): This should not happen!! Data will be lost [ 77.353051][ T5955] [ 77.362994][ T5955] EXT4-fs (loop7): Total free blocks count 0 [ 77.369125][ T5955] EXT4-fs (loop7): Free/Dirty block details [ 77.375235][ T5955] EXT4-fs (loop7): free_blocks=2415919104 [ 77.381029][ T5955] EXT4-fs (loop7): dirty_blocks=8192 [ 77.386345][ T5955] EXT4-fs (loop7): Block reservation details [ 77.392725][ T5955] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 77.409898][ T5971] ip6gretap1: entered allmulticast mode [ 77.416967][ T5971] bridge0: port 1(ip6gretap1) entered blocking state [ 77.423838][ T5971] bridge0: port 1(ip6gretap1) entered disabled state [ 77.431829][ T5971] ip6gretap1: entered promiscuous mode [ 77.437694][ T5971] bridge0: port 1(ip6gretap1) entered blocking state [ 77.444547][ T5971] bridge0: port 1(ip6gretap1) entered forwarding state [ 77.451539][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.466629][ T5971] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 77.496151][ T5971] bridge0: port 1(ip6gretap1) entered disabled state [ 77.523792][ T5971] bridge0: port 1(ip6gretap1) entered blocking state [ 77.531020][ T5971] bridge0: port 1(ip6gretap1) entered forwarding state [ 77.541578][ T4201] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 77.550423][ T5971] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.563982][ T5973] bridge0: port 2(syz_tun) entered blocking state [ 77.570500][ T5973] bridge0: port 2(syz_tun) entered disabled state [ 77.580863][ T5973] syz_tun: entered allmulticast mode [ 77.586855][ T5973] syz_tun: entered promiscuous mode [ 77.596239][ T5973] bridge0: port 2(syz_tun) entered blocking state [ 77.602847][ T5973] bridge0: port 2(syz_tun) entered forwarding state [ 77.717898][ T5977] syz.0.883[5977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.718001][ T5977] syz.0.883[5977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.729810][ T5977] syz.0.883[5977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.767137][ T5979] loop4: detected capacity change from 0 to 4096 [ 77.801902][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 77.811543][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 77.846658][ T5981] IPVS: stopping master sync thread 5984 ... [ 77.853848][ T5984] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 77.886417][ T5986] loop7: detected capacity change from 0 to 1024 [ 77.906282][ T5986] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.917457][ T5986] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.939235][ T5979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.949417][ T5972] net_ratelimit: 15 callbacks suppressed [ 77.949438][ T5972] Set syz1 is full, maxelem 65536 reached [ 77.962053][ T5979] syz.4.885: attempt to access beyond end of device [ 77.962053][ T5979] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.996213][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.010816][ T5986] JBD2: no valid journal superblock found [ 78.016652][ T5986] EXT4-fs (loop7): Could not load journal inode [ 78.063319][ T5993] syzkaller0: entered promiscuous mode [ 78.069047][ T5993] syzkaller0: entered allmulticast mode [ 78.110212][ T5991] loop0: detected capacity change from 0 to 2048 [ 78.184920][ T6004] xt_hashlimit: size too large, truncated to 1048576 [ 78.244192][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.278933][ T5991] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.888'. [ 78.308811][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.517386][ T6019] loop1: detected capacity change from 0 to 4096 [ 78.542237][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.579707][ T6019] syz.1.898: attempt to access beyond end of device [ 78.579707][ T6019] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 78.635375][ T6028] loop7: detected capacity change from 0 to 256 [ 78.648647][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.667267][ T6028] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.717222][ T6028] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 78.851681][ T6009] loop5: detected capacity change from 0 to 8192 [ 78.859827][ T6009] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 79.002149][ T6052] futex_wake_op: syz.4.905 tries to shift op by -1; fix this program [ 79.220592][ T6063] syzkaller1: entered promiscuous mode [ 79.226134][ T6063] syzkaller1: entered allmulticast mode [ 79.234251][ T6063] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 79.266624][ T6066] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.311147][ T6068] syz.7.913[6068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.311208][ T6068] syz.7.913[6068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.322787][ T6068] syz.7.913[6068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.340635][ T6066] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.406999][ T6073] loop7: detected capacity change from 0 to 128 [ 79.419981][ T6066] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.433268][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 79.433285][ T29] audit: type=1326 audit(1737241837.867:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.447917][ T6073] syz.7.915: attempt to access beyond end of device [ 79.447917][ T6073] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 79.465018][ T29] audit: type=1326 audit(1737241837.867:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.499346][ T6073] syz.7.915: attempt to access beyond end of device [ 79.499346][ T6073] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 79.500151][ T29] audit: type=1326 audit(1737241837.917:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.537601][ T29] audit: type=1326 audit(1737241837.917:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.537703][ T6073] syz.7.915: attempt to access beyond end of device [ 79.537703][ T6073] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 79.561135][ T29] audit: type=1326 audit(1737241837.917:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.598751][ T29] audit: type=1326 audit(1737241837.947:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.622648][ T29] audit: type=1326 audit(1737241837.947:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.637314][ T6073] syz.7.915: attempt to access beyond end of device [ 79.637314][ T6073] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 79.646202][ T29] audit: type=1326 audit(1737241837.947:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.660788][ T6073] syz.7.915: attempt to access beyond end of device [ 79.660788][ T6073] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 79.683352][ T29] audit: type=1326 audit(1737241837.947:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.683390][ T29] audit: type=1326 audit(1737241837.947:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5bd5d29 code=0x7ffc0000 [ 79.706786][ T6075] loop0: detected capacity change from 0 to 512 [ 79.721050][ T6073] syz.7.915: attempt to access beyond end of device [ 79.721050][ T6073] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 79.764912][ T6066] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.773533][ T6073] syz.7.915: attempt to access beyond end of device [ 79.773533][ T6073] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 79.789138][ T6073] syz.7.915: attempt to access beyond end of device [ 79.789138][ T6073] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 79.808632][ T6078] syz.1.917[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.809453][ T6078] syz.1.917[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.821077][ T6078] syz.1.917[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.834008][ T6075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.858778][ T6075] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.878778][ T6066] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.888816][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.927600][ T6066] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.941229][ T6066] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945853][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 79.954765][ T6066] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.956961][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.972807][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.980440][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.987951][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.995491][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.005506][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.013022][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.020502][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.027912][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.035381][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.043115][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.050593][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.058226][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.065678][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.073758][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.081211][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.088644][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.096078][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.103697][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.111197][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.118833][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.126402][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.133843][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.141281][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.148733][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.156200][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.163637][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.171124][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.178773][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.186260][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.193893][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.201326][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.208910][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.216310][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.223960][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.231413][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.238855][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.259221][ T3374] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 80.335141][ T6094] loop7: detected capacity change from 0 to 764 [ 80.571573][ T6119] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 80.580151][ T6119] ref_ctr increment failed for inode: 0x183 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881043139c0 [ 80.779507][ T6133] veth4: entered allmulticast mode [ 81.132678][ T6142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.258704][ T6146] lo speed is unknown, defaulting to 1000 [ 81.596284][ T6166] loop1: detected capacity change from 0 to 128 [ 81.734092][ T6170] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.811887][ T6170] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.855583][ T6180] pim6reg1: entered promiscuous mode [ 81.863140][ T6180] pim6reg1: entered allmulticast mode [ 81.871997][ T6170] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.942824][ T6170] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.053065][ T6189] loop5: detected capacity change from 0 to 164 [ 82.057788][ T6170] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.074642][ T6170] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.095916][ T6170] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.101185][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 82.115699][ T6170] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.221144][ T6198] syz.7.969[6198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.230156][ T6198] syzkaller0: entered allmulticast mode [ 82.271848][ T6198] syzkaller0 (unregistering): left allmulticast mode [ 82.320432][ T6195] loop5: detected capacity change from 0 to 512 [ 82.395010][ T6195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.408661][ T6195] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.472133][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.754559][ T6217] ================================================================== [ 82.762856][ T6217] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 82.770864][ T6217] [ 82.773274][ T6217] write to 0xffff888110942828 of 8 bytes by task 6239 on cpu 0: [ 82.780979][ T6217] cpu_map_kthread_run+0x49b/0x11f0 [ 82.786196][ T6217] kthread+0x1d1/0x210 [ 82.790303][ T6217] ret_from_fork+0x4b/0x60 [ 82.794750][ T6217] ret_from_fork_asm+0x1a/0x30 [ 82.799539][ T6217] [ 82.801891][ T6217] read to 0xffff888110942828 of 8 bytes by task 6217 on cpu 1: [ 82.809468][ T6217] bq_flush_to_queue+0x125/0x360 [ 82.814436][ T6217] __cpu_map_flush+0x38/0x80 [ 82.819089][ T6217] xdp_do_flush+0x101/0x170 [ 82.823690][ T6217] bpf_test_run_xdp_live+0xc8b/0x1040 [ 82.829118][ T6217] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 82.834449][ T6217] bpf_prog_test_run+0x20f/0x3a0 [ 82.839610][ T6217] __sys_bpf+0x400/0x7a0 [ 82.843880][ T6217] __x64_sys_bpf+0x43/0x50 [ 82.848419][ T6217] x64_sys_call+0x2914/0x2dc0 [ 82.853136][ T6217] do_syscall_64+0xc9/0x1c0 [ 82.857683][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.863732][ T6217] [ 82.866178][ T6217] value changed: 0xffff888110bf3070 -> 0x0000000000000000 [ 82.873509][ T6217] [ 82.876285][ T6217] Reported by Kernel Concurrency Sanitizer on: [ 82.883222][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.7.976 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 82.894015][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.904277][ T6217] ==================================================================